Legal

Privacy Policy

Last updated May 2026

Information collection

We may collect personal, transactional, and technical information required for operational and compliance purposes. This includes your full name, email address, mailing address, phone number, government-issued identification, and payment details.

We also collect information about how you use our platform, including pages visited, actions taken, and device and browser information. Payment card data is processed and stored by our PCI-compliant payment provider and is never held on AAQ Gold servers.

Use of information

Collected information may be used for: identity verification and KYC compliance, anti-money laundering checks, customer support, transaction processing, and security monitoring.

We do not sell, rent, or share your personal information with third parties for their marketing purposes. We share information only with service providers who assist in operating our platform, such as payment processors, vault operators, and courier services, and only to the extent necessary.

Legal basis for processing

We process your personal information on the basis of contractual necessity to fulfill your purchase agreement. In some cases we process data based on our legitimate business interests, such as fraud prevention and security. Where required by law, including AML and KYC regulations, we process data to meet our compliance obligations.

Data protection

We implement reasonable technical and organizational measures to protect customer data. All data in transit is protected by TLS 1.3. Data at rest is encrypted with AES-256. Our infrastructure is hosted with SOC 2 Type II certified providers. Access to personal data is restricted to staff who require it to perform their duties.

Third-party sharing

Information may only be shared with authorized service providers, regulators, or legal authorities when required. This includes sharing with regulatory bodies under our AML and compliance obligations, vault operators for storage and delivery, and payment processors for transaction handling. We do not sell data to any third party.

Data retention

We retain your account and transaction data for as long as your account is active and for a minimum of seven years after your last transaction to comply with financial regulations. You may request deletion of your account at any time; records required by law will be retained as required and then deleted.

Your rights

Depending on your jurisdiction, you may have the right to access the personal data we hold about you, request correction of inaccurate data, request deletion of your data, object to certain processing, and receive a portable copy of your data. To exercise any of these rights, contact us at privacy@aaqgold.com. We will respond within thirty days.

Cookies

Our website may use cookies and analytics technologies to improve user experience and platform functionality. We use essential cookies required for authentication and security. Where we use analytics cookies, we will request your consent and you may withdraw it at any time through your browser settings.

Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email at least fourteen days before the changes take effect. Continued use of the platform after that date constitutes acceptance of the updated policy.

Contact

For any privacy-related questions or to exercise your rights, please contact our Data Protection team at privacy@aaqgold.com.