| Before | After | ||
|---|---|---|---|
| 0 | Legal Privacy Notice Last Updated: 17 June 2026 For residents of the United States and US Territories, please refer to the US Privacy Notice. | 0 | Privacy Hub Privacy Notice Privacy Notice Last updated: 30 September 2026 Kraken U.S. Privacy Notice - Payward Interactive, Inc.,Kraken Securities LLC Kraken Adviser LLC, Payward Accredited LLC and Kraken Lending LLC d.b.a. Kraken The following Kraken Privacy Notice, and GLBA Notice and Disclosure applies to you if you are an individual who resides in the United States and US Territories, and uses the services or websites of Payward Interactive, Inc., Kraken Securities LLC, Kraken Adviser LLC, Payward Accredited LLC and Kraken Lending LLC (d.b.a Kraken). |
| 1 | For residents of Brazil, a Portuguese translation of this Privacy Notice is available here for ease of reference and understanding. | 1 | For residents of the United States, the terms in this Privacy Notice take precedence over the terms in Kraken's Global Privacy Notice. |
| 2 | While we have taken care to ensure consistency between versions, in the event of any discrepancies, the English version shall prevail. 1. | 2 | Important information about procedures: To help the government fight the funding of terrorism and money laundering activities, Federal law requires all financial institutions to obtain, verify, and record information that identifies each person who opens an account. |
| 3 | Introduction This privacy notice applies to the processing activities performed by Kraken to the personal data of its clients, prospective clients, individuals Kraken clients transact with, and users of Kraken's products and services accessed through our websites, web and mobile applications, white-label, embedded, or API-based partner integrations, products that run on-chain (such as Kraken Verify), as well as website visitors. | 3 | What this means for you: When you open an account, we will ask for your name, address, date of birth, and other information that will allow us to identify you. |
| 4 | Your privacy is of the utmost importance to us. | 4 | We may also ask to see your driver's license or other identifying documents Introduction As part of our daily business operations, we collect personal information from our clients and prospective clients in order to provide them with our products, related support and services (collectively, " Services "), and to ensure that we can meet their needs when providing these products and services, as well as when providing them with any respective information. |
| 5 | It is our policy to safeguard the confidentiality of information and respect the privacy of individuals. | 5 | When you visit our website, social media pages, or other online properties (collectively " Sites "), we may also collect and use certain information about you. |
| 6 | Please see below for information about how we manage personal data, and for information about your rights with respect to the processing of your personal data. 2. | 6 | Your privacy is of utmost importance to us, and it is our policy to safeguard and respect the confidentiality of information and the privacy of individuals. |
| 7 | Definitions The following terms are defined as follows: 2.1 "AML" means anti-money laundering. 2.2 "Digital Asset" means any digital representation of value that may be traded via Kraken's services, excluding non-fungible tokens. 2.3 "Kraken", "We", "Us", refers collectively to Payward, Inc. and its subsidiaries. 2.4 "Personal data" refers to any information relating to an identified or identifiable natural person, including names, identification numbers, location data, an online identifier, or to one or more factors specific to the physical, economic, cultural or social identity of a natural person. 2.5 "DeFi" means decentralised finance systems that run on blockchain technology and use smart contracts to enable peer-to-peer financial activities such as trading, lending, borrowing, earning interest, or providing liquidity. 3. | 7 | This Privacy Notice explains how Kraken collects, uses, and manages the personal information we receive from you, or via a third party, in connection with our provision of services to you or which we collect from your use of our services and/or our website. |
| 8 | Your Data Controller Our products and services are provided through local operating entities that are part of the Kraken group of companies. | 8 | The Privacy Notice also informs you of your rights with respect to the processing of your personal information and the choices you can make about what information you share. |
| 9 | You are contracting with Kraken as specified in our Terms of Service (unless you are contracting for MIFID II financial instruments, including derivatives, with Payward Europe Digital Solutions (CY) Limited then these Terms of Service apply). | 9 | The Privacy Notice applies to all products and services offered or provided by Kraken to U.S. clients, potential U.S. clients, individuals U.S. clients transact with, and U.S. users of Kraken's products and services accessed through our websites, web and mobile applications, white-label, embedded, or API-based partner integrations, or products that run on-chain (such as Kraken Verify), as well as U.S. website visitors (including any services, terms, or communications that reference, display, or link to this Privacy Notice), except where a particular product, service, or jurisdiction has a separate privacy notice. |
| 10 | The company you are contracting with is your Data Controller, and is responsible for the collection, use, disclosure, retention and protection of your personal data in accordance with our global privacy standards, this Privacy Notice, as well as any applicable national laws. 4. | 10 | The personal information we collect, use, and disclose will vary based on how you interact with Kraken, our products, and our websites. |
| 11 | How do we protect personal data? | 11 | We have done our utmost to make this notice comprehensive and understandable, but appreciate that it is complex, so please reach out by using our contact form if you have questions. |
| 12 | Kraken takes the security of personal data incredibly seriously. | 12 | Certain individuals may be provided with additional privacy notices as described below: Kraken Clients–When you sign up for an account with us, we may collect and use your information to facilitate the provision of services pursuant to our GLBA Notice, as applicable. |
| 13 | For additional information on our information security practices, please click here, and for general security information, click here. 5. | 13 | Federal law requires us to provide notice to certain customers to explain what personal information we collect, how we disclose it, and how consumers may limit information sharing. |
| 14 | Information we may collect about you We obtain information about you in a number of ways through your use of our products and services, our websites, the account opening process, webinar sign-up forms, event subscribing, news and updates subscribing and from information provided in the course of on-going support service communications. | 14 | These privacy practices are subject to our GLBA Notice, which we strongly suggest you review. |
| 15 | In order to open an account with us, you must first complete and submit a "create account" form. | 15 | Notice to California Residents–If you are a resident of California, please see our California Consumer Privacy Notice for additional relevant information. |
| 16 | By completing this form, you are requested to disclose personal data in order to enable Kraken to assess your application and comply with applicable laws and regulations. | 16 | You may have other privacy protections under applicable state laws. |
| 17 | The minimum information required for entering into a contract governing your use of our products and services, and for enabling us to comply with our statutory obligations in respect of anti-money laundering and crime and fraud prevention, is "Biographical information and contact information", "Financial Information", "PEP information", and "Verification information" (each defined below). | 17 | To the extent these state laws apply, we will comply with them when we disclose information about you. |
| 18 | Without this information, we cannot commence, or continue to perform our services or provide our products to you. | 18 | Please see our State Specific Privacy Statement for more information on whether you have additional rights or protections under other state privacy laws. |
| 19 | The information that we collect from you is as follows: Full name, residential address and contact details (e.g. email address, telephone number etc.), date of birth, place of birth, gender, residency, citizenship (" Biographical information and contact information "); Bank account information, wallet addresses, credit and debit card details, details about your source of funds, assets and liabilities, information relating to economic and trade sanctions lists, and tax-related information such as tax identification numbers, tax residency status, or information required for withholding or reporting obligations. | 19 | You control your data Find answers about your privacy, your data and the choices available to you. |
| 20 | (" Financial and tax information "); Trading account balances, trading activity (such as whether you participate in Kraken's VIP program, and custodial activity) (" Trading information "); Information on whether you (or someone close to you) holds a prominent public function (" PEP information "); Verification information, which includes information necessary to verify your identity such as a passport, driver's licence, selfie photos / videos, login credentials or Government-issued identity card, which may be processed using technologies that extract biometric data. | 20 | Privacy Hub Key Terms Used Throughout This Notice The following terms are defined as follows: " Kraken Account " means a user-accessible account offered via Payward Interactive, Inc.. |
| 21 | It also includes the details that you use to log into your account (e.g passwords, Social Sign-In details) (" Verification information "); Information collected when you interact with our support service channels, including online chat, phone call, email, direct message or other communication means (" Support service communications "); Kraken Pay Service information, including Kraktag (Kraken Pay username), profile picture, email address, name, phone number, phone contacts (if enabled), display name, Kraken Pay Service transaction records, user generated content such as payment descriptions, comments and attachments (" Kraken Pay Service information "); Third-party payment information, including beneficiary details (such as name, bank account number, and sort code or routing number) you provide to initiate payments to external bank accounts, and sender details received from banking and payment networks in connection with payments you receive from external bank accounts (" Third-party payment information "); Card information, including PAN (Primary Account Number), card expiry date, card issuer ID and transaction records ("Card information"); Salary Match information, including salary deposit amounts, payment frequency and timing, payer/employer identity and sender details, detected payment patterns used for salary classification, ML scoring signals, reward history, tier assignment, cashback currency preferences, and employer tags shown in Address Book and Activity feeds ("Salary Match information"); Loyalty programme information, meaning information generated in connection with your participation in our loyalty programme, including points balances, tiers or levels, and a randomly generated display name used on leaderboards or in similar interfaces (" Loyalty programme information "); AI interaction data such as the content of your interactions with our AI chat and assistant features, including the messages and instructions you provide and the responses, summaries and recommendations generated for you (" AI interaction data "); On-chain interaction and attestation information, meaning information generated when you interact with DeFi products or services or when carrying out other on-chain activities via Kraken interfaces. | 21 | " We ", " Our ", and " Us " refers to Payward Interactive, Inc., Kraken Securities LLC, Kraken Adviser LLC, Payward Accredited LLC and Kraken Lending LLC d/b/a Kraken. |
| 22 | This category may include DeFi transaction records, liquidity-provision data, wallet-verification status (e.g., whether a wallet is associated with a Kraken account), wallet addresses used for attestations or other on-chain interactions, and related metadata such as timestamps, transaction hashes, protocol, smart contract or vault identifiers, schema details, and other technical information recorded on public blockchains (" On-chain interaction and attestation information "); Other personal data or commercial and/or identification information–Information we, in our sole discretion, deem necessary to comply with our legal obligations under various AML obligations, such as under the European Union's 5th AML Directive, the UK's Money Laundering Regulations 2017, and the U.S. Bank Secrecy Act, and Australia's Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (" Other information "). | 22 | " Personal information " or " personal data " refers to any information relating to you, as an identified or identifiable natural person, including your name, an identification number, location data, or an online identifier or to one or more factors specific to the physical, economic, cultural, or social identity of you as a natural person. |
| 23 | Information we collect about you automatically: Browser information–Information that is automatically collected via analytics systems providers from your browser, including your IP address, domain name, any external page that referred you to us, your login information, browser type and version, time zone setting, browser plug-in types and versions, operating system, and platform (" Browser information "); Log information–Information that is generated by your use of Kraken-branded websites, applications, services, or tools operated by Kraken that is automatically collected and stored in our log records. | 23 | " User " and " You " refers to our clients, prospective clients, and individuals who visit our Site or use our Services. |
| 24 | This may include device information such as device identifier, device operating system and model, device storage, Media Access Control (MAC) address and Subscriber Identity Module (SIM) information, signals relating to user behaviour and device interaction, marketing identifier, battery usage, location information, network address, system activity and any internal and external information related to pages that you visit, including the full Uniform Resource Locators (URL) clickstream to, through and from our Website or App (including date and time, page response times, download errors, length of visits to certain pages, page interaction information such as scrolling, clicks, and mouse-overs, and methods used to browse away from the page (" Log information "). | 24 | " Affiliate " means a company related to Kraken by common ownership or control, as described further in our GLBA Notice below. |
| 25 | Information we receive about you from other sources. | 25 | " Affiliate Program Partners " means independent marketing partners, such as content creators, who participate in our Affiliate Program to refer new clients to Kraken. |
| 26 | We also receive information about you from third parties such as your payment providers, your social account providers Apple or Google if you use our social sign-in feature, service providers assisting with AML, fraud, and security compliance, and through publicly available sources. | 26 | " Biometric data " means data generated by automatic measurements of an individual's biological characteristics, such as a facial geometry or other unique biological patterns or characteristics that are used to identify a specific individual. |
| 27 | For example: The banks you use to transfer money to us will provide us with your basic personal data, such as your name and address, as well as your financial information such as your bank account details. | 27 | " Identified or identifiable natural person " means a person who can be readily identified, directly or indirectly. |
| 28 | When you make a payment using a debit card or a digital wallet (such as Apple Pay or Google Pay), including through a guest checkout flow where you do not have a Kraken account, we receive identity information from the digital wallet provider, the card acquirer, and the card network and issuing bank. | 28 | " DeFi " means decentralised finance systems that run on blockchain technology and use smart contracts to enable peer-to-peer financial activities such as trading, lending, borrowing, earning interest, or providing liquidity. |
| 29 | This may include your name, billing address, telephone number, country, and card details. | 29 | " Krak " means Kraken's global money app through which you can hold, spend, send and receive fiat and cryptocurrency. |
| 30 | Your business partners may provide us with your name and address, as well as financial information. | 30 | " Kraktag " means a personal identifier for your Krak account, used to send, receive and request payments. |
| 31 | Our card-issuing partners provides us with card transaction details and fraud-risk signals so that we can show you your transactions, investigate disputes and comply with our regulatory obligations. | 31 | Categories Of Personal Information Kraken May Collect About You Identifiers: identifiers such as a real name, date of birth, postal address, unique personal identifier (such as a device identifier; cookies, beacons, pixel tags, mobile ad identifiers and similar technology; customer number, unique pseudonym, or user alias; telephone number and other forms of persistent or probabilistic identifiers), online identifier, internet protocol address, email address, account name, Social Security number, driver's license number, passport number, and other similar identifiers; Social Sign-In Data: If you create or access your Kraken account using your Google Account or Apple Account via social sign-in, Kraken receives limited information from the provider necessary to authenticate you and operate your account, such as your name, email address (or, if you choose Apple's "Hide My Email," a private relay address), a provider-assigned user identifier, and authentication tokens. |
| 32 | Our payments and remittance partners may provide us with transaction details, beneficiary information and fraud-risk signals so that we can show you your transactions, investigate disputes and comply with our regulatory obligations. | 32 | Kraken does not receive your Google or Apple passwords.; Customer and Payment Information: signature, physical characteristics or description, age signals (e.g. age band and parent-approval status received from App stores such as Apple or Google, as required by law for individuals in certain U.S. states), state identification card number, education, bank account details including account no., routing no., and bank name, credit card number, debit card number, cardholder details (such as billing address and country), on-chain transactions, and other financial information; Third-party payment information: details about a third party you send payments to or receive payments from, such as their name, bank details, or crypto wallet address; Card Information: PAN (Primary Account Number), card expiry date, card issuer ID, and transaction and dispute records; Payroll Account Information: where you use our payroll-linked services, we collect salary information, including employer identity, pay amount, pay frequency, and deductions; Krak Service Information: Kraktag, profile picture, email address, name, phone number, phone contacts (if enabled), display name, transaction records, and user-generated content such as payment descriptions; On-chain interaction and attestation information: meaning information recorded on public blockchains and other publicly available ledgers that is associated with wallet addresses linked to you, whether or not the activity took place through Kraken, including DeFi activity and activity through hybrid or self-custodial wallets. |
| 33 | When you create or access your Kraken account using your Google Account or Apple Account via social sign-in, Kraken receives limited information from the provider necessary to authenticate you and operate your account, such as your name, email address (or, if you choose Apple's "Hide My Email," a private relay address), a provider-assigned user identifier, and authentication tokens. | 33 | This category may include transaction records, liquidity-provision data, wallet-verification status (e.g., whether a wallet is associated with a Kraken account), wallet addresses used for attestations or other on-chain interactions, and related metadata such as timestamps, transaction hashes, protocol, contract or vault identifiers, schema details, and other technical information recorded on public blockchains; Loyalty Programme Information: points balances, tiers or levels, and a randomly generated display name used on leaderboards or in similar interfaces; Third-party platform interaction data: identifiers and information we receive from third-party platforms, through which you interact with our services, such as messaging platforms, including the identifiers the platform assigns to you, your username or display name on the platform, profile information you have made available, conversation metadata, and the content of instructions you send to us through the platform; AI Interaction Data: the content of your interactions with our AI chat and assistant features, including the messages and instructions you provide and the responses, summaries and recommendations generated for you; Protected Classifications: characteristics of protected classifications under State or federal law, such as race, color, national origin, age, sex, gender, marital status, citizenship status, and military and veteran status; Commercial Information: commercial information, including records of personal property, products or services purchased, obtained, or considered, securities traded, trade execution data, holding and portfolio information, and other purchasing or consuming histories or tendencies; Regulatory and Compliance Data: suitability information for equities trading accounts, investment experience and risk tolerance, and any other information needed to comply with Financial Industry Regulatory Authority (FINRA) and U.S. Securities and Exchange Commission (SEC) regulations; Biometric Data; Recovery Material: the cryptographic key material you submit to our digital asset recovery service (Kraken Legacy), such as seed phrases, private keys, recovery files or hardware wallet backups (immediately purged once the recovery process is complete); Online Activity: internet and other electronic network activity information, including, but not limited to information regarding your interaction with websites, applications, or advertisements; Geolocation Data; Sensory Information: audio, visual, and similar information; Employment Information: professional or employment-related information; Inferences: inferences drawn from any of the information identified above to create a profile about you reflecting your preferences, characteristics, behavior, and attitudes. |
| 34 | Kraken does not receive your Google or Apple passwords. | 34 | Personal Information Received From Third Parties We may also receive personal information about you from third parties. |
| 35 | When you interact with our services through a third-party platform, such as a messaging platform, we may receive information from that platform including the identifiers the platform assigns to you, your username or display name on the platform, profile information you have made available, conversation metadata, and the content of instructions you send to us through the platform. | 35 | For example, our card-issuing, payments and remittance partners may provide us with transaction details, beneficiary information and fraud-risk signals so that we can show you your transactions, investigate disputes and comply with our regulatory obligations. |
| 36 | Advertising networks, analytics providers and search information providers may provide us with anonymised or de-identified information about you, such as confirming how you found our website. | 36 | Where you use our payroll-linked services, such as direct deposit switching, our payroll-connectivity partners also provide us with your employer identity, pay amount, pay frequency, and deductions, so that we can provide our payroll-linked services and products to you. |
| 37 | Our service providers may provide us with information relating to fraud, security, sanctions and AML and other risks, for example, confirmation of identity attributes, and information about any attributes linked to such matters. | 37 | Where a Kraken client sends payments to or receives payments from a third party, in fiat or crypto, we may receive that third party's name, bank account details or wallet address, and, where required by law (for example, AML, CTF, or Travel Rule obligations), additional data such as their address and date of birth, from banking and payment networks or their own exchange or virtual asset service provider (VASP/CASP). |
| 38 | Credit reference agencies may provide us with your personal data during the credit referencing process. | 38 | Purposes For Processing Personal Information To comply with laws and regulations that Kraken may be subject to; Performing services, maintaining or servicing accounts including enabling account creation and access via social sign-in with Apple or Google, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing advertising or marketing services, including referral programmes, providing analytics services, or providing similar services; To facilitate equities trading services, including brokerage account setup, trade execution, clearing, settlement, and regulatory compliance; To facilitate access to DeFi products and services, including hybrid or self-custodial wallet provisioning and authentication that support your use of these services, as well as other on-chain activities accessible through Kraken interfaces; To facilitate collateralised borrowing services, including loan origination, collateral management, and interest calculation; To facilitate payment services, including processing inbound and outbound payments, in fiat and crypto, between Kraken clients and third parties, and enabling you to send, receive and request payments, including using your Kraktag; To provide our payroll-linked services, including direct deposit switching, paycheck visibility, and other related features; To review and moderate content you provide through Krak, such as payment descriptions, in line with the Krak App Content Moderation Policy; To issue and manage cards offered through Kraken's card programme, and to authorise, clear and settle card transactions; To provide and administer our loyalty programme, including calculating points, determining levels and ranks, and operating leaderboards; To enable you to use our services through third-party platforms, such as submitting request for quote (RFQ) instructions via messaging platforms; To provide personalised content, recommendations and AI chat and assistant features that respond to your input. |
| 39 | We may read and store data that is written on a blockchain, other publicly available ledgers, or is otherwise in the public domain. 6. | 39 | We personalise these using the inferences we draw about you and the input you provide; To provide our digital asset recovery service (Kraken Legacy), we temporarily take custody of the key material you submit (such as seed phrases, private keys, recovery files or hardware wallet backups) solely for the purpose of discovery and recovery of any eligible assets into your Kraken account. |
| 40 | Our legal justification for processing personal data Why we process your personal data Legal justification Categories of personal data To provide our products and services, including placing, processing and executing orders and transactions, payment processing and performing account-related functions such as enabling sign-up/sign-in (including via social sign-in), onboarding, authentication, account linking, recovery, and ongoing account access. | 40 | To comply with regulatory obligations under applicable U.S. securities laws, including FINRA and SEC requirements, by verifying customer suitability for trading, monitoring trade activity for suspicious behavior, and ensuring compliance with investor protection regulations; Auditing related to a current interaction with you and concurrent transactions, including, but not limited to, counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance; Short-term, transient use, including, but not limited to, the contextual customization of ads shown as part of the same interaction; Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity; Debugging to identify and repair errors that impair existing intended functionality; Undertaking internal research for technological development and demonstration; and/or Undertaking activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by us, and to improve, upgrade, or enhance the service or device that is owned, manufactured, manufactured for, or controlled by us. |
| 41 | Performance of a contract. | 41 | We may also, from time-to-time, use personal information provided by you through your use of the services and/or through client surveys to help us improve and personalise our products and services. |
| 42 | Biographical information and contact information, financial and tax information, trading information, PEP information (where relevant), verification information, support service communications, Kraken Pay Service information, third-party payment information, card information, AI interaction data, on-chain interaction and attestation information and other information. | 42 | It is our legitimate interest to use your personal information in this way to try to ensure the highest standards when providing you with our products and services and to continue to be a market leader within the cryptocurrency financial service industry. |
| 43 | To issue and manage cards offered by Kraken, and to authorise, clear and settle card transactions. | 43 | This may include: To tailor specific communications and promotions according to your preferences; To provide you with access to the services; To serve the functions of the Sites; To manage everyday business needs, such as administering and improving the Sites; To analyze the performance and functioning of the Sites; To analyze how you use the Sites and to perform other market research; For internal operations, including troubleshooting, testing, and analytics; and To assist us in developing new products and improving our Services. |
| 44 | Performance of a contract. | 44 | Kraken may also use or disclose de-identified information that is not reasonably likely to identify you for commercially legitimate business purposes. |
| 45 | Biographical information and contact information, financial and tax information, trading information, PEP information (where relevant), verification information, Kraken Pay Service information, third-party payment information, card information and other information. | 45 | Disclosure of Personal Information As part of the processing activities described above, Kraken may share your personal information within the Payward group of companies and with carefully selected third parties. |
| 46 | To conduct or arrange for the conducting of credit or identity checks. | 46 | We only share personal information for legitimate purposes and when it is lawful to do so, and we require each recipient to protect the confidentiality of your personal information and to comply with applicable privacy and data protection laws. |
| 47 | Legal obligation to comply with Know Your Customer ("KYC") and customer due diligence regulatory obligations. | 47 | We may share your personal information with third parties under the following circumstances: Corporate Affiliates: We share personal information with other members of the Payward group of companies, including our parents, subsidiaries, and entities under common ownership or control, for operational and business purposes consistent with this Privacy Notice. |
| 48 | Such processing is also in our legitimate interest to prevent and detect potential crime and/or fraud and to protect our business. | 48 | Service Providers and Business Partners: We share personal information with service providers, specialist advisors, and business partners that need access to perform services on Kraken's behalf, including administrative, financial, commercial, legal, tax, auditing, compliance, insurance, IT, debt-recovery, marketing, analytics, research, blockchain, DeFi, payment card issuance and processing, securities clearing and settlement, payroll connectivity, identity verification and artificial intelligence services. |
| 49 | Biographical information and contact information, financial and tax information, trading information, PEP information (where relevant), verification information and other information. | 49 | These service providers and business partners are not authorized to use or disclose your personal information except as necessary to perform services on Kraken's behalf or to comply with legal requirements, and have no independent rights to your personal information. |
| 50 | For the purposes of identity verification, compliance with court orders, applicable laws or other reporting obligations and anti-money laundering and economic sanctions controls. | 50 | In particular, our artificial intelligence service providers do not use your data to train their own models. |
| 51 | All such information may only be disclosed to authorities where required or permitted under the laws that apply to Kraken wherever we operate. | 51 | Independent Partners: In some cases, we share personal information with third parties that use that information for their own purposes, rather than processing it on Kraken's behalf. |
| 52 | Legal obligation to comply with anti-money laundering laws, financial services laws, corporation laws, privacy laws, tax laws and other relevant laws. | 52 | Examples include our card-issuing partners and card programme managers, partners that enable access to embedded or self-custodial wallets, payment and remittance partners, DeFi partners, or other on-chain services, and other Payward group companies when providing their own products or services. |
| 53 | There is a substantial public interest in complying with the aforementioned laws. | 53 | In these cases, the partner is responsible for its use of your personal information under its own privacy notice and terms, which you may be asked to accept separately. |
| 54 | Supervisory authorities' rules and regulations also apply to us. | 54 | Payroll Connectivity Partners: Where you use our payroll-linked services, such as direct deposit switching, we share your Social Security number, date of birth, name, phone number and ZIP code with our payroll-connectivity partners so they can locate your payroll record and to enable our payroll-linked services. |
| 55 | Biographical information and contact information, financial and tax information, trading information, PEP information (where relevant), verification information, biometric data extracted from verification information (see here for more information), support service communications, Kraken Pay Service information, third-party payment information, card information, on-chain interaction and attestation information and other information. | 55 | Banking, Payments and Card Partners: We share personal information with banking, payments and card partners for the purpose of processing payments, investigating and responding to potential sanctions violations and crime, including fraud and money laundering. |
| 56 | To administer our products and services, to provide you with information in respect of our products and services and review your ongoing needs, to assess, test and troubleshoot our products and services, to improve our products and services, including for training purposes, and to develop new products and services. | 56 | We may also share device data and log information for our partners to use as account, fraud, and credit risk signals. |
| 57 | In order to ensure effective provision of our products and services and to meet our clients' needs it is in our legitimate interest to administer our products and services, to provide you with information about our products or services, to assess, test and troubleshoot our products and services and to review our clients' ongoing needs. | 57 | Telecommunication and Mobile Network Operators: Depending on your jurisdiction, we may share personal information with telecommunication providers and mobile network operators for the purpose of identity verification. |
| 58 | It is also in our legitimate interest to improve our products and services, including support services and to develop and market new products and services. | 58 | No mobile information will be shared with third parties for their marketing or promotional purposes. |
| 59 | Biographical information and contact information, financial and tax information, trading information, PEP information (where relevant), verification information, support service communications, Kraken Pay Service information, third-party payment information, card information, AI interaction data, on-chain interaction and attestation information, other information, browser information and log information. | 59 | Referral Partners: If you sign up for Kraken using a referral link or code shared by another user, we share limited personal information such as your first name and the first initial of your surname, together with the status of defined onboarding and activity milestones relevant to the referral programme (for example, whether you have completed identity verification, added a payment method, made a deposit, or placed a trade) with the referring user to operate the referral program. |
| 60 | To personalise our products and services, and your experience on our website and in our apps, including building a profile based on your activity and preferences to tailor the content, recommendations, AI chat and assistant features we provide to you. | 60 | Affiliate Program Partners: If you sign up for Kraken via an affiliate link provided by one of our affiliate program partners, we share pseudonymised trading information, such as the trading pairs you trade, trade amounts, and fees generated,with the referring affiliate to operate the program and calculate and pay commissions. |
| 61 | It is in our legitimate interest to personalise our products and services, and your experience on our website and in our apps, including tailoring the content and recommendations we provide to you. | 61 | Other Kraken Clients: In connection with your participation in our Ink Points loyalty programme, we may display your rank and score alongside a randomly generated display name on leaderboards or in similar interfaces. |
| 62 | Where legitimate interest is not an available basis in your jurisdiction, we rely on the performance of a contract, as personalisation forms part of the services we provide under our Terms of Service. | — | Removed |
| 63 | Biographical information and contact information, financial and tax information, trading information, PEP information (where relevant), verification information, support service communications, Kraken Pay Service information, third-party payment information, card information, AI interaction data, on-chain interaction and attestation information, other information, browser information and log information. | — | Removed |
| 64 | To provide account statements, trading and transaction records, receipts, spending insights and budgeting features. | — | Removed |
| 65 | Performance of a contract. | — | Removed |
| 66 | Biographical information and contact information, financial and tax information, trading information, Kraken Pay Service Information, third-party payment information, card information and on-chain interaction and attestation information. | — | Removed |
| 67 | To operate our referral and affiliate programmes, including providing performance reporting, sharing referee status updates with referrers, and paying commissions. | — | Removed |
| 68 | It is in our legitimate interest to use affiliates to engage new business leads, and pay those affiliates if the leads generate revenue. | — | Removed |
| 69 | Biographical information and contact information (limited to first name and surname initial), Trading information (limited to defined onboarding and activity milestones, in aggregated or pseudonymised form for affiliate reporting) To market our products and services, and to create European Unified IDs (EUID), which is an identity framework that helps advertisers target consumers across the open internet in a privacy preserving way. | — | Removed |
| 70 | Consent, where you have agreed to receive marketing messages directly. | — | Removed |
| 71 | We rely upon our legitimate interest to process information about how our products, services, and blockchain technology are used to decide on marketing strategies. | — | Removed |
| 72 | We rely on legitimate interests to create EUIDs. Biographical information and contact information, trading information, Kraken Pay Service information, on-chain interaction and attestation information, other information, browser information and log information. | — | Removed |
| 73 | To conduct surveys. | — | Removed |
| 74 | It is in our legitimate interest to send you surveys and conduct such surveys in order to gather information on how our products and services are working for our clients and how to improve our products and services. | — | Removed |
| 75 | Your participation in those surveys will be on the basis of your consent. | — | Removed |
| 76 | Biographical information and contact information, trading information, support service communications, Kraken Pay Service information, third-party payment information, card information, other information, browser information and log information. | — | Removed |
| 77 | To conduct data analysis. | — | Removed |
| 78 | Our website pages, applications and emails may contain web beacons, pixel tags or other similar types of data analysis tools that allow us to track interactions with our services and communications. | — | Removed |
| 79 | We may aggregate your personal data with the personal data of our other clients on a de-identified basis so that more rigorous statistical analysis of general patterns may lead us to providing better products and services. | — | Removed |
| 80 | If your personal data is completely anonymised, we do not require a legal basis as the information will no longer constitute personal data. | — | Removed |
| 81 | If your personal data is not in an anonymised form, it is in our legitimate interest to continually evaluate that personal data to ensure that the products and services we provide are relevant to the market and our clients. | — | Removed |
| 82 | Biographical information and contact information, financial and tax information, trading information, Kraken Pay Service information, on-chain interaction and attestation information, other information, browser information and log information. | — | Removed |
| 83 | To ensure accurate physical address records are submitted during account creation, we utilise Google's address confirmation services. | — | Removed |
| 84 | It is in our legitimate interest to ensure the addresses clients submit are accurate. | — | Removed |
| 85 | For additional information, please see Google's privacy notice. | — | Removed |
| 86 | Address information. | — | Removed |
| 87 | For internal business purposes. | — | Removed |
| 88 | It is in our legitimate interest to conduct internal research and analysis and to maintain records necessary to monitor your compliance with the Terms of Service that you have entered into with us. | — | Removed |
| 89 | Biographical information and contact information, financial and tax information, trading information, PEP information (where relevant), verification information, support service communications, Kraken Pay Service information, third-party payment information, card information, on-chain interaction and attestation information, other information, browser information and log information. | — | Removed |
| 90 | For business record keeping. | — | Removed |
| 91 | Legal obligation. | — | Removed |
| 92 | We are required to keep internal records for tax, financial reporting, AML, and regulatory compliance. | — | Removed |
| 93 | Biographical information and contact information, financial and tax information, trading information, PEP information (where relevant), verification information, support service communications, Kraken Pay Service information, third-party payment information, card information, on-chain interaction and attestation information, other information, browser information and log information. | — | Removed |
| 94 | To enforce and defend our rights including initiating legal claims, preparing our defense in litigation procedures, addressing legal or administrative proceedings whether before a court or a statutory body and to investigate or settle issues, enquiries and/or disputes. | — | Removed |
| 95 | It is in our legitimate interest to enforce and defend our rights and to ensure that issues, enquiries and/or disputes are investigated and resolved in a timely and efficient manner. | — | Removed |
| 96 | Biographical information and contact information, financial and tax information, trading information, PEP information (where relevant), verification information, support service communications, Kraken Pay Service information, third-party payment information, card information, on-chain interaction and attestation information, other information, browser information and log information. | — | Removed |
| 97 | To comply with applicable laws, subpoenas, court orders, other judicial processes, or the requirements of any applicable regulatory authorities. | — | Removed |
| 98 | Legal obligation. | — | Removed |
| 99 | We will disclose personal data where we have a legal obligation to disclose your personal data under the laws of your jurisdiction or the laws of another jurisdiction where Kraken operates, as well as where we receive a legally binding request to disclose personal data from law enforcement or other bodies or where we have a legitimate interest in assisting law enforcement or other agencies in respect of an investigation. | — | Removed |
| 100 | Biographical information and contact information, financial and tax information, trading information, PEP information (where relevant), verification information, support service communications, Kraken Pay Service information, third-party payment information, card information, on-chain interaction and attestation information, other information, browser information and log information. | — | Removed |
| 101 | To set our general pricing strategy, and to dynamically set the prices of certain products and services. | — | Removed |
| 102 | It is in our legitimate interests to utilise personal data to set our general pricing strategy, and to dynamically set the prices of certain products and services. | — | Removed |
| 103 | For further information about our approach to pricing, please see our Terms of Service and Fee Schedule. | — | Removed |
| 104 | Financial and tax information, trading information, Kraken Pay Service information, card information and on-chain interaction and attestation information. | — | Removed |
| 105 | To notify you of changes to our products or services and/or to laws and regulatory rules and regulations. | — | Removed |
| 106 | Legal obligation. | — | Removed |
| 107 | Often the law requires us to advise you of certain changes to products or services or laws. | — | Removed |
| 108 | We may need to inform you of changes to the terms or the features of our products or services. | — | Removed |
| 109 | We need to process your personal data to send you these legal notifications. | — | Removed |
| 110 | You will continue to receive this information from us even if you choose not to receive direct marketing information from us. | — | Removed |
| 111 | Where such notification is not legally required, it may be in our legitimate interest to notify you of such changes. | — | Removed |
| 112 | Biographical information and contact information, financial and tax information, trading information, PEP information (where relevant) and other information. | — | Removed |
| 113 | For the purposes of a prospective merger, acquisition, or sale of all or part of our business or assets. | — | Removed |
| 114 | It is in our legitimate interest to explore and execute on potential mergers, acquisitions and sales of all or part of our business or assets. | — | Removed |
| 115 | Biographical information and contact information, financial and tax information, trading information, PEP information (where relevant), verification information, support service communications, Kraken Pay Service information, card information, on-chain interaction and attestation information, other information, browser information and log information. | — | Removed |
| 116 | To administer our business effectively, including but not limited to the purposes of IT and system security, client safety, preventing potential crime and facilitating asset security and access controls. | — | Removed |
| 117 | It is in our legitimate interest to protect our assets, clients and systems and to prevent and detect potential crime and/or fraud and to ensure security. | — | Removed |
| 118 | Biographical information and contact information, financial and tax information, trading information, PEP information (where relevant), verification information, support service communications, Kraken Pay Service information, third-party payment information, card information, on-chain interaction and attestation information, other information, browser information and log information. | — | Removed |
| 119 | To update and verify your personal data in accordance with relevant anti-money laundering compliance frameworks. | — | Removed |
| 120 | Legal obligation. | — | Removed |
| 121 | Such processing is also in our legitimate interests to prevent and detect potential crime and/or fraud and to protect our business. | — | Removed |
| 122 | Biographical information and contact information, financial and tax information, trading information, PEP information (where relevant), verification information, support service communications, Kraken Pay Service information, card information, other information, browser information and log information. | — | Removed |
| 123 | To customise our services and content for you, to recognise you as a client, to analyse site usage, and measure our marketing performance. | — | Removed |
| 124 | When we collect personal data for these purposes through the use of cookies, web beacons, pixels, conversion APIs and similar technologies, we will rely on your consent. | — | Removed |
| 125 | It is also in our legitimate interest to customise our services and content for clients and to recognise clients, in order to ensure that clients receive the services and content that are appropriate to them. | — | Removed |
| 126 | Other information, browser information and log information. | — | Removed |
| 127 | To communicate with you. | — | Removed |
| 128 | It is in our legitimate interest to communicate with our clients or potential clients to ensure the effective delivery of our products and services and to administer our business. | — | Removed |
| 129 | Biographical information and contact information, financial and tax information, trading information, support service communications and other information. | — | Removed |
| 130 | To receive services from third parties including services such as administrative, legal, tax, compliance, insurance, IT, debt-recovery, marketing, analytics, credit reference, identity verification, payment card issuance and processing, money remittance and payment services, research or other services. | — | Removed |
| 131 | It is generally in our legitimate interest to receive such services from third parties to ensure the effective delivery of our products and services and to administer and protect our business. | — | Removed |
| 132 | Biographical information and contact information, financial and tax information, trading information, PEP information (where relevant), verification information, support service communications, Kraken Pay Service information, third-party payment information, card information, on-chain interaction and attestation information, other information, browser information and log information. | — | Removed |
| 133 | To facilitate peer-to-peer communications between clients using the Kraken Pay Service, in line with the Kraken Pay Content Moderation Policy. | — | Removed |
| 134 | Performance of a contract. | — | Removed |
| 135 | Kraken Pay Service information. | — | Removed |
| 136 | To administer the Salary Match program, including detecting qualifying salary deposits, calculating rewards, and processing payouts. | — | Removed |
| 137 | Performance of a contract. | — | Removed |
| 138 | It is also in our legitimate interest to administer the program, ensure eligibility accuracy, and prevent abuse. | — | Removed |
| 139 | Biographical information and contact information, financial and tax information, trading information, verification information, third-party payment information, Salary Match information and other information. | — | Removed |
| 140 | To administer Kraken's loyalty programme, including calculating points, determining levels and ranks, and operating leaderboards. | — | Removed |
| 141 | Performance of a contract, where processing is necessary to operate the loyalty programme under our Terms of Service; and legitimate interest, where processing is for the purposes of operating leaderboards or similar features that recognise client engagement. | — | Removed |
| 142 | Biographical information and contact information, trading information, Kraken Pay Service information, third-party payment information, card information, on-chain interaction and attestation information, Loyalty programme information, and other information. | — | Removed |
| 143 | To facilitate the leaving of Trustpilot reviews without a client having to create a full Trustpilot account. | — | Removed |
| 144 | Consent. | — | Removed |
| 145 | Name and email. | — | Removed |
| 146 | To facilitate access to DeFi products and services, including hybrid or self-custodial wallet provisioning and authentication that support your use of these services, as well as other on-chain activities accessible through Kraken interfaces. | — | Removed |
| 147 | Performance of a contract, where processing is necessary to provide the on-chain and DeFi services you have requested; and Consent, where required for the sharing of personal data with independent third-party controllers that support these services. | — | Removed |
| 148 | Biographical information and contact information, financial and tax information, trading information, and on-chain interaction, attestation information and other information. | — | Removed |
| 149 | To facilitate collateralised borrowing services, including loan origination, collateral management, and interest calculation. | — | Removed |
| 150 | Performance of a contract. | — | Removed |
| 151 | Biographical information and contact information, financial and tax information, trading information, and other information. | — | Removed |
| 152 | To enable you to use our services through third-party platforms, such as submitting request for quote (RFQ) instructions via messaging platforms. | — | Removed |
| 153 | Performance of a contract. | — | Removed |
| 154 | Biographical information and contact information, trading information, and other information. | — | Removed |
| 155 | To verify and confirm that a wallet address is associated with a Kraken account. | — | Removed |
| 156 | Performance of a contract. | — | Removed |
| 157 | It is in our legitimate interest to verify wallet ownership to protect against fraudulent transactions and unauthorised access. | — | Removed |
| 158 | On-chain interaction and attestation information. | — | Removed |
| 159 | To maintain a database of attestations for operational security and fraud prevention. | — | Removed |
| 160 | It is in our legitimate interest to maintain an attestation database to prevent abuse, ensure data integrity, and enhance security measures. | — | Removed |
| 161 | On-chain interaction and attestation information. | — | Removed |
| 162 | To enable users to publicly attest to their trading history on decentralized finance (DeFi) platforms. | — | Removed |
| 163 | Consent (attestation is user-initiated). | — | Removed |
| 164 | On-chain interaction and attestation information. | — | Removed |
| 165 | To provide a public attestation service that allows applications to query user attestations. | — | Removed |
| 166 | It is in our legitimate interest to allow public attestation services to enable DeFi applications to query verified user attestations. | — | Removed |
| 167 | On-chain interaction and attestation information. | — | Removed |
| 168 | For any purpose not specified above, but for which you direct us to process your personal data. | — | Removed |
| 169 | Consent. | — | Removed |
| 170 | Biographical information and contact information, financial and tax information, trading information, PEP information (where relevant), verification information, support service communications, Kraken Pay Service information, third-party payment information, card information, on-chain interaction and attestation information, other information, browser information and log information. | — | Removed |
| 171 | To the extent legitimate interest or performance of a contract is not a recognised legal justification in your jurisdiction, we rely on consent (express or implied, as appropriate) where consent is required. 7. | — | Removed |
| 172 | Disclosure of your personal data As part of the processing activities described above, Kraken may share your personal data within the Kraken company group and with carefully selected third parties. | — | Removed |
| 173 | We only disclose data for legitimate purposes and when it is lawful to do so, and we require each recipient to process the data in line with applicable data protection laws. | — | Removed |
| 174 | Kraken engages third party service providers and business partners for operational support in areas including, but not limited to: administrative, financial, legal, tax, payment card issuance and processing, compliance, insurance, IT, debt-recovery, marketing, analytics, DeFi, artificial intelligence and research. | — | Removed |
| 175 | Depending on your jurisdiction, we may disclose your personal data to telecommunication providers or mobile network operators for the purpose of identity verification. | — | Removed |
| 176 | Please note no mobile information will be shared with third parties for their marketing or promotional purposes. | — | Removed |
| 177 | Kraken may also disclose your personal data to banking and payments partners for the purpose of investigating and responding to potential sanctions violations and crime including fraud and money laundering. | — | Removed |
| 178 | Where you sign up for Kraken using a referral link or code from another Kraken user, we may share with the referring user your first name and the first initial of your surname, together with the status of defined onboarding and activity milestones relevant to the referral programme (for example, whether you have completed identity verification, added a payment method, made a deposit, or placed a trade). | — | Removed |
| 179 | This is so that referrals can be transparently attributed, any applicable rewards correctly paid out, and the referring user can see the progress of the people they have invited. | — | Removed |
| 180 | We do not share the value or detail of your transactions with the referring user. | — | Removed |
| 181 | Separately, we operate a business affiliate programme with commercial partners, such as publishers and content creators, who earn commissions for referring new users to Kraken. | — | Removed |
| 182 | Where you sign up after following an affiliate link from one of these partners, we may share pseudonymised and aggregated information with the partner to operate and measure the performance of the programme and calculate and pay commissions. | — | Removed |
| 183 | We use third-party artificial intelligence service providers to support our personalised content, recommendations and AI chat and assistant features. | — | Removed |
| 184 | We share only what is needed to provide these features, and do not share direct identifiers such as your name, contact details or identity-verification information. | — | Removed |
| 185 | These providers act only on our instructions and do not use your conversations or profile data for their own purposes, including to train their own artificial intelligence models. | — | Removed |
| 186 | In connection with your participation in our Ink Points loyalty programme, we may display your rank and score alongside a randomly generated display name on leaderboards or in similar interfaces. | — | Removed |
| 188 | With your consent, Kraken may disclose your name and email to Trustpilot to enable you to leave a review of Kraken without having to create a full Trustpilot account. | 63 | When you send, receive or request a payment through the Krak app, we share your Kraktag, display name and the payment details with the other party involved. |
| 189 | In connection with Kraken's global operations and our compliance with applicable law across the jurisdictions where Kraken operates, we may disclose your personal data regarding your use of Kraken services and our platform to governmental, regulatory, or law enforcement authorities, including those outside the jurisdiction where you reside to the extent that Kraken is required to make such disclosures. | 64 | Trustpilot: With your consent, we share your name and email with Trustpilot so that you can leave a review of Kraken without having to create a full Trustpilot account. |
| 190 | Such disclosures will only be made in accordance with applicable laws (including, without limitation, regulations administered by the U.S. Department of the Treasury's Office of Foreign Assets Control (" OFAC ", which includes the Specially Designated Nationals " SDN " List and other non-SDN restricted or blocked parties lists) and/or anti-money laundering and/or economic sanctions laws and regulations made by the governments of the European Union, the United Kingdom, Canada and any other applicable national, regional, provincial, state, municipal or local laws and regulations as amended from time to time) that apply to you or Kraken, as well as in response to court orders or other lawful requests made by such authorities in those jurisdictions. | 65 | Regulators and Law Enforcement: We share personal information with government, regulatory, and law enforcement authorities where required by applicable law, including in response to court orders, subpoenas, and other legal process. |
| 191 | Kraken may also disclose your data in the event of a prospective merger, acquisition, or sale of all or part of our business or assets. | 66 | This includes U.S. regulators such as the U.S. Securities and Exchange Commission (SEC) and the Financial Industry Regulatory Authority (FINRA), the U.S. Department of the Treasury's Office of Foreign Assets Control (OFAC) and other authorities administering economic sanctions laws, and anti-money laundering regulators in jurisdictions where Kraken operates. |
| 192 | In certain circumstances, third parties to whom we disclose your personal data, may act as independent data controllers for specific processing activities. | 67 | Protecting Kraken, Our Users, and Others: We share personal information where we reasonably believe it is necessary to prevent fraud, detect and respond to security threats or illegal activity, enforce our Terms of Service, and protect the rights, property, or safety of Kraken, our users, and others. |
| 193 | For example, our card-issuing partners act as independent controllers when processing card information for fraud prevention and AML checks as well as to comply with their other regulatory obligations. | 68 | Corporate Transactions: We may share personal information in connection with, or during negotiations of, a prospective merger, acquisition, financing, or sale of all or part of our business or assets. |
| 194 | Other business partners may act as independent controllers where they enable access to specific services, including DeFi, on-chain services, and payment or remittance services. | 69 | Public Blockchain and On-Chain Attestations: On-chain attestations and other data recorded on a public blockchain are publicly accessible and may be accessed by third parties via blockchain explorers and APIs. Kraken does not control or restrict third-party access to this information. |
| 195 | In some cases, other Kraken group companies may act as independent controllers for specific processing activities when providing certain products or services. | 70 | With Your Consent or at Your Direction: We share personal information with third parties where you have given us your consent or directed us to do so. |
| 196 | If Kraken discloses your personal data to service providers and business partners, in order to perform the services requested by clients or to comply with our legal and regulatory obligations, such providers and partners may store your personal data within their own systems. | 71 | We may also share de-identified or aggregated information that cannot reasonably be used to identify you. |
| 197 | We require them to protect the confidentiality of this personal data, and comply with all relevant privacy and data protection laws. | 72 | We maintain and use such information only in de-identified form and will not attempt to re-identify it, except as permitted by law. |
| 198 | On-chain attestations are publicly available and may be accessed by third parties via blockchain explorers and APIs. Kraken does not control or restrict third-party access to on-chain attestation data. 8. | 73 | Selling Or Sharing Of Personal Information Kraken does not sell personal information to any third parties for monetary consideration and has not done so in the preceding 12 months. |
| 199 | Where we store your personal data Client data, including account, transactional, and KYC information, is primarily hosted within European and UK data centres. | 74 | We do not sell personal information. |
| 200 | To support our operations we use a network of computers, servers, other infrastructure and information technology, and third-party service providers. | 75 | However, we share trading data with our affiliates and service providers to facilitate equities transactions and comply with legal and regulatory obligations. |
| 201 | We and our third-party service providers and business partners store and process your personal data in the European Union, Australia, the United Kingdom, the United States of America and elsewhere in the world. | 76 | Please note no mobile phone numbers will be shared with third parties for their marketing or promotional purposes. |
| 202 | Courts, law enforcement, regulators and security agencies of these jurisdictions may be able to use legal processes to access your personal data. | 77 | Data Retention We retain personal information, including personal information of individuals our clients transact with, as necessary to fulfil the purposes for which it was collected, to comply with our legal and regulatory obligations, and to establish, exercise, or defend legal claims. |
| 203 | Additionally, we may be required by law to disclose your personal information to regulators or other authorities in these jurisdictions where such disclosure is mandated by applicable law. 9. | 78 | When personal information is no longer necessary for the purposes for which it may lawfully be processed, we will remove any details that will identify you, or we will securely destroy the relevant records. |
| 204 | International transfers of personal data We may transfer your personal data outside your home jurisdiction to other Kraken group companies, service providers and business partners. | — | Removed |
| 205 | Transfers outside of your home jurisdiction are done in accordance with lawful transfer mechanisms. | — | Removed |
| 206 | For example, for transfers from the EEA and the UK, we rely on adequacy decisions where available. | — | Removed |
| 207 | An adequacy decision means that the destination country has been recognised as providing an essentially equivalent standard of data protection to the originating jurisdiction and has therefore been "whitelisted". | — | Removed |
| 208 | The European Commission has whitelisted countries as shown here and the UK Government has whitelisted countries as shown here. | — | Removed |
| 209 | Where adequacy decisions are not available, we may rely on mechanisms such as consent, legal or regulatory obligations, execution of agreement, or on contractual safeguards including the European Commission's Standard Contractual Clauses (SCCs), or the ICO's International Data Transfer Agreement (IDTA) or the UK Addendum to the EU SCCs. Further information about these mechanisms can be obtained using the contact details in Section 16. 10. | — | Removed |
| 210 | Privacy when using digital assets and blockchains Your use of digital assets, including DeFi products or services, may be recorded on a public blockchain. | — | Removed |
| 211 | Public blockchains are distributed ledgers, intended to immutably record transactions across wide networks of computer systems. | — | Removed |
| 212 | Many blockchains are open to forensic analysis which can lead to re-identification of transacting individuals and the revelation of personal data, especially when blockchain data is combined with other data. | — | Removed |
| 213 | As blockchains are decentralised or third-party networks which are not controlled or operated by Kraken, we are not able to erase, modify, or alter personal data on such networks. | — | Removed |
| 214 | By using Kraken Verify, you acknowledge that your attestations will be recorded on a public blockchain. | — | Removed |
| 215 | These attestations are immutable and cannot be modified or deleted. | — | Removed |
| 216 | Additionally, linking an attestation to a Kraken-verified wallet may allow third parties to infer that the wallet owner has undergone Kraken's identity verification process. 11. | — | Removed |
| 217 | Data retention We retain personal data as necessary to fulfil the purposes for which it was collected, to comply with our legal and regulatory obligations, and to establish, exercise, or defend legal claims. | — | Removed |
| 218 | When personal data is no longer necessary for the purposes for which it may lawfully be processed, we will remove any details that will identify you, or we will securely destroy the relevant records. | — | Removed |
| 220 | Additionally, we are subject to certain anti-money laundering laws which may require us to retain the following for a period (e.g., 5 years) after our business relationship with you has ended: A copy of the records we used in order to comply with our client due diligence obligations; Supporting evidence and records of transactions with you, and your relationship with us. | 80 | Additionally, we are subject to certain laws and regulations, including anti-money laundering laws and U.S. securities and investment advisory laws which may require us to retain the following for a period (e.g., 5 years or longer) after our business relationship with you has ended: A copy of the records we used in order to comply with our client due diligence obligations; Supporting evidence and records of transactions with you, and your relationship with us; Records and communications relating to the services we provide to you. |
| 225 | We may keep your personal data for longer than 5 years if we cannot delete it for legal, regulatory, or technical reasons. | 85 | Recovery material, such as seed phrases, private keys, recovery files or hardware wallet backups submitted to our digital asset discovery and recovery service (Kraken Legacy), is held only for the duration of the scan and automatic recovery process, after which it is permanently purged. |
| 86 | We retain only the resulting action log (wallet addresses and transaction records) for compliance purposes. | ||
| 87 | We may keep your personal information for longer than 5 years if we cannot delete it for legal, regulatory, or technical reasons. | ||
| 228 | On-chain data recorded on a public blockchain is immutable and cannot be modified or deleted by Kraken. 12. | 90 | On-chain data recorded on a public blockchain is immutable and cannot be modified or deleted by Kraken. |
| 229 | Cookies Cookies are small text files that provide information regarding the device used by a visitor. | 91 | Biometrics Policy By using Kraken's services, accepting our privacy notice, and/or accepting our terms of service, you give your written consent to the collection, processing, usage, and storage of your Biometric Data. |
| 230 | Click on Cookie Settings in the footer of this page for additional detail on the types of cookies and similar technologies this website uses and why, and to adjust your Cookie Settings. | 92 | You release in favor of Kraken any claims related to collection, processing, usage, and storage your Biometric Data. |
| 231 | Cookie information does not usually directly identify you, but it can give you a more personalised web experience. | 93 | This includes any past or prior claims as well as any claims that may arise in the future related to your use of Kraken's services Biometric Data Collection Kraken collects, uses, stores, and processes Biometric Data to verify or confirm your identity, both when you initially open or verify your Kraken account and at any point thereafter as deemed necessary by Kraken or required by law or regulation. |
| 232 | Because we respect your right to privacy, you can choose not to allow some types of cookies and similar technologies although doing so may impact website functionality. 13. | 94 | Full details relating to this are contained in Kraken's Biometrics Policy. |
| 233 | Your rights regarding your personal data The rights that are available to you in relation to the personal data we process are outlined below. | 95 | Children's Personal Information And Online Privacy (COPPA) The Children's Online Privacy Protection Act (COPPA) is intended to provide parents increased control over what information is collected from their children online and how such information is used. |
| 234 | You may request to exercise these rights subject to any limitations provided for under applicable data protection laws. | 96 | The law applies to websites and services directed to, and which knowingly collect information from, children under the age of 13. |
| 235 | Confirmation and access You can ask us to confirm whether we are processing your personal data and, if so, what information we process. | 97 | Our products and services are not directed to persons under the age of 18, hereinafter "Children" or "Child," and we do not knowingly collect personal information from Children. |
| 236 | Should you wish to obtain a copy of that information, please submit your request by using our contact form. | 98 | If we learn that we have inadvertently gathered personal information from a Child, we will take legally permissible measures to remove that information from our records. |
| 237 | Rectification It is important to us that your personal data is up to date. | 99 | Kraken will require the user to close his or her account and will not allow the use of our products and services. |
| 238 | We will take all reasonable steps to make sure that your personal data remains accurate, complete and up-to-date. | 100 | If you are a parent or guardian of a Child, and you become aware that a Child has provided personal information to us, please reach out by using our contact form and you may request to exercise your applicable access, rectification, cancellation, and/or objection rights. |
| 239 | Please inform us if your personal data changes. | 101 | If you are under the age of 18, please do not provide any personal information through the Sites or Services. |
| 240 | If the personal data we hold about you is inaccurate or incomplete, you are entitled to have it rectified. | 102 | For additional information on COPPA protections refer to the Federal Trade Commission's website. |
| 241 | If we have disclosed your personal data to others, we will let them know about the rectification where possible. | 103 | GLBA Notice And Disclosure What Does Kraken Do With Your Personal Information? |
| 242 | If you ask us, and if possible and lawful to do so, we will also inform you with whom we have shared your personal data. | 104 | Financial companies choose how they disclose your personal information. |
| 243 | You may inform us at any time if your personal details have changed by using our contact form. | 105 | Federal law gives consumers the right to limit some but not all disclosures. |
| 244 | Subject to applicable law, Kraken will update your personal data in accordance with your instructions. | 106 | Federal law also requires us to tell you how we collect, disclose, and protect your personal information. |
| 245 | To proceed with such requests, in some cases we may need supporting documents from you as proof, i.e. personal data that we are required to keep for regulatory or other legal purposes. | 107 | Please read this notice carefully to understand what we do. |
| 246 | Erasure You can ask us to delete, remove, block or anonymise your personal data in certain circumstances. | 108 | All financial companies need to disclose customers' personal information to run their everyday business. |
| 247 | Such requests may be subject to any retention limits we are required to comply with in accordance with applicable laws and regulations. | 109 | In the section below, we list the reasons financial companies can disclose their customers' personal information; the reasons Kraken chooses to disclose, and whether you can limit this disclosure. |
| 248 | If we have disclosed your personal data to others, we will let them know about the erasure request where possible. | 110 | Kraken takes the security of personal information incredibly seriously. |
| 249 | If you ask us, and if possible and lawful to do so, we will also inform you with whom we have shared your personal data. | 111 | Please see here for further detail about our information security practices, and here for general security information. |
| 250 | On-chain attestations cannot be modified or deleted once published. | 112 | The types of personal information we collect and disclose depend on the product or service you have with us. |
| 251 | Users should carefully consider the implications before submitting an attestation. | 113 | This information can include: Social Security number and income Account balances and payment history Transaction history and account transactions Government-issued ID information Tax information Kraken collects your personal information, for example, when you: Interact with support, Kraken website or we communicate with you; Apply for or use any Kraken product or service; Open an account; Make deposits or withdrawals from your account; Give us your income information; Provide employment information or your employment history; Give us your contact information; Show your government-issued ID or your driver's license. |
| 252 | Processing restrictions You can ask us to block or suppress the processing of your personal data in certain circumstances such as if you contest the accuracy of that personal data or object to us processing it. | 114 | We also collect your personal information from third parties, such as credit bureaus, affiliates, your social account providers Apple or Google if you use our social sign-in feature, or other companies that provide services to Kraken (e.g. KYC service providers). |
| 253 | It will not stop us from storing your personal data. | 115 | Reasons We Can Disclose Your Personal Information Does Kraken Disclose? |
| 254 | If we have disclosed your personal data to others, we will let them know about the restriction of processing if possible. | 116 | Can you limit this sharing? |
| 255 | If you ask us, and if possible and lawful to do so, we will also inform you with whom we have shared your personal data. | 117 | For our everyday business purposes—such as to process your orders and transactions, maintain your account(s), respond to court orders and legal investigations, or report to credit bureaus Yes No For our marketing purposes—to offer our products and services to you, including via referral programmes Yes Yes For joint marketing with other financial companies No We don't share For our affiliates' everyday business purposes—information about your transactions and experiences Yes No For our affiliates' everyday business purposes—information about your creditworthiness Yes No For our affiliates to market to you Yes Yes For nonaffiliates to market to you No We don't share Federal law gives you the right to restrict the sharing of your personal information in the following specific situations: Sharing your creditworthiness information with our affiliates for their everyday business purposes. |
| 256 | Data portability In certain circumstances you may have the right to obtain personal data you have provided to us, in a structured, commonly used and machine-readable format, and to re-use it elsewhere or ask us to transfer this to a third party of your choice, where technically feasible. | 118 | Allowing our affiliates to use your personal information for marketing purposes. |
| 257 | Objection You can ask us to stop processing your personal data, and we will do so, if we are: Relying on our own or someone else's legitimate interests to process your personal data except if we can demonstrate compelling legal grounds for the processing or for the establishment, exercise or defence of legal claims; Processing your personal data for direct marketing; or Processing your personal data for research unless we reasonably believe such processing is necessary for the performance of a task carried out for reasons of public interest (such as by a regulatory or enforcement agency). | 119 | Sharing your personal information with non-affiliated companies for their marketing purposes. |
| 258 | Automated decision-making If we have made a decision about you based solely on an automated process that affects your ability to access our products and services or has another significant effect on you, you can request not to be subject to such a decision unless we can demonstrate to you that such decision is necessary for entering into, or the performance of, a contract between you and us. | 120 | State laws and individual companies may give you additional rights to limit sharing. |
| 259 | Even if a decision is necessary for entering into or performing a contract, you may contest the decision and require human intervention. | 121 | See below for more on your rights under state law GLBA Definitions Affiliates Companies related by common ownership or control. |
| 260 | We may not be able to offer our products or services to you, if we agree to such a request (i.e. end our relationship with you). | 122 | They can be financial and non-financial companies. |
| 261 | Complaints You have the right to complain to a competent data protection authority. | 123 | Our affiliates include other companies under common ownership in the Payward, Inc. group, such as Kraken Securities LLC. |
| 262 | Contact details are set out in Section 17 below. | 124 | Kraken does disclose to our affiliates. |
| 263 | We ask that you first reach out, by using our contact form, to give us an opportunity to address any concerns. | 125 | Non-affiliates Companies not related by common ownership or control. |
| 264 | We will promptly acknowledge receipt, review and investigate the matter, and aim to provide you a response within 30 days. | 126 | They can be financial and nonfinancial companies. |
| 265 | Withdraw consent You have the right to withdraw consent to processing based on consent at any time. | 127 | Kraken does not disclose to non-affiliates so they can market to you. |
| 266 | Note this will not affect the lawfulness of processing based on consent prior to the withdrawal of consent or on grounds where consent is not required. 14. | 128 | Joint marketing A formal agreement between non-affiliated financial companies that together market financial products or services to you. |
| 267 | Changes to this privacy notice Our privacy notice is reviewed regularly in light of new regulations, technologies, and any changes to our business operations. | 129 | Kraken does not jointly market with non-affiliated financial companies. |
| 268 | Any personal data we process will be governed by our most recent privacy notice. | 130 | To limit our sharing or ask questions about this GLBA Notice, please submit a request to us by: Using our contact form; By phone, at (888) 871- 2573 California Consumer Privacy Notice This California Privacy Notice ("California Notice") is for California residents, and describes how Kraken collects, uses, and discloses your personal information. |
| 269 | We will update the "Last updated" date accordingly at the beginning of this privacy notice. | 131 | The information on this notice provides details on how we respond to and implement processes to uphold California State laws. |
| 270 | Please review this privacy notice from time to time. | 132 | Any terms defined in the California Consumer Privacy Act (as amended by the California Privacy Rights Act of 2020) ("CCPA") have the same meaning when used in this California Notice. |
| 271 | We will announce any material changes to this privacy notice on our website. 15. | 133 | The CCPA does not apply to personal information we collect as part of our current or former client relationship with you pursuant to other privacy laws such as the federal Gramm-Leach-Bliley and Fair Credit Reporting Acts, and the California Financial Information Privacy Act. |
| 272 | Our products and services are not available to children Our products and services are not directed to persons under the age of 18 (herein, "Children", "Child") and we do not knowingly collect personal data from children. | 134 | For more information about what information is exempt from disclosure, see the section titled 'Exemptions' below. |
| 273 | If we learn that we have inadvertently processed personal data from a child, we will take legally permissible measures to remove that data from our records. | 135 | Definitions " Personal information " is information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California resident or household. |
| 274 | Kraken will require the child user to close his or her account and will not allow the use of our products and services. | 136 | This information may also be referred to in this California Notice as "personal data." "Shine the Light" and "Eraser" Laws: Residents of the State of California may request a list of all third parties to which we have disclosed certain personal information during the preceding year for those third parties' direct marketing purposes. |
| 275 | If you are a parent or guardian of a child, and you become aware that a child has provided personal data to us, please reach out by using our contact form. 16. | 137 | " Customers " are defined as individuals who access or use our services. |
| 276 | Contact information Any questions, complaints, comments and requests regarding this privacy notice are welcome and should be submitted using our contact form. | 138 | Sources Of Personal Information We gather various types of personal information from our customers from a range of sources, such as: information you give us when you sign up for, or otherwise use, our Services; information we receive from our affiliates and third parties; Information that is in the public domain; information we collect automatically through cookies and similar technologies (see our Cookie Policy for more information on this type of information). |
| 277 | You can also contact our Data Protection Officer by using our contact form. 17. | 139 | Purpose For Collection And Disclosure Of Personal Information We've collected and disclosed the below categories of personal information to create, develop, operate, deliver, and improve our services; to communicate with you; to comply with applicable laws and regulations; to ensure the safety, security and integrity of our Services; and for business and commercial purposes. |
| 278 | Data Protection Authorities If you are not satisfied with our response to your complaint, you have the right to submit a complaint to a competent data protection authority. | 140 | Kraken does not collect, use, or disclose sensitive personal information for purposes other than those specified in this Notice, to provide the Services, or as permitted under applicable law. |
| 279 | Examples of relevant data protection authorities are listed below: For residents of Australia: Office of the Australian Privacy Commissioner GPO Box 5218, Sydney, NSW 2001, Australia For residents of Bermuda: The Office of the Privacy Commissioner 4th Floor Maxwell Roberts Building 1 Church Street Hamilton, HM11 Bermuda For residents of Brazil: The Brazilian Data Protection Authority (ANPD) Setor Comercial Norte - SCN, Quadra 6, Conjunto "A", Edifício Venâncio 3000, Bloco "A", 9º andar, CEP 70.716-900 Brasília–DF +55 61 2017-3338 Brazil For residents of Canada: Office of the Privacy Commissioner of Canada 30, Victoria Street Gatineau, QC K1A 1H3, Canada For residents of the United Kingdom: The Information Commissioner's Office Wycliffe House, Water Ln Wilmslow SK9 5AF, UK For residents of the European Economic Area: You may complain to your local supervisory authority or to our lead supervisory authority the Irish Data Protection Commission: Data Protection Commission 21 Fitzwilliam Square South Dublin 2 D02 RD28 Ireland For clients of Payward Europe Digital Solutions (CY) Limited (For MIFID2 financial instruments, including derivatives) The Office of the Commissioner for Data Protection (Cyprus) Office address: Kypranoros 15, Nicosia 1061, Cyprus Postal address: P.O.Box 23378, 1682 Nicosia, Cyprus | 141 | Kraken does not sell personal information. |
| 142 | For more information about how Kraken may use your personal information, please refer to other potentially applicable notices, such as the Global Privacy Notice. | ||
| 143 | Collection And Disclosure Of Personal Information In the past 12 months, we've collected the below categories of personal information, and disclosed the specific types of personal information below with the following categories of third parties: Category of Personal Information as outlined in the CCPA Information Collected and Disclosed Categories of Recipients Identifiers Real Name, Date of Birth, Postal Address, Unique Personal Identifier, Such As: A Device Identifier; Cookies, Beacons, Pixel Tags, Mobile Ad Identifiers And Similar Technology; Customer Number, Unique Pseudonym, Or User Alias; Telephone Number And Other Forms Of Persistent Or Probabilistic Identifiers, Online Identifier, Blockchain Identifiers (such as wallet addresses, transaction hashes, or other unique on-chain identifiers) Internet Protocol Address, Email Address, Account Name, Social Security Number, Driver's License Number, Passport Number, And Other Similar Identifiers; Third Party Identity Verification Services Financial Institutions Service Providers Banking, Payments and Card Partners Payroll Connectivity Partners Professional Advisors Our Affiliates Affiliate Program Partners Protected Classifications Under California And Federal Law, Including Gender, Age, And Citizenship Supplemental Identification Information Electronic Identification Information Characteristics Of Protected Classifications Under California Or Federal Law, Such As: Race, Color, National Origin, Age, Sex, Gender, Marital Status, Citizenship Status, And Military And Veteran Status; Third Party Identity Verification Services Professional Advisors Commercial Information Such As Records Of Services Purchased, Obtained, Or Considered Transaction Information, Records Of Personal Property, Products Or Services Purchased, Obtained, Or Considered, And Other Purchasing Or Consuming Histories Or Tendencies; Third Party Identity Verification Services Financial Institutions Service Providers Professional Advisors Our Affiliates Referral Partners Affiliate Program Partners Internet Or Other Electronic Network Activity Information Product Usage Information App, Browser, And Device Information Information From Cookies And Similar Technologies Internet And Other Electronic Network Activity Information, Including, but not limited to information regarding your interaction with Websites, Applications, Or Advertisements; Third Party Identity Verification Services Service Providers Banking, Payments and Card Partners Professional Advisors Our Affiliates Geolocation Data App, browser, and device information Third Party Identity Verification Services Service Providers Banking, Payments and Card Partners Professional Advisors Audio, Electronic, Visual, Thermal, Olfactory, Or Similar Information Call And Video Recordings Communications Audio, Electronic, Visual, Or Similar Information Third Party Identity Verification Services Service Providers Professional Advisors Our Affiliates Professional Or Employment Related Information Institutional Information Direct deposit Salary Third Party Identity Verification Services Service Providers Professional Advisors Our Affiliates Inferences About Preferences, Characteristics, Predispositions, Etc. | ||
| 144 | Inferences drawn from any of the information identified above to create a profile about you reflecting your preferences, characteristics, behavior, and attitudes. | ||
| 145 | Service Providers Professional Advisors Our Affiliates Additional Data Subject to Cal. | ||
| 146 | Civ. | ||
| 147 | Code § 1798.80 Signature, Physical Characteristics Or Description, State Identification Card Number, Education, Bank Account Number, Credit Card Number, Debit Card Number, And Other Financial Information; Collection and Disclosure of Sensitive Personal Information In the past 12 months, we've collected and disclosed the following categories of sensitive personal information, with the following categories of third parties: Category of Sensitive Personal Information as outlined in the CCPA Information Collected and Disclosed Categories of Recipients Government identifiers Supplemental Identification Information Electronic Identification Information Third party identity verification services Banking, Payments and Card Partners Payroll Connectivity Partners Professional advisors The contents of a resident's mail, email, and text messages Communications Service Providers Professional Advisors Biometric Data Data generated by automatic measurements of an individual's biological characteristics, such as facial geometry, or other unique biological patterns or characteristics that are used to identify a specific individual. | ||
| 148 | Third party identity verification services Financial institutions Professional advisors Account log-in or other credentials allowing access to an account Key material you submit to our digital asset recovery service (Kraken Legacy), such as seed phrases, private keys, recovery files and hardware wallet backups, used solely to carry out the recovery process, and then permanently purged. | ||
| 149 | None, we do not disclose this information to any third party. | ||
| 150 | Selling or Sharing of Personal Information In the past 12 months, we may have shared identifiers with third party analytics providers, advertising partners, and ad networks for analytics and advertising purposes. | ||
| 151 | For referral programme administration, including commission calculation and payment, we may have shared limited pseudonymised referral performance information with referrers. | ||
| 152 | Kraken does not sell your personal information. | ||
| 153 | Rights As a California resident, you may have the rights listed below in relation to personal information that we have collected about you. | ||
| 154 | However, these rights are not absolute, and in certain cases, we may decline your request as permitted by law. | ||
| 155 | Right to Know You have a right to request the following information about our collection, use and disclosure of your personal information over the prior 12 months, and ask that we provide you with a copy of the following: Categories of personal information we have collected, sold, or shared about you; Specific pieces of personal information we collected about you; Categories of sources from which we collect personal information; The business or commercial purpose for collecting, selling, or sharing the personal information; Categories of third parties with whom we disclose that personal information; Categories of personal information disclosed about you for a business purpose; Categories of personal information that each recipient received. | ||
| 156 | Twice within a twelve month period, you have the right to request the personal information we have collected, used, disclosed, and sold about you during the past 12 months. | ||
| 157 | Right to Correct You have a right to request that we correct inaccurate personal information maintained about you. | ||
| 158 | Right to Delete You have a right to request that we delete personal information, subject to certain exceptions. | ||
| 159 | Right to Opt out of Selling or Sharing You have the right to direct a business that sells or shares personal information about you to third parties to stop doing so. | ||
| 160 | Kraken does not sell personal information. | ||
| 161 | Right to Non-Discrimination We will not discriminate against you for exercising any of these rights Right to Portability You have the right to receive this information in a format, where feasible, that is portable, usable, and allows you to transmit the personal information without impediment. | ||
| 162 | Other Rights That May Be Available in Some Circumstances Right against automated decision making A prohibition against a business making decisions about a consumer based solely on automated processing. | ||
| 163 | Private right of action The right for a consumer to seek civil damages from a business for violations of a statute. | ||
| 164 | Other California Privacy Rights The California "Shine the Light" law gives residents of California the right under certain circumstances to request information from us regarding the manner in which we share certain categories of personal information (as defined in the Shine the Light law) with third parties for their direct marketing purposes. | ||
| 165 | We do not share your personal information with third parties for their own direct marketing purposes. | ||
| 166 | Exemptions Please note that certain types of personal information collected or maintained by a covered business are exempt from the CCPA. | ||
| 167 | For example, a covered business has limited obligations, or in some cases, no obligations, under the CCPA with regard to the following types of personal information: Personal information collected, processed, sold, or disclosed pursuant to the federal Gramm-Leach-Bliley Act (Public Law 106-102) and implementing regulations, or pursuant to the California Financial Information Privacy Act (Division 1.4 commencing with Section 4050 of the California Financial Code) Medical information governed by the Confidentiality of Medical Information Act or protected health information that is collected by a covered entity or business associate pursuant to the Health Insurance Portability and Accountability Act of 1996. | ||
| 168 | Please note that the description of the CCPA set forth in this California Notice is a summary of only certain aspects of the CCPA and is not and should not be considered a complete description of the CCPA. | ||
| 169 | In addition to what is described above, the CCPA includes other exemptions that apply to particular types of personal information and particular businesses, as well as additional situations where a covered business is not required to honor a consumer's request to delete the consumer's personal information. | ||
| 170 | Other State Privacy Rights Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia provide (now or in the future) their state residents with certain rights, which may include some or all of the following depending on your location: Confirm whether we process their personal information. | ||
| 171 | Access and delete certain personal information. | ||
| 172 | Correct inaccuracies in their personal information, taking into account the information's nature processing purpose (excluding Iowa and Utah). | ||
| 173 | Data portability. | ||
| 174 | Opt-out of personal information processing for: targeted advertising (excluding Iowa); sales; or profiling in furtherance of decisions that produce legal or similarly significant effects (excluding Iowa and Utah). | ||
| 175 | Either limit (opt-out of) or require consent to process sensitive personal information. | ||
| 176 | The exact scope of these rights may vary by state, please reach out by using our contact form if you have any questions. | ||
| 177 | Exercising Rights To exercise your rights described above, please submit a request to us by: Using our contact form; By phone, at (888) 871- 2573 Only you or an agent who is authorized to act on your behalf (and registered with the California Secretary of State, if you are a California resident) may make a Request. | ||
| 178 | You may only make two Requests within a 12-month period. | ||
| 179 | Each Request must provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative. | ||
| 180 | We will make every effort to verify your identity using your email address, but we may request additional information. | ||
| 181 | If an authorized representative is making the request on your behalf, we require documentation showing that the representative has such authority. | ||
| 182 | Describe your Request with sufficient detail that allows us to properly evaluate and respond to it. | ||
| 183 | We will not respond to your request or provide you with personal information if we are unable to verify your identity, or to verify the authority for the person making the request as your agent. | ||
| 184 | We will use personal information provided in a verifiable consumer Request to verify your identity or authority to make the Request, and not for any other purpose. | ||
| 185 | To appeal a decision regarding a consumer rights request, please use the same contact details as above. | ||
| 186 | Verified Request To help protect your privacy and maintain security, we will take steps to verify your identity before granting you access to your personal information or complying with your request. | ||
| 187 | We may require you to provide any of the following information: your name, date of birth, the last four digits of your Social Security number, the email and physical addresses associated with your Kraken account, one or more recent transactions, and the last four digits of one or more of the cards associated with your account. | ||
| 188 | If you have never had an account with us and you request access to or deletion of your personal information, there is likely no reasonable method by which we can verify your identity to the level of certainty required. | ||
| 189 | The reason for this is that Kraken does not maintain information about non-account holders in a way that is linked to named actual persons (and historically has not linked IP addresses, device identifiers or other information collected by automated means to named actual persons). | ||
| 190 | In addition, if you ask us to provide you with specific pieces of personal information, we may require you to sign a declaration under penalty of perjury that you are the consumer whose personal information is the subject of the request. | ||
| 191 | For questions or concerns about our privacy notices and practices, please contact us as described in the Exercising Rights section above. | ||
| 192 | Response Timing And Format We will respond to a verifiable consumer request within 45 days of its receipt. | ||
| 193 | If we require more time (up to 90 days), we will inform you of the reason and extension period in writing. | ||
| 194 | If you have an account with us, we will deliver our written response to that account. | ||
| 195 | If you do not have an account with us, we will deliver our written response by mail or electronically, at your option. | ||
| 196 | Kraken will not charge a fee to process or respond to your verifiable consumer request, but reserves the right to request a fee if the request is excessive, repetitive, or manifestly unfounded. | ||
| 197 | If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request. | ||
| 198 | Changes To The Privacy Notice You may request a copy of this Privacy Notice from us using the contact details set out above. | ||
| 199 | Where changes to this Privacy Notice will have a fundamental impact on the nature of our processing of your personal information or otherwise have a substantial impact on you, we will give you sufficient advance notice so that you have the opportunity to exercise any rights you may have under applicable law (e.g., to object to the processing). | ||
| 200 | We reserve the right to make changes to our Privacy Notice at any time consistent with applicable local laws. | ||
| 201 | Such changes, as long as they do not have a fundamental impact on the nature of our processing of your personal information or, otherwise, have a substantial impact on you, will be posted on this page. | ||
| 202 | We encourage you to review the web site and the Privacy Notice periodically for any updates or changes. | ||
| 203 | You control your data Find answers about your privacy, your data and the choices available to you. Privacy Hub | ||
Follow unlimited companies, monitor the clauses that matter across every platform, and get the full institutional analysis on what each change obligates you to do.