Keeping your personal information private and secure

Equinox Lotorael treats your personal information with care. Each processing activity has a clear purpose, is explained in accessible terms and follows applicable requirements, including the GDPR where it applies. This policy outlines the information we may gather, how we use it, how long we keep it and the safeguards used to protect it.

1. Who controls the data

The operator of the Equinox Lotorael website and platform acts as the data controller. Its registered name, contact information and other legally required details appear in the applicable section. The person overseeing data protection can also help with requests concerning your rights.

2. Personal information categories we collect

We gather only the information needed to provide the service, fulfil our responsibilities and keep the platform secure. This may cover the following categories:

Identity information: your name, birth date and other identifying details, including information used to check your identity and confirm that you satisfy the minimum age requirement.
Contact information: your email address, supplied phone number, country of residence and postal address where needed to deliver the service.
Account and payment activity: payment information, deposited or withdrawn amounts and records of transactions that have been completed.
Device and usage data: IP address, browser details, device attributes, connection timestamps and technical records.
Verification material: an identity document, address evidence or another document needed for relevant KYC/AML procedures.

Except where legislation requires it or you have specifically authorised it, we generally do not seek sensitive details such as health information or religious views.

3. How information is sourced and collected

The information we handle can originate from several channels, each supported by suitable protections:

Information you submit: when opening an account, changing your profile, uploading verification material or contacting us via a form.
Information collected automatically: through cookies, server records, measurement services and technical signals produced by your device while you browse.
Information supplied by partners: such as payment providers handling deposits and withdrawals, KYC/AML screening services or social sign-in providers where you have agreed to their use.

4. Why we process your information

We use personal information for defined and lawful purposes that are communicated to you:

To open, manage and maintain your account and provide access to the platform functions available to you.
To complete and safeguard payment activity, including deposits and withdrawals.
To deal with your questions and offer relevant support.
To satisfy legal and regulatory duties, including requirements connected with KYC, AML and tax matters.
To protect our systems and help prevent fraud, improper use and access without permission.
To understand how the service is used, improve the user experience and develop platform functionality.
To provide updates or commercial communications only where you have given clear consent.

5. Grounds for processing

To enter into or carry out a contract, including relevant steps taken before a contract is formed.
To meet a legal requirement, including duties aimed at preventing money laundering.
To protect our legitimate interests, such as the platform's security, availability and dependable operation.
With your permission, including for marketing communications and non-essential features.

6. Recipients and circumstances for sharing

We share information only when a lawful basis allows or requires this, with specified recipients and within an appropriate framework:

Banks and payment service operators that support deposits and withdrawals.
Specialist providers carrying out identity checks and KYC/AML screening.
Technology and cloud-hosting suppliers that process information under their contractual responsibilities.
Security and analytics services that, where practical, work with anonymised or pseudonymised information.
Professional advisers, including legal or tax specialists, when their input is needed for us to fulfil our duties.
Government, administrative or judicial bodies where disclosure is legally required or needed to protect our rights.

We do not sell personal information or provide it to third parties for their independent marketing or commercial campaigns.

7. Information transfers beyond New Zealand

Certain processors, such as cloud-hosting and analytics providers, may operate outside New Zealand or the European Economic Area. In those cases, we apply safeguards recognised by applicable privacy rules, including contractual protections or an adequacy decision where available, to preserve an appropriate level of protection.

8. Organisational and technical security controls

We protect your information through strong technical safeguards and internal processes, including the following:

Data in transit is protected with current encryption standards, including TLS 1.3 or a later version.
Sensitive information held in storage is encrypted, including through AES-256 technology.
We conduct security reviews, audits and penetration testing at intervals, using independent specialists when appropriate.
Ongoing infrastructure monitoring is used to identify unusual activity and attempted unauthorised entry.
System access is assigned according to a person's role and level of responsibility.
Client money is maintained in segregated accounts with partners that remain subject to their own regulatory obligations.

While no online system can remove every possible threat, we use reasonable and proportionate controls to limit exposure.

9. How long information is retained

We keep information only for the time needed for the purposes described or for the period specified by applicable requirements:

While your account is open and our contractual relationship remains in place.
Following account closure, for the duration required by applicable rules, which may be as long as 5 to 10 years for some tax or regulatory records.
When consent supports the processing, including marketing, until you revoke that consent.

After the relevant retention period ends, information is securely erased or anonymised so it can no longer be associated with you.

10. Your rights over personal information

Privacy legislation that applies to you may provide several rights concerning your personal information, including:

Ask whether we process your information and obtain a copy of the information concerned.
Ask us to correct inaccurate information or complete information that is missing.
Seek removal of your information when there is no legal or other valid reason for us to retain it.
Ask us to limit how your information is used in circumstances recognised by applicable law.
Receive your information in a structured, widely used and machine-readable form and, where applicable, transfer it to another provider.
Revoke consent at any time for processing that takes place afterwards.
Make a complaint to the Office of the Privacy Commissioner, New Zealand's privacy regulator.

11. Cookies and similar tools

This site uses cookies and comparable technologies to run the service, understand usage and make navigation more convenient. Essential cookies operate by default; measurement and advertising cookies are used only when you consent. More detail is available in our cookie policy.

12. Changes to this privacy policy

This policy may be revised to account for legislative developments, additional obligations or changes to the service. The revised version will be posted online. Where an update materially affects you, we may also notify you by email or through the platform.

13. Getting in touch about your information

If you want to ask about this policy, your information or your privacy rights, contact us at $site_gmail or submit the site's contact form. The appropriate team will assess your request and reply as promptly as practicable.

By accessing or using Equinox Lotorael, you confirm that you have reviewed this policy and agree to its terms.