Privacy Policy

This Privacy Policy (“Policy”) explains how CoinProp Ltd. (“CoinProp”, “we”, “us”, “our”), a company incorporated under the laws of Saint Lucia, and, where applicable, its affiliated and parent entities, including Afra Digital Ltd. in Canada, collect, use, store, share, and protect your personal information when you use our websites, services, platforms, and tools (collectively, the “Services”).

By using our Services, you acknowledge that you have read, understood, and agree to this Policy. If you do not agree, you must not use our Services.

If you are located in certain jurisdictions, additional rights may apply to you. See Appendix A – Regional Privacy Rights.

The controller of your personal data — meaning the entity that determines how and why your personal information is processed — is:

CoinProp Ltd.

• (Registration No. 2025-00242) The Sotheby Building, Rodney Village, Rodney Bay, Gros-Islet, Castries, Saint Lucia

For certain processing operations, CoinProp Ltd. acts jointly with its parent/back-end service provider:

Afra Digital Ltd.

• (Registration No. FM1080807), with a physical address at Unit #08, 104-32615 South Fraser Way, Abbotsford, BC V2T 1X8

These entities may share your personal data between them for operational, compliance, customer support, and service delivery purposes. All processing is performed in accordance with this Privacy Policy and applicable data protection laws.

How to Contact Us for Privacy Matters:

• Email: privacy@coinprop.io
• Contact Form: https://coinprop.io/contact-us

If you are located in the European Economic Area, United Kingdom, California, or other jurisdictions with specific privacy laws, you may also contact us via the above details to exercise your legal rights under those frameworks.

This Policy applies to:

• All users of coinprop.io and its subdomains.
• All services operated by CoinProp, including the CoinProp evaluation platform and trading dashboard.
• Any interaction with our customer support, marketing communications, and affiliate program.

It does not apply to third-party platforms or services you may access through our links.

4.1 Information You Provide Directly

• Account Registration Data: Name, email address, phone number, date of birth, account credentials.
• KYC/AML Verification Data: Government-issued ID, proof of address, biometric verification, sanctions screening results (via third-party providers like Veriff or other compliance partners).
• Payment and Billing Data: Billing address, payment method details (processed by third-party payment processors; we do not store full card details).
• Affiliate Program Data: Affiliate code, tax information, payment preferences.
• Support Communications: Emails, chat transcripts, or other correspondence.

4.2 Information Collected Automatically

• Technical Data: IP address, device type, browser type, operating system, language settings.
• Usage Data: Pages viewed, time spent on the site, clickstream activity, trade simulation interactions.
• Cookies & Tracking: See Section 11.

4.3 Information from Third Parties

• Identity verification and sanctions check providers.
• Payment processors.
• Marketing affiliates and referral partners.

We process personal information to:

• Provide and operate our Services.
• Verify identity to comply with AML/CTF obligations.
• Process transactions and maintain accurate billing records.
• Communicate regarding accounts, trading activity, and service updates.
• Prevent fraud and enforce our Terms of Use.
• Conduct analytics to improve our Services.
• Comply with legal obligations and respond to lawful requests.

We process your data based on:

• Contractual necessity – to deliver the Services you request.
• Legal obligation – to meet AML, CTF, and regulatory requirements.
• Legitimate interests – to maintain security, improve services, and prevent abuse.
• Consent – where required by law (e.g., marketing communications).

We may share your personal data with:

• Service providers (KYC, payment processing, hosting, analytics, marketing).
• Regulators and law enforcement (where legally required).
• Affiliate partners (only aggregated data unless you consent to share personal identifiers)

Service providers are bound by contract to keep your information confidential and to use it only for providing agreed services to us.

We do not sell your personal information.

We retain personal data only as long as necessary:

• Account information: while active and up to 5 years after closure.
• KYC data: 5 years from last transaction (per AML laws).
• Transactional records: up to 7 years.
• Marketing data: until consent is withdrawn.

We implement technical and organizational measures to protect your data, including:

• Encrypted storage and transfer.
• Multi-factor authentication for staff access.
• Regular security audits and penetration testing.

However, no method of transmission or storage is 100% secure.

Your personal data may be transferred to and processed in countries outside your country of residence, including Canada, Saint Lucia, and other jurisdictions where our service providers are located. We ensure such transfers comply with applicable data protection laws through contractual safeguards and other measures.

We use cookies, web beacons, and similar technologies to:

• Remember your preferences.
• Measure site performance.
• Support security features.

You can disable cookies in your browser settings, but some features may not function properly.

Depending on your jurisdiction, you may have rights to:

• Access, correct, or delete your data.
• Restrict or object to processing.
• Withdraw consent.
• Data portability.
• Lodge a complaint with a supervisory authority.

See Appendix A for region-specific details.

Our Services are not directed at individuals under 18, and we do not knowingly collect personal data from minors.

We may update this Policy at any time. The “Last Updated” date will be revised accordingly. Continued use after changes means you accept the updated Policy.

A.1 European Union / EEA (GDPR)

Rights to access, rectification, erasure, restriction, portability, objection. Right to lodge a complaint with your national supervisory authority.

A.2 United Kingdom (UK GDPR)

Same rights as GDPR.

A.3 California (CCPA/CPRA)

SRight to know, delete, correct, and opt out of “sale”/“sharing” of personal data. Contact us at privacy@coinprop.io.

A.4 Canada (PIPEDA)

Right to access, correct, and withdraw consent for personal data use, subject to legal restrictions.

A.5 Other Regions

Local data protection laws may grant you additional rights. Contact us for details.