Confidentiality & Data Protection at Bigiantech Gold.
We are fundamentally committed to protecting the privacy and security of our investors. Dealing in high-value physical assets requires strict confidentiality and absolute discretion. This policy outlines how Bigiantech Gold collects, processes, and protects your personal data in accordance with global data protection regulations (including GDPR and CCPA).
1. Information We Collect
To provide our secure vaulting and trading services, and to comply with international financial regulations, we collect the following categories of data:
- Identity & Compliance Data: Full legal name, date of birth, passport or national ID copies, and proof of address. This is strictly required for our KYC (Know Your Customer) protocols.
- Financial Data: Bank account details used for clearing wire transfers and processing buyback liquidations.
- Transaction Data: Details regarding your historical orders, payments, and the specific serial numbers of the physical metals assigned to your portfolio.
- Technical Data: IP address, secure login data, and device footprints utilized exclusively for fraud prevention and account security.
2. How We Use Your Information
Your data is utilized strictly for the operational fulfillment of our services. Bigiantech Gold does not, and will never, sell, rent, or lease your personal information to third parties for marketing purposes. We use your data to:
- Execute your physical bullion trades and issue legal storage certificates in your name.
- Comply with stringent Anti-Money Laundering (AML) laws and counter-terrorism financing regulations.
- Communicate securely with you regarding your vault holdings, quarterly invoices, and critical market updates.
- Prevent fraudulent activity and unauthorized access to your portfolio.
3. Data Sharing with Vaulting Partners
To establish direct, titled ownership of your physical assets, we must share your verified Legal Name and specific asset allocations with our independent vaulting operators (e.g., Malca-Amit) and our insurance underwriters (e.g., Lloyd's of London). This limited data sharing is strictly required to ensure that your storage certificate is legally issued in your name and that your assets are fully insured. These institutional partners are bound by Swiss and international banking-grade secrecy laws.
4. Data Security & Encryption
We deploy institutional-grade security architecture to protect your digital footprint. All data transmitted between your browser and our servers is encrypted using 256-bit TLS/SSL technology. Identity documents uploaded for KYC purposes are stored in deeply encrypted, offline-capable environments with strictly compartmentalized access—limited exclusively to our senior compliance officers.
5. Data Retention Protocols
Because we operate within the regulated financial sector, we are legally required to retain your Identity, Financial, and Transaction Data for a minimum period (typically 5 to 7 years) after you close your account or execute your final transaction. Once this regulatory retention period expires, your personal data is permanently and securely erased from our servers.
6. Cookies and Session Management
Our trading platform utilizes strictly necessary cookies to maintain secure login sessions, remember your localization preferences (such as currency and language), and protect against Cross-Site Request Forgery (CSRF) attacks. We do not use invasive third-party tracking pixels to monitor your browsing behavior outside of our platform.
7. Your Privacy Rights
Depending on your jurisdiction, you have specific rights regarding your personal data, including the right to:
- Request a comprehensive export of the personal data we hold about you.
- Request corrections to any inaccurate or outdated information in your profile.
- Request the deletion of your data (Note: This right is superseded by our legal obligation to retain AML/KYC records for the mandated period).
To exercise any of these rights, please contact our compliance department through the secure messaging interface on our Contact page.
8. Changes to this Policy
We may update this Privacy Policy periodically to reflect changes in international law, institutional vaulting procedures, or platform security upgrades. Significant changes will be communicated to all active investors via their registered email address prior to the changes taking effect.