Privacy Policy

Effective Date: 03 March 2025
Last Updated: February 2025

​

At Mezzarion, we are committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, share, and protect your personal information, as well as your rights under applicable data protection laws.

​

This policy applies to all users of Mezzarion's website, services, and digital platforms, including customers, partners, investors, and visitors.

​

1. Scope & Compliance

​

This Privacy Policy is designed to comply with the following global data protection regulations:

-General Data Protection Regulation (GDPR) (EU & UK)
-California Consumer Privacy Act (CCPA) (USA)
-Personal Data Protection Act (PDPA) (Singapore & Other Regions)
-POPIA (South Africa), Nigeria Data Protection Regulation (NDPR), and Other African Privacy Laws

By accessing our website or using our services, you consent to the collection, processing, and storage of your personal data in accordance with this policy.

​

2. What Personal Data We Collect

​

We collect personal data in the following ways:

​

2.1 Information You Provide Directly

​

Identity Data: Name, surname, job title, company name, and date of birth.
Contact Data: Email address, phone number, postal address, and country of residence.
Account & Transaction Data: Usernames, passwords, payment details, and transaction history.

 

2.2 Information Collected Automatically

​

Device & Usage Data: IP address, browser type, operating system, pages viewed, and time spent on our website.
Cookies & Tracking Data: Collected via cookies, web beacons, and analytics tools (see Section 6: Cookies & Tracking Technologies).

 

2.3 Data from Third Parties

​

We may receive personal data from third-party sources, including:
-Business partners & service providers (e.g., payment processors, logistics providers).
-Public databases & government records (if legally required).
-Social media platforms (if you interact with us via Facebook, LinkedIn, Twitter, etc.).

 

3. How We Use Your Personal Data

​

We process personal data for the following purposes:

Service Provision: To provide access to our mining, trade, and investment services.
Account Management: To create, maintain, and secure user accounts.
Communications & Marketing: To send newsletters, promotional materials, and important updates (with user consent).
Business Operations & Legal Compliance: To comply with regulatory requirements, process payments, and prevent fraud.
Analytics & Service Improvement: To monitor website performance, track engagement, and optimize user experience.

Legal Basis for Processing (for GDPR Compliance)

• Consent: When users opt into communications or provide personal information voluntarily.

• Contractual Necessity: When data is needed to provide requested services.

• Legitimate Interest: For business growth, security, and fraud prevention.

• Legal Obligations: When required by law to process personal data.

​​

4. How We Share Your Data

​

We do not sell personal data, but we may share it with:

Service Providers: Hosting companies, IT security firms, and analytics providers.
Financial Institutions: Payment processors and fraud prevention services.
Regulatory Authorities: When required by law or to protect our legal interests.
Business Partners: Where necessary for joint ventures, mergers, or acquisitions (subject to confidentiality agreements).

​

5. International Data Transfers

​

Mezzarion operates globally, and your data may be stored or processed in countries outside your country of residence. When transferring data internationally, we ensure:

Adequate Data Protection Measures: Transfers comply with GDPR, CCPA, and local privacy laws.
Standard Contractual Clauses (SCCs): Used for transfers to third countries without an adequacy decision.
Encryption & Security Protocols: Data is protected through secure servers and encryption methods.

If you are an EU or UK resident, you have the right to object to international transfers (see Section 7: Your Privacy Rights).

​

6. Cookies & Tracking Technologies

​

We use cookies and similar tracking technologies to enhance user experience. You can control cookie settings through:

Browser Settings: Modify preferences to block or accept cookies.
Cookie Banner: Manage consent upon visiting our website.
Do Not Track (DNT): Supported in some browsers to limit tracking.

Types of Cookies We Use:

• Essential Cookies: Required for website functionality.

• Analytics Cookies: Used for traffic monitoring and performance analysis.

• Marketing Cookies: Used for personalised advertising and promotions.

For more details, see our Cookie Policy.

​

7. Your Privacy Rights

​

Depending on your location, you have the following rights regarding your personal data:

Access & Portability: Request a copy of the data we hold about you.
Correction: Update inaccurate or incomplete data.
Deletion ("Right to Be Forgotten"): Request removal of personal data.
Objection & Restriction: Limit or object to data processing.
Withdraw Consent: Opt out of marketing communications at any time.

To exercise your rights, contact us at info@mezzarion.com.

​

8. Data Retention & Security

​

Retention Period: We retain personal data only as long as necessary for legal and operational purposes.
Data Security Measures: We use firewalls, encryption, and access controls to protect personal information.
Data Breach Response: In case of a data breach, affected users will be notified within 72 hours, as required by law.

 

9. Children’s Privacy

​

Our services are not intended for individuals under 16 years old. We do not knowingly collect personal data from children. If we become aware of such data collection, we will delete it immediately.

 

10. Changes to This Privacy Policy

​

We may update this policy periodically. Changes will be communicated via:

Website updates & banners.
Email notifications (for major changes).

​

11. Contact Information & Complaints

​

For inquiries or concerns regarding this policy, please contact:

info@mezzarion.com

If you believe your data protection rights have been violated, you may file a complaint with your local data protection authority (e.g., ICO (UK), GDPR regulators, or CCPA enforcement agencies).