Privacy Policy

Introduction

Nilor Group Limited (“Nilor Group,” “we,” “us,” or “our”) respects your privacy and is committed to protecting personal information entrusted to us.

This policy explains how we collect, use, store, share and protect information when you visit our website, use our mobile application, create an account, use our investment platform, communicate with us or otherwise use our services. It also explains choices and rights that may be available to you.

By using our services, you acknowledge the practices described in this Privacy Policy.

About Nilor Group Limited

Nilor Group Limited is registered in the United Kingdom.

International offices

Germany: Unter den Linden 13/15, 10117 Berlin
Singapore: 68 Orchard Rd, B1-26 Plaza Singapura, Singapore 238839
Azerbaijan: 153 Neftchilar Avenue, Nasimi District, Baku

For relevant processing activities, Nilor Group Limited may act as controller, subject to applicable law and the structure of the service.

Scope of This Privacy Policy

This policy applies to information collected through our official website, mobile applications, investment platform and dashboard, registration, identity verification, deposits and withdrawals, customer support, email and other services that refer to this policy.

Third-party websites and services may operate under their own privacy policies.

Information We May Collect

The information collected depends on how you interact with Nilor Group and which services you use. Identification information may include your full name, date of birth, nationality, country of residence, residential address, email address, telephone number and other information needed to identify or communicate with you.

Identity Verification Information

Where verification is required, we may request a passport, national identity card, accepted driving licence, photograph or selfie, proof of address, document numbers, issue and expiry dates, and other verification information.

Where permitted and necessary, biometric or facial-comparison technologies may be provided by us or specialist providers and handled in accordance with applicable legal requirements and disclosures.

Financial Information

We may process deposit and withdrawal amounts, payment and transaction history, balances, investment amounts, profit and loss information, payment-method and bank-account details, provider information, transaction references and currency information.

Third-party payment providers may directly handle payment credentials. For example, complete card details may not be stored on Nilor Group systems.

Investment Account Information

We may maintain investment capital, account balance, investment history, profit and loss records, withdrawals, deposits, activity, transaction dates, fees, portfolio-related information and other records needed to administer your account and report investment activity.

Compliance and Source-of-Funds Information

Where necessary, we may request occupation, employer or business details, source of funds or wealth, expected activity, tax residency and identification, supporting financial documents and explanations relating to transactions. Checks may also address sanctions, fraud, money laundering or other financial crime.

Technical and Device Information

Automatically collected information may include IP address, device and operating system, browser and application version, language, approximate IP-derived location, login timestamps, sessions, accessed pages or features, diagnostics and security events.

This may support security, fraud prevention, analytics, troubleshooting and service improvement.

Communications With Us

If you contact us by email, support form, telephone, live chat or another channel, we may retain your contact details, message content, support history and information needed to respond. Call recordings, where used, will be handled according to applicable law with notice where required.

How We Collect Information

We may obtain information directly from you; automatically through the website, app or Platform; from payment, identity, fraud-prevention and technology providers; and from publicly available or legally accessible sources for lawful compliance or fraud-prevention purposes.

How We Use Your Information

You may opt out of eligible marketing without stopping essential service communications.

Legal Bases for Processing

Where UK GDPR or similar law applies, processing may rely on performance of a contract, legal obligations, legitimate interests such as security and fraud prevention, or consent. Different activities may rely on different legal bases.

Identity Verification and Financial Crime Prevention

Where applicable, we may verify identity and documents, prevent fraud, monitor suspicious transactions, conduct sanctions screening, investigate activity and comply with lawful authority requests. Specialist providers may assist. Law may prevent disclosure of particular investigations.

How We Share Personal Information

Nilor Group does not sell your personal information as part of its ordinary business model. Where necessary, information may be shared with:

• Banks, payment processors and financial institutions.
• Identity, fraud-prevention, screening and compliance providers.
• Hosting, cloud, cybersecurity, communications, analytics and technology providers.
• Lawyers, accountants, auditors, insurers and professional advisers.
• Government or regulatory authorities where lawfully required.
• Parties to a merger, acquisition, restructuring, financing or asset sale.

Service providers are expected to process information for appropriate purposes with applicable contractual and legal protections.

International Data Transfers

Our international presence and service providers may result in processing outside your country. Where transfer safeguards are required, we seek appropriate mechanisms such as adequacy regulations or decisions, approved contractual protections or other legally recognized safeguards.

How We Protect Your Information

Depending on the system, safeguards may include encryption in transit, access controls, authentication, suspicious-activity monitoring, infrastructure security, secure hosting, restricted employee access, logging, auditing, backup and recovery procedures.

Access should be limited to individuals and providers with legitimate business needs. However, no website, application, network or electronic storage system can be guaranteed completely secure.

Your Responsibility for Account Security

Use a strong unique password, keep credentials and authentication codes confidential, secure your connected email, avoid untrusted devices, verify the official Nilor Group website or app and notify us promptly of suspected unauthorized access. Nilor Group should never request your password through an unsolicited message.

Data Retention

We retain information only as long as reasonably necessary for its purpose and applicable legal, regulatory, accounting, security and dispute requirements. Periods depend on information type, our relationship, record-keeping requirements, fraud prevention, disputes and security.

Account closure does not necessarily permit immediate deletion. When information is no longer required, we may securely delete or anonymize it subject to applicable requirements.

Cookies and Similar Technologies

Cookies may maintain login sessions, remember preferences, improve security, prevent fraud, measure performance and help us understand feature use. Where required, non-essential cookies will be subject to appropriate consent choices. Further information may be provided in a separate Cookies Policy.

Analytics

Analytics technologies may help us understand website and app performance, identify technical problems, understand feature usage and improve the Platform. Third-party analytics processing should be subject to appropriate contractual and privacy protections.

Marketing Communications

Where permitted, we may communicate about services and updates. Where consent is required, marketing will only be sent after consent. You may unsubscribe through the provided mechanism or by contacting us. Opting out does not stop essential account, security or transaction messages.

Your Privacy Rights

Depending on applicable law, you may have rights to:

Rights are subject to legal limitations; transaction or identity records may need to be retained despite a deletion request.

UK Privacy Rights

Where UK law applies, individuals may have rights under the UK General Data Protection Regulation and Data Protection Act 2018, and may raise concerns with the Information Commissioner's Office (ICO).

Rights requests normally require no payment, though reasonable measures may apply to manifestly unfounded or excessive requests. We may verify your identity before completing a request.

Automated Decision-Making

We or our providers may use automated systems for security, fraud detection, identity verification or compliance. Where solely automated processing has legal or similarly significant effects, we seek to provide legally required protections, potentially including information, human intervention or challenge rights.

Children's Privacy

Our investment services are not intended for children. Users must meet applicable minimum-age requirements. If we discover information collected from an ineligible minor, appropriate action will be taken according to law.

Third-Party Links

External links do not mean Nilor Group controls third-party privacy practices. Third parties maintain their own policies, terms and security practices, which users should review before providing information.

Changes to This Privacy Policy

We may update this policy for changes in services, technology, business practices, legal requirements or privacy and security procedures. The revised version will show an updated effective date. Where required, we will provide notice or obtain consent before material changes take effect.

Contact Us About Privacy

For questions about this policy, processing or an applicable privacy right, contact us using the details below. We may need to verify your identity before responding to requests involving account information.