Who we are
Horwick Technologies Ltd (“Horwick”, “we”, “us”) operates the Horwick trading platform and is regulated by the Virtual Assets Regulatory Authority (VARA), Dubai. We are the controller of the personal data described in this policy. Our registered details are listed on the Contact page.
Data we collect
We collect only the data we need to open and run your account, meet our regulatory obligations and improve the service.
Data you give us
- Identity data: full name, date of birth, nationality, government ID and a selfie for verification.
- Contact data: email address, phone number and residential address.
- Financial data: source of funds, bank details and wallet addresses used for deposits and withdrawals.
Data we collect automatically
- Device and log data: IP address, browser type, operating system and session timestamps.
- Approximate location: the country of your IP address, used only at the moment of your visit to show the site in French to visitors from France, Belgium, Luxembourg and Switzerland. It is not stored.
- Usage data: pages visited and features used, collected with cookies as described in our Cookie Settings.
How we use your data
We use personal data to verify your identity under our AML & KYC Policy, execute and settle your trades, process deposits and withdrawals, prevent fraud, respond to support requests, and, with your consent, send product updates.
Legal bases
We process data to perform our contract with you, to comply with legal and regulatory obligations, for our legitimate interests (such as securing the platform), and on the basis of your consent where required.
Sharing your data
We never sell personal data. We share it only with:
- Service providers such as identity-verification, cloud hosting and payment partners, under written data-processing agreements.
- Regulators, courts and law-enforcement authorities where the law requires it.
- Professional advisers such as auditors and lawyers, under confidentiality obligations.
International transfers
Where data is transferred outside the UAE, we rely on adequacy decisions or contractual safeguards that provide an equivalent level of protection.
Data retention
We keep identity and transaction records for at least five years after the end of our relationship, as required by anti-money-laundering rules. Other data is deleted or anonymised once it is no longer needed.
Security
Data is encrypted in transit (TLS 1.2+) and at rest (AES-256). Access is limited to staff who need it, protected by multi-factor authentication and logged. Every account is protected by two-factor authentication.
Your rights
Depending on where you live, you may have the right to access, correct, delete or port your data, to object to or restrict processing, and to withdraw consent at any time. Some rights are limited by our record-keeping obligations.
Contact
To exercise your rights or ask a question, write to our Data Protection Officer at [email protected] or use the contact form.