Privacy Policy

1. Introduction

BlockHQ ("we," "our," or "us") is committed to protecting the privacy and security of our clients' personal and financial information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you use our institutional cryptocurrency over-the-counter (OTC) trading services.

By accessing or using our services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

2. Information We Collect

2.1 Personal Information

We collect personal information necessary to comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations, including:

• Full legal name and date of birth
• Government-issued identification documents (passport, driver's license)
• Residential and business addresses
• Contact information (email, phone number)
• Tax identification numbers
• Proof of address documentation

2.2 Financial Information

• Bank account details for fiat settlements
• Cryptocurrency wallet addresses
• Trading history and transaction records
• Source of funds documentation
• Net worth and investment experience statements

2.3 Technical Data

• IP addresses and device identifiers
• Browser type and version
• Login timestamps and access logs
• API usage and integration data

3. How We Use Your Information

We use collected information for the following purposes:

• Regulatory Compliance: To meet KYC, AML, and Counter-Terrorist Financing (CTF) obligations
• Service Provision: To execute trades, process settlements, and provide customer support
• Risk Management: To assess creditworthiness, detect fraud, and prevent unauthorized access
• Communication: To send transaction confirmations, security alerts, and service updates
• Analytics: To improve our platform performance and user experience

4. Information Sharing and Disclosure

We do not sell or rent your personal information. We may share data with:

• Regulatory Authorities: When required by law or to comply with legal processes
• Service Providers: Third-party KYC/AML verification services, custody partners, and payment processors (under strict confidentiality agreements)
• Legal Counsel: In connection with legal proceedings or disputes
• Business Transfers: In the event of a merger, acquisition, or asset sale

5. Data Security

We implement industry-leading security measures to protect your information:

• 256-bit AES encryption for data at rest
• TLS 1.3 encryption for data in transit
• Multi-factor authentication (MFA) requirements
• Cold storage for cryptocurrency assets
• Regular security audits and penetration testing
• Restricted access controls and employee training

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, and for a minimum of 7 years following account closure to comply with regulatory recordkeeping requirements.

7. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal information we hold about you
• Correction: Request corrections to inaccurate or incomplete data
• Deletion: Request deletion of your data (subject to legal retention requirements)
• Objection: Object to certain processing activities
• Portability: Request transfer of your data to another service provider

To exercise these rights, contact us at privacy@oneblockhq.com.

8. International Transfers

Your information may be transferred to and processed in jurisdictions outside your country of residence. We ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by regulatory authorities.

9. Cookies and Tracking

Our website uses essential cookies for authentication and security. We do not use third-party advertising or analytics cookies. You can manage cookie preferences through your browser settings.

10. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. Material changes will be communicated via email and posted on our website 30 days in advance of taking effect.

11. Contact Us

For questions about this Privacy Policy or our data practices, contact our Data Protection Officer: