Introduction
This Privacy Notice explains how Xhjili collects, uses, shares and protects personal data when you visit our Website or use our services. It applies to all individuals who interact with Xhjili as a user, customer or visitor and governs data protection in accordance with applicable laws.
Data controller and contact
Xhjili is the data controller responsible for the processing of your personal data described in this Notice. If you have questions about this Policy or wish to exercise your rights, please contact our designated privacy contact at [email protected]. We comply with applicable data protection laws and maintain appropriate governance to safeguard your information.
Personal data we collect
- Identity data: name, date of birth, and government-issued identifiers when required for verification.
- Contact data: email address, postal address, and phone number.
- Account data: username, password (stored in a hashed form), account status and activity.
- Verification data: documents for identity verification and address confirmation as required by regulatory obligations.
- Financial data: payment instrument details, deposit and withdrawal history, and related transactional information.
- Usage data: device information, IP address, browser type, operating system, and log files describing how you interact with the Website.
- Communications data: correspondence between you and Xhjili through our channels.
- Marketing preferences: consent status and communication preferences for promotional material.
How we use your data
We process your data to provide and administer our services, verify identity, process transactions, and communicate with you. We also use data to protect against fraud and to improve security, to analyze and improve our offering, and to comply with legal and regulatory obligations. When we market to you, we rely on your consent where required. Specific uses and lawful bases include:
- To perform our contract and provide the Services, including account management and customer support. Legal basis: GDPR Article 6(1)(b).
- To verify identity and comply with anti money laundering and licensing requirements. Legal basis: GDPR Articles 6(1)(c) and 6(1)(f).
- To process payments and transactions related to your account. Legal basis: GDPR Article 6(1)(b).
- To contact you about your account, updates, and security. Legal basis: GDPR Articles 6(1)(b) and 6(1)(f).
- To maintain and improve the Website and its security, including fraud prevention. Legal basis: GDPR Article 6(1)(f).
- To anonymize data for research and analytics. Legal basis: GDPR Article 6(1)(f).
- To engage in direct marketing with your consent and to manage opt-in and opt-out preferences. Legal basis: GDPR Article 6(1)(a).
Sharing, safeguarding and retention of your data
We may disclose your personal data to service providers and partners who perform functions on our behalf, including hosting, payment processing, identity verification, customer support, analytics, auditing, and compliance. We ensure these recipients are contractually bound to protect your data and to use it only for the purposes described in this Notice. We may also share data with regulatory authorities where required by law.
We implement appropriate technical and organizational security measures to safeguard your data, including encryption in transit, access controls, and regular security reviews. Personal data is retained for the period necessary to fulfill the purposes described in this Notice and in accordance with legal obligations. Generally, we retain personal data for the duration of your relationship with Xhjili and for a minimum of five (5) years from last activity or account closure, unless a longer period is required by applicable law or regulation. You may request erasure or anonymization in accordance with your rights, subject to regulatory retention requirements.
International transfers and storage
Where necessary, we may transfer personal data to processors or partners located outside your jurisdiction. Such transfers are performed only with appropriate safeguards, including contractual measures designed to protect your data and ensure compliance with applicable data protection laws.
Your rights
You have rights under applicable data protection laws, including the right to access, rectify, erase, restrict processing, and object to processing. You may exercise these rights by contacting [email protected]. You also have the right to data portability and to withdraw consent for processing activities such as marketing. If you believe your data protection rights have been violated, you may lodge a complaint with the competent supervisory authority.
Cookies and online tracking
We use cookies to support essential operations, improve performance, and tailor marketing. You may manage cookie settings in your account preferences, and you may withdraw consent for non-essential cookies where applicable. For details about cookies used and purposes, refer to our Cookies Policy.
Updates to this privacy policy
We may update this Privacy Notice from time to time. Material changes will be communicated via notice on the Website or by email to the address you have provided. The date of the last update is displayed at the top of this policy.
Contact us
If you have questions about this Privacy Notice, wish to exercise your rights, or need assistance with data protection matters, please contact [email protected]. If you are not satisfied with our response, you may escalate the matter to the appropriate supervisory authority in your jurisdiction.