Privacy and Data Policy

Grifo Rendeza treats the responsible handling of your personal information as a core priority. We use your data openly and only for defined purposes, while following applicable law and relevant privacy requirements. This policy outlines the information we obtain, the reasons for using it, retention periods and the safeguards in place.

1. Who controls the data

Under applicable privacy legislation, responsibility for your personal data rests with the website operator and the Grifo Rendeza platform. The legal notice on this website contains our contact details and further information. You may also contact our data-protection officer with privacy enquiries.

2. Information we collect

We obtain and use only information needed to deliver our services, meet legal duties and keep the platform secure. This can cover:

Identity information: given name, family name and date of birth, used for age and identity checks.
Contact information: email address, telephone number if supplied, country of residence and, where relevant, postal address.
Account and payment information: payment details, deposits, withdrawals and records of transactions.
Device and usage information: IP address, browser category, device details, access timestamps and connection records.
Verification material: identity documents, address evidence or other records needed for KYC/AML checks, where legally required.

As a rule, we do not gather sensitive categories of information, including health or religious data, unless the law requires it or you have given clear, express permission.

3. How information is obtained

We receive information through a number of protected collection methods:

Information you submit: for instance, during registration, profile changes, document verification or contact-form enquiries.
Information gathered automatically: including cookies, server records, analytics data and technical device details generated while you use the platform.
Information received from other organisations: such as payment services for deposits and withdrawals, KYC/AML verification providers or social-login services when you authorise them.

4. Why we process information

Personal data is handled only for defined, lawful and clearly stated objectives:

Creating, administering and operating your user account and access to platform tools.
Handling and safeguarding payment activity, including deposits and withdrawals.
Responding to support requests and delivering assistance suited to your needs.
Meeting statutory and regulatory responsibilities, including KYC, AML and tax-related duties.
Maintaining information security and defending against fraud, misuse and cyberattacks.
Refining the user journey and enhancing the platform’s functionality.
Sending marketing or informational communications only where you have expressly agreed to receive them.

5. Grounds for processing

To perform an agreement with you or take steps requested before entering one.
To satisfy legal responsibilities, including applicable anti-money-laundering rules.
For legitimate interests, such as preserving platform reliability and security.
With your explicit permission, for example for marketing or non-essential features.

6. When information is shared

Information is disclosed only when needed and only to selected service partners:

Banks and payment processors involved in deposits and withdrawals.
Qualified service providers that perform KYC/AML verification.
Technology and cloud-service providers bound by appropriate data-processing agreements.
Analytics and security services that, where feasible, use anonymised or pseudonymised information.
Professional advisers, including legal and tax specialists, when needed to meet legal requirements.
Public authorities or courts when disclosure is legally required or needed to protect legal rights.

We do not sell or disclose your personal information to third parties for their own commercial use.

7. Transfers across borders

Some suppliers, including cloud and analytics providers, may operate outside Mauritius or another relevant jurisdiction. Where this occurs, we use suitable safeguards—such as contractual commitments, binding corporate rules or recognised adequacy mechanisms—to maintain an appropriate level of protection.

8. Protecting your information

We protect your information through rigorous technical and organisational controls:

Protected transmission of information through up-to-date protocols, including TLS 1.3 or later.
Robust encryption for sensitive information stored on our systems, such as AES-256.
Periodic security assessments, penetration testing and independent expert reviews.
Ongoing monitoring designed to identify unusual behaviour and attempted intrusions.
Tight internal access controls with permissions assigned according to staff roles.
Client money maintained in segregated accounts with regulated partners.

No technical system can eliminate every security risk, but our controls are designed to reduce those risks substantially.

9. How long we retain data

We keep personal information only for the time needed for its stated use or for the period required by law:

While your account remains in use and our contractual relationship is ongoing.
After closure, for the duration mandated by law, such as 5–10 years for tax and regulatory records.
Where processing relies on consent, including marketing, until you revoke that consent.

When retention is no longer justified, we securely erase the information or convert it into anonymous data.

10. Your privacy rights

You retain a range of rights over your personal information, including the ability to:

Ask what personal information we hold about you.
Ask us to correct inaccurate information or fill in missing details.
Ask for deletion where no legal retention requirement prevents it.
Ask us to limit processing in circumstances provided by law.
Obtain your information in a structured, widely used and machine-readable form, where data portability applies.
Revoke consent at any time for processing that takes place in the future.
Submit a complaint to the relevant data-protection authority.

11. Cookies and related tools

Cookies and comparable tools help the website operate, understand how visitors use it and improve the experience. Necessary cookies remain active, while analytics and advertising cookies are used only after you provide consent. Please consult our separate cookie policy for more details.

12. Policy updates

We may update this policy from time to time to reflect legal or regulatory developments and changes to our features. The current version is published on our website, and material updates will be communicated by email or within the platform.

13. Privacy contact details

For privacy questions, policy queries or requests to exercise your rights, email $site_gmail or use the website contact form. Our data-protection officer will assess your message and reply as soon as reasonably possible.

When you access Grifo Rendeza, you confirm that you have reviewed this privacy policy and accept its provisions.