Privacy Policy

Effective from: 1 January 2026

Data We Collect

We collect the information you provide at registration — email address, country of residence, and KYC documents where required by your account activity level.

We also collect technical data automatically: IP address, device type, browser version, and session timestamps. This data is used solely for security monitoring and fraud prevention.

How We Use Your Information

Your data is used to operate your account, process trades, meet regulatory obligations, and send transactional notifications. We do not sell personal data to advertisers or data brokers.

Cookies

carcoinmarket uses strictly necessary cookies for session management and security, plus optional analytics cookies to measure platform performance. You can disable analytics cookies in your browser settings.

We do not use third-party advertising cookies. Our cookie policy is reviewed and updated annually — last updated January 2026.

Data Sharing

We share data only with our licensed KYC/AML verification provider, Certik and Hacken for security audits, and regulatory authorities when legally required. No other third-party data sharing occurs.

Data Security

All personal data is encrypted with AES-256 at rest and in transit. Access to user records is restricted to credentialed staff via multi-factor authentication.

We conduct annual penetration tests in addition to our quarterly smart contract audits. Results and remediation timelines are published on our security transparency page.

Your Rights

You have the right to access, correct, or request deletion of your personal data. Submit requests to info@carcoinmarket.io — we respond within 72 hours under GDPR an info@carcoinmarket.io d equivalent regulations.

Third-Party Links

CarCoinMarket may link to external sites and blockchain explorers. These sites operate under their own privacy policies — we are not responsible for their data practices.

Data Retention

Account data is retained for 5 years after account closure to meet AML regulatory requirements. After this period, personal identifiers are permanently deleted from our systems.

Policy Updates

This Privacy Policy may be updated to reflect legal changes or new platform features. We notify registered users by email at least 14 days before material changes take effect.