This Privacy Notice ("Privacy Notice") explains how Hex Trust MENA FZE ("HT MENA"), and HT Markets MENA FZE ("HT Markets," together with HT MENA referred to as "Hex Trust MENA," "we," "us," or "our") collect, use, maintain, and disclose personal information in connection with the provision of our services ("Services").
For the purposes of applicable Data Protection Law, both Hex Trust MENA FZE and HT Markets MENA FZE act as Data Controllers.
Registered Addresses:
As Data Controllers, we are responsible for ensuring that your personal information is:
We are also responsible for erasing or rectifying any inaccurate or incomplete personal data in accordance with applicable laws.
You may contact our DPO at:
Email: DPO@hextrust.com
We comply with:
This includes obligations in relation to the processing of personal, sensitive, and financial data.
We may update this Privacy Notice from time to time. The date of the latest revision appears at the top of this page. It is important you review it periodically.
If material changes are made, we will notify you where required by law.
You are responsible for ensuring that the personal information we hold about you is accurate and up-to-date. Please inform us of any changes.
We may collect, use, store, and transfer the following categories of personal information:
Type of Data
Examples
Identity Data
Name, date of birth, nationality, passport/Emirates ID, selfie (for ID confirmation)
Contact Data
Address, email address, telephone numbers
Source of Funds
Bank statements, income verification, wealth information
Financial Data
Wallet addresses, CRS/FATCA details, income/turnover details
Screening Data
Politically Exposed Person (PEP) status, sanctions screening results
Transaction Data
Details of your Virtual Asset transactions
Technical Data
IP address, browser information, device information
Profile and Usage Data
Username, preferences, Site usage history, survey responses
Marketing and Communications Data
Preferences for receiving communications and marketing
We may obtain personal information from third parties, including identity verification services, sanctions screening providers, and regulators.
If you fail to provide necessary personal data, we may not be able to provide you with Services, and in some cases, may be unable to maintain your account.
We will only use your personal information when allowed by law.
We rely on the following lawful bases:
Where we process sensitive personal data (e.g., criminal checks, racial/ethnic data), we will do so only with your explicit consent or where otherwise permitted by law.
We use your information to:
We may use aggregated or de-identified data for analytical purposes.
You have choices regarding marketing communications:
We may share your personal data with:
We require all third parties to respect the security of your data and treat it lawfully.
Where we transfer your information outside of the UAE, we ensure appropriate safeguards are in place, including reliance on jurisdictions with adequate data protection standards or contractual protections.
Please contact our DPO for further information.
We retain personal data for as long as necessary to fulfill the purposes we collected it for, including:
Typically, we retain client data for a minimum of eight (8) years after account closure, unless legal obligations require longer retention.
We use cookies and similar technologies to enhance your experience, administer the Site, and monitor Site usage.
You may adjust your browser settings to decline cookies, although some features may become unavailable.
We may also use APIs and SDKs for analytics, fraud prevention, and targeted communications.
We have implemented appropriate technical and organizational security measures to protect your data against unauthorized access, use, alteration, or disclosure.
However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
Depending on applicable law, you may have the following rights:
You may exercise these rights by contacting our DPO. We may require verification of your identity before fulfilling any request.
Our services are not directed at individuals under the age of 18. We do not knowingly collect information from minors. If we become aware of such collection, we will delete it immediately.
If you have any questions about this Privacy Notice or how we handle your information, please contact:
DPO Contact:
Email: DPO@hextrust.com
If you are dissatisfied with our handling of your personal information, you have the right to lodge a complaint with the appropriate data protection authority.