Legal
Privacy Policy
Last updated:
At 8vests we take your privacy seriously. This Policy explains what personal data we collect, how we use it, and the rights you have over it. We comply with the EU General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection (nFADP).
1. Who We Are
8vests ("we", "our", "us") operates the Platform at https://8vests.group. We are the data controller responsible for the personal data you provide to us. Our registered address is Teichgässlein 9, 4058 Basel, Switzerland. For data-related enquiries contact us at support@8vests.group.
2. Data We Collect
We collect the following categories of personal data: • Identity data: full name, date of birth, government-issued ID numbers. • Contact data: email address, phone number, mailing address. • Financial data: wallet addresses, transaction history, investment records. • KYC/AML data: identity documents, selfie photographs, liveness check results provided through Sumsub. • Technical data: IP address, browser type, device identifiers, cookies, and usage logs. • Communications data: messages you send to our support team.
3. How We Use Your Data
We use your personal data to: • Create and manage your account. • Verify your identity and comply with KYC/AML regulations. • Process your investments and withdrawals. • Send transactional and service communications (e.g., investment confirmations, interest payments). • Send marketing communications where you have consented. • Improve our Platform and personalise your experience. • Detect and prevent fraud, money laundering, and other illegal activity. • Comply with applicable laws and regulatory requirements.
4. Legal Basis for Processing
We process your personal data on the following legal bases: • Contract performance: to fulfill our obligations when you invest through the Platform. • Legal obligation: to comply with KYC/AML laws, tax regulations, and financial reporting requirements. • Legitimate interests: to operate and improve our Platform, detect fraud, and ensure security. • Consent: for marketing communications and optional cookies. You may withdraw consent at any time.
5. Data Sharing
We may share your data with: • Maclear AG (our Swiss lending partner) for loan origination and collateral management. • Sumsub (our KYC provider) for identity verification. • Blockchain networks: certain transaction data is publicly recorded on-chain. • Regulatory authorities and law enforcement where required by law. • Payment processors and financial institutions. We do not sell your personal data to third parties.
6. International Transfers
Your data may be transferred to and processed in countries outside the European Economic Area. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, to protect your data to the same standard as within the EEA.
7. Data Retention
We retain your personal data for as long as your account is active and for a minimum of 5 years after account closure to comply with financial regulations and AML obligations. KYC documents may be retained for up to 10 years as required by Swiss law. We will securely delete or anonymise your data when retention is no longer necessary.
8. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data: • Access: request a copy of the personal data we hold about you. • Rectification: ask us to correct inaccurate or incomplete data. • Erasure: request deletion of your data (subject to legal retention obligations). • Restriction: ask us to pause processing while accuracy is contested. • Portability: receive your data in a structured, machine-readable format. • Objection: object to processing based on legitimate interests. • Withdraw consent: where processing is based on consent. To exercise any of these rights, contact us at support@8vests.group.
9. Cookies
We use cookies and similar tracking technologies to operate and improve the Platform. Essential cookies are required for the Platform to function. Analytics and preference cookies are optional. You can manage your cookie preferences through your browser settings or our cookie banner. For full details see our Cookie Policy.
10. Security
We implement technical and organisational security measures to protect your personal data, including encryption in transit and at rest, access controls, and regular security audits. Despite these measures, no system is completely secure and we cannot guarantee absolute security. In the event of a data breach that affects your rights, we will notify you as required by applicable law.
11. Children
The Platform is not intended for persons under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will take steps to delete it.
12. Changes to this Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on the Platform. Your continued use of the Platform after the effective date of any changes constitutes your acceptance of the updated Policy.
13. Contact & Complaints
For any privacy-related questions, contact our Data Protection team at support@8vests.group. If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority (for EU residents, the DPA of your member state; for Swiss residents, the Federal Data Protection and Information Commissioner).
