Privacy Policy

Slikk Inc. ("Slikk", "we", "our") operates the exchange platform at slikk.io. We are the data controller for all personal data collected through our platform. For any data-related inquiries, contact us at privacy@slikk.io.

We collect the following categories of personal data: • Identity data: full name, date of birth, nationality, government ID documents and selfie (collected for KYC verification) • Contact data: email address, phone number • Financial data: payment card details (processed by Flitt, not stored by us), bank account information for wire transfers • Transaction data: order history, crypto wallet addresses, fiat amounts, exchange rates • Technical data: IP address, browser type, device identifiers, session tokens • Usage data: pages visited, features used, time spent on the platform

We use your personal data to: • Verify your identity and comply with KYC/AML regulatory requirements • Process your buy and sell orders and facilitate payment • Communicate with you about your account, orders, and platform updates • Detect and prevent fraud, money laundering, and other illegal activity • Improve our platform and user experience • Comply with applicable laws and regulations

We process your data on the following legal bases: • Contract performance: to fulfil your orders and provide the service you signed up for • Legal obligation: KYC, AML, and financial reporting requirements imposed by law • Legitimate interests: fraud prevention, platform security, and improving our services • Consent: for optional communications such as marketing emails (you may withdraw consent at any time)

We share your data only where necessary: • KYC provider (Identomat): to verify your identity documents • AML screening provider (AMLBot): to screen wallet addresses and transactions • Payment processors (Flitt, Bank of Georgia): to process card payments and wire transfers • Wallet infrastructure (WalletPro/Cryptal): to execute on-chain transactions • Regulatory authorities: where required by law or court order • We do not sell your personal data to third parties for marketing purposes.

We retain your personal data for as long as your account is active and for a minimum of 5 years thereafter to comply with anti-money laundering regulations. Transaction records are retained for 7 years. You may request deletion of data that we are not legally required to retain.

You have the following rights regarding your personal data: • Right of access: request a copy of all data we hold about you • Right to rectification: request correction of inaccurate data • Right to erasure: request deletion of data we are not legally required to keep • Right to restriction: request that we limit how we process your data • Right to portability: receive your data in a machine-readable format • Right to object: object to processing based on legitimate interests To exercise any of these rights, email privacy@slikk.io. We will respond within 30 days.

We use essential cookies for session management and security. We do not use advertising or tracking cookies. You can disable cookies in your browser settings, though this may affect platform functionality.

We use TLS encryption for all data in transit and AES-256 encryption for sensitive data at rest. Access to personal data is restricted to authorised staff on a need-to-know basis. We conduct regular security reviews and penetration testing.

We may update this Privacy Policy from time to time. Material changes will be notified by email or a prominent notice on the platform. Continued use of Slikk after changes constitutes acceptance of the updated policy.