Effective Date: October 2024

Introduction

BlokGold Ltd (“we,” “us,” “our,” or “the Company”) is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website, use our services, or interact with us in any way.

Our business address is 1/C, 33 Des Voeux Road Central, Central & Western District, Hong Kong. Registration No.: A-B-23-06-00637.

This Privacy Policy applies to all users of our website and services worldwide. By using our website or services, you agree to the collection and use of information in accordance with this policy.

Personal Data We Collect

We collect different types of personal information depending on how you interact with us:

Information You Provide Directly

When you place an order, register for our newsletter, or contact us, you may provide:

• Full name
• Shipping address (required for order delivery)
• Email address
• Phone number (optional)
• Payment information (cryptocurrency wallet details for transactions)

Information Collected Automatically

When you visit our website, we automatically collect certain information through cookies and similar technologies:

• IP address
• Browser type and version
• Operating system
• Pages visited and time spent on our website
• Referring website
• Date and time of visits
• Device information (mobile, desktop, tablet)
• Geographic location (general area based on IP address)

Analytics and Tracking Information

We use analytics tools including Google Analytics and Microsoft Clarity to understand how visitors use our website. These tools collect:

• Website usage patterns
• Click behavior and navigation paths
• Session duration and bounce rates
• Traffic sources and referral information
• User interaction with website elements
• Performance metrics and error reports

Marketing and Newsletter Information

If you subscribe to our newsletter or marketing communications:

• Email address
• Subscription preferences
• Marketing consent status
• Email engagement data (opens, clicks)

Know Your Customer (KYC) Information

For orders valued at USD $10,000 or above, we collect additional information as required by law:

• Government-issued identification documents
• Proof of address
• Additional verification documents as legally required

How We Use Your Personal Data

We use your personal information for the following purposes:

Order Processing and Service Delivery

• Processing and fulfilling your orders
• Arranging shipping and delivery
• Confirming receipt of cryptocurrency payments
• Providing customer support
• Communicating about your orders

Website Operation and Improvement

• Operating and maintaining our website
• Analyzing website performance and user behavior
• Improving user experience and website functionality
• Troubleshooting technical issues
• Ensuring website security

Legal Compliance

• Complying with anti-money laundering regulations
• Meeting KYC requirements for high-value transactions
• Fulfilling legal and regulatory obligations
• Preventing fraud and illegal activities
• Maintaining transaction records as required by law

Marketing Communications

• Sending newsletters and promotional emails (with your consent)
• Informing you about new products and special offers
• Providing market updates and precious metals information
• Targeted advertising through third-party platforms

Analytics and Business Intelligence

• Understanding customer preferences and behavior
• Improving our products and services
• Market research and trend analysis
• Business planning and strategy development

How We Share Your Information

We may share your personal information in the following circumstances:

Service Providers We work with trusted third-party service providers who help us operate our business:

• Shipping and logistics companies (for order delivery)
• Payment processors (for cryptocurrency transaction verification)
• Analytics providers (Google Analytics, Microsoft Clarity)
• Email marketing platforms (for newsletters and communications)
• Customer support tools and platforms
• Website hosting and security services

Legal Requirements We may disclose your information when required by law:

• To comply with legal obligations and court orders
• To respond to lawful requests from government authorities
• To prevent or investigate fraud, security threats, or illegal activities
• To protect our rights, property, and safety
• To enforce our terms and conditions

Business Transfers In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity, subject to the same privacy protections.

Advertising Partners We may share limited information with advertising platforms:

• Facebook and Google for targeted advertising
• Advertising networks for remarketing campaigns
• Analytics platforms for campaign performance measurement

Data Retention

We retain your personal information for different periods depending on the type of data:

Order Information

• Order details, shipping information, and transaction records are retained for 30 days after order completion
• After 30 days, order information is automatically deleted from our systems

KYC Documentation

• Identity verification documents for orders over USD $10,000 are retained for 7 years as required by law
• KYC records are stored securely and accessed only when legally required

Marketing and Newsletter Data

• Email addresses and marketing preferences are retained until you unsubscribe
• Email engagement data is kept for analytical purposes
• Unsubscribe requests are permanently recorded to prevent future contact

Analytics Data

• Website analytics data is retained according to our analytics providers’ policies
• Google Analytics data is typically retained for 26 months
• Microsoft Clarity data is retained for 12 months
• You may request immediate deletion by contacting us

Technical and Security Data

• Server logs and security monitoring data are retained for 90 days
• Fraud prevention data may be retained longer for security purposes

Data Security

We implement comprehensive security measures to protect your personal information:

Technical Safeguards

• SSL/TLS encryption for all data transmission
• Secure server infrastructure with regular security updates
• Encrypted storage of sensitive personal information
• Regular security audits and vulnerability assessments
• Multi-factor authentication for administrative access
• Automated backup systems with encryption

Administrative Safeguards

• Limited access to personal data on a need-to-know basis
• Regular staff training on data protection and privacy
• Strict confidentiality agreements for all employees
• Clear data handling procedures and protocols
• Incident response plans for potential data breaches

Physical Safeguards

• Secure data centers with restricted physical access
• Environmental controls and monitoring systems
• Secure disposal of physical documents and storage media

While we implement robust security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but continuously work to protect your information using industry-standard practices.

International Data Transfers

As a global business, we may transfer your personal data to countries outside your home jurisdiction:

Cross-Border Transfers

• Data may be processed in Hong Kong, the United States, and other countries where our service providers operate
• We ensure adequate protection through contractual safeguards and security measures
• All transfers comply with applicable data protection laws
• Service providers are contractually bound to protect your data

Adequacy and Safeguards

• We use standard contractual clauses and other approved transfer mechanisms
• Regular assessments of data protection standards in destination countries
• Ongoing monitoring of service provider compliance with data protection requirements

Your Rights and Choices

You have several rights regarding your personal information:

Access Rights

• Request a copy of all personal data we hold about you
• Receive information about how your data is used and shared
• Download your data in a commonly used format

Correction and Update Rights

• Correct any inaccurate or incomplete personal information
• Update your contact information and preferences
• Modify your newsletter and marketing subscriptions

Deletion Rights

• Request deletion of your personal data (subject to legal retention requirements)
• Note: KYC documents must be retained for 7 years as required by law
• Order data is automatically deleted after 30 days

Objection and Restriction Rights

• Object to certain processing of your personal data
• Restrict processing in specific circumstances
• Opt out of marketing communications at any time

Data Portability

• Receive your personal data in a structured, machine-readable format
• Transfer your data to another service provider where technically feasible

Withdrawal of Consent

• Withdraw consent for marketing communications
• Unsubscribe from newsletters and promotional emails
• Modify cookie preferences

How to Exercise Your Rights To exercise any of these rights, contact us at [email protected] or use the contact information provided below. We will respond to your request within 30 days.

Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your website experience:

Types of Cookies We Use

Essential Cookies

• Required for basic website functionality
• Enable secure transactions and account access
• Remember your shopping cart contents
• Cannot be disabled without affecting website operation

Analytics Cookies

• Google Analytics: Track website usage and performance
• Microsoft Clarity: Analyze user behavior and improve user experience
• Help us understand which pages are most popular
• Measure the effectiveness of our website improvements

Marketing Cookies

• Facebook Pixel: Enable targeted advertising on Facebook
• Google Ads: Track conversions and optimize advertising campaigns
• Remarketing cookies: Show relevant ads to previous visitors
• Email marketing tracking: Measure newsletter engagement

Preference Cookies

• Remember your language and region settings
• Store your cookie preferences
• Maintain your website customization choices

Cookie Management You can control cookies through your browser settings:

• Accept or reject all cookies
• Delete existing cookies
• Set preferences for different types of cookies
• Receive notifications when cookies are set

Note that disabling certain cookies may affect website functionality and your user experience.

Marketing and Communications

Email Marketing

• We send newsletters and promotional emails only with your consent
• You can unsubscribe at any time using the link in every email
• We track email opens and clicks to improve our communications
• Your marketing preferences are stored until you unsubscribe

Targeted Advertising

• We use Facebook and Google platforms for targeted advertising
• Ads are based on website visits and general interests
• You can opt out of targeted advertising through platform settings
• We do not share personal information directly with advertisers

Newsletter Subscriptions

• Voluntary subscription to receive precious metals market updates
• Product announcements and special offers
• Educational content about precious metals investing
• Easy unsubscribe option in every communication

Third-Party Services

We use various third-party services that may collect information:

Analytics Providers

• Google Analytics: Website traffic and user behavior analysis
• Microsoft Clarity: User session recordings and heatmaps
• These services have their own privacy policies and data practices

Social Media Platforms

• Facebook: Advertising and remarketing
• Google: Advertising and analytics
• Your interactions are governed by their privacy policies

Shipping Partners

• International courier services for order delivery
• Limited information sharing for shipping purposes only
• Shipping companies have their own privacy practices

Children’s Privacy

Our services are not intended for individuals under 18 years of age:

• We do not knowingly collect information from children
• If we become aware of data collection from children, we will delete it promptly
• Parents or guardians should contact us if they believe a child has provided information

Changes to This Privacy Policy

We may update this Privacy Policy periodically:

• Material changes will be communicated via email or website notice
• Continued use of our services constitutes acceptance of changes
• Previous versions will be archived and available upon request
• Regular reviews ensure compliance with evolving privacy laws

Contact Information

For privacy-related questions, concerns, or requests:

Email: [email protected] Business Address: 1/C, 33 Des Voeux Road Central, Central & Western District, Hong Kong Registration No.: A-B-23-06-00637

Data Protection Inquiries

• General privacy questions
• Data access and deletion requests
• Cookie and tracking concerns
• Marketing communication preferences

Response Time We aim to respond to all privacy inquiries within 30 days. Complex requests may require additional time, and we will keep you informed of our progress.

Complaints and Disputes If you are not satisfied with our response to your privacy concern, you may have the right to lodge a complaint with your local data protection authority.

This Privacy Policy was last updated in October 2024 and reflects our current data practices and legal obligations.