Privacy policy
Last update: April 2025
General
CARPATHIAN FORGE and its affiliates (hereinafter, "CARPATHIAN FORGE", "we", "us" or "our") are committedto protecting and respecting your privacy.
This Privacy Policy (together with our Terms of Use) governs our collection, processing and use of our Users' and visitors of our Sites'Personal Information.
Please find below some basic definitions which may help you to understand this Privacy Policy:
- Carpathian Forge affiliates: subsidiaries, parent companies, and companies under common control.
- Personal Information (personal data): any information which identifies you personally or which may help us to identify you (e.g. your name, address, e-mail address, trades etc.).
- Data subject: an identified or identifiable person (our User).
- Data controller: a company which determines purposes and means of personal data processing.
- Data processor: a company which processes personal data on behalf and upon instructions of the Data controller.
- Our Sites: websites with the following domains such as 7exchange.io - our Platform used for providing our services to you that is used for the purposes of informing our Users/Site visitors on our promotional, marketing campaigns and special offers.
- Personal data processing: any operation or set of operations performed on personal data (e.g., collection, storage, use, disclosure erasure).
Other capitalized terms, not defined above, have themeanings as defined in the Terms of Use andthe applicable data protection legislation.
The purpose of this Privacy Policy is to inform you of:
- who is CARPATHIAN FORGE and how you may contact us;
- the kinds of Personal Information which we may collect about you, the reasons for collecting this information, how it may be used and for how long we will keep it;
- our use of information regarding IP addresses and our use of cookies;
- disclosure of Personal Information to third parties;
- information on international data transfer;
- your ability to access, correct, update, restrict use, ask us to transfer and/or delete your Personal Information;
- the extent of automated decision-making or profiling that we carry out using your Personal Information;
- the security measures we have in place to prevent the loss, misuse, or alteration of Personal Information under our control, and
- your rights to lodge a complaint.
Who is CARPATHIAN FORGE
CARPATHIAN FORGE is a company registered in Poland. Ourregistered office is at
Piotrkowska 116 / 52, 90-006 Łódź, Poland. Established in 2024, CARPATHIANFORGE has become a multi-functional cryptocurrency exchange.
CARPATHIAN FORGE offers cross-platform trading via website,mobile app, and REST API, providing access to high liquidity orderbook for topcurrency pairs on the market.
The exchange has developed a multi-level account system withindividual approach to each customer, from crypto beginners to institutionaltraders. Worldwide coverage, multiple payment options, and 24/7 support areaccompanied by time-proven platform stability that guarantees safety of assetsand data.
Gathering and Use of Personal Information
We may collect your Personal Information if you use CARPATHIANFORGE and open an Account to use the Platform or perform any Transactions onthe Platform. This is defined as collection for the purpose of provision ofservice(s) to you in accordance with our Terms of Use. Please note that if yourefuse to share your Personal Information for this purpose we will not be ableto provide our services to you.
The types of Personal Information which we collect mayinclude:
- your name;
- your photographic identification;
- details from your identity documents (such as driver license, passport), number of the document, date of issue and expiration, photographic identification, address etc.;
- your address;
- your phone number;
- your e-mail address;
- your IP address, Browser and Operating System information, geolocation details;
- your banking details including account numbers and payment card data;
- your date of birth;
- your employment details;
- your trades; and
- information on sources of your funds; and
- video footage identifying you.
We will process your Personal Information only for thepurpose(s) of providing to you the service(s) that you ask us to provide you,to satisfy the legal obligations stemming from regulatory obligations thatarise from providing you the service(s) and our legitimate interest.
Based on our legal obligations and legitimate interest wemay request other documents for your identity verification and the sources ofyour funds confirmation for the purposes of money laundering and fraudprevention. To know more about it please see our AML/KYC and Anti-Fraud policies.
We may use your Personal Information for the followingpurposes:
- to allow you to open and operate an Account on the Platform;
- to enable you to complete Transactions on the Platform;
- if you contact us, to reply to your queries;
- to contact you via email or calls;
- to ensure security of your Account (for instance, if you make a request to disable 2-factor authentication on your account we can ask you to provide additional Personal Information to confirm your identity);
- to analyse use of our Sites;
- as required for regulatory purposes such as Tax, prevention of Money Laundering, prevention of Fraud, adherence to Company statistical reporting obligations etc.;
- to provide you with information about products and promotions that may be of interest to you, from ourselves and third parties, although only if you have specifically agreed to receive such information;
- for market research e.g. surveying our Users' needs and opinions on issues, such as our performance etc. Unless consented, your data for this purpose would be anonymised.
Children's personal data
Please note that our services are exclusively offered toindividuals at least 18 years old. We do not process any Personal Informationof children under this age.
IP Addresses
We may collect information about your computer, includingwhere available your IP address, operating system and browser type, for systemadministration and to report aggregate information to our advertisers. This isstatistical data about our users' browsing actions and patterns and will not beused to identify any individual unless that same individual.
Cookies
We use a browser feature known as a "cookie",which assigns a unique identification to your computer. Cookies are typicallystored on your computer's hard drive. Information collected from cookies isused by us to evaluate the effectiveness of our Sites, analyse trends, andadminister the Platform. The information collected from cookies allows us todetermine such things as which parts of our Sites are most visited anddifficulties our visitors may experience in accessing our Sites. With this knowledge,we can improve the quality of your experience on the Platform by recognisingand delivering more of the most desired features and information, as well as byresolving access difficulties. We also use cookies and/or a technology known asweb bugs or clear gifs, which are typically stored in emails to help us confirmyour receipt of, and response to, our emails and to provide you with a morepersonalised experience when using our Sites.
We use third party service provider(s), to assist us inbetter understanding the use of our Sites. Our service provider(s) will placecookies on the hard drive of your computer and will receive information that weselect that will educate us on such things as how visitors navigate around ourSites, what products are browsed, and general Transaction information. Ourservice provider(s) analyses this information and provides us with aggregatereports. The information and analysis provided by our service provider(s) willbe used to assist us in better understanding our visitors' interests in ourSites and how to better serve those interests. The information collected by ourservice provider(s) may be linked to and combined with information that wecollect about you while you are using the Platform. Our service provider(s)is/are contractually restricted from using information they receive from ourSites other than to assist us.
You may control the cookies through the browser settings.
Disclosure of Personal Information
We use the Personal Information for the purposes indicatedat the time you provide us with such information, and/or otherwise for thepurposes set out in this Privacy Policy and/or as otherwise permitted by law.
We may make available the Personal Information that youprovide to us for the limited purpose indicated for and during the provision ofthe service that you would have requested in particular to:
- our affiliates, agents and representatives;
- payment service providers and financial institutions;
- customer communications platforms;
- our contractors providing software for identity verification purposes;
- our contractors providing us information on sanctions lists from publicly accessible sources.
We may also share Users' Personal Information with financialinstitutions, insurance companies or other companies in the case of a merger,divestiture, or other corporate re-organisation and notify you of such sharingof your information to be able to exercise any of your rights where applicable.
We may also share Users' Personal Information with lawenforcement or regulatory agencies, as may be required by law. In certaincases, we may not be able to inform you of such sharing of data due to legalrestrictions.
Any third party which receives or has access to PersonalInformation shall be required by us to protect such Personal Information and touse it only to carry out the services they are performing for you or for CARPATHIANFORGE, unless otherwise required or permitted by law. Such a third party,except for regulatory authorities, would be contractually bound to adhere tothe same security and confidentiality policies as CARPATHIAN FORGE and assumethe same responsibilities as CARPATHIAN FORGE.
The legitimate exercise of any of your rights with CARPATHIANFORGE will also be notified to be applied by any such third parties having beengiven access to your Personal Information.
We will ensure that any such third party is aware of ourobligations under this Privacy Policy and we will enter into contracts withsuch third parties by which they are bound by terms no less protective of anyPersonal Information disclosed to them than the obligations we undertake to youunder this Privacy Policy or which are imposed on us under applicable dataprotection laws.
International data transfers
Our contractors and affiliates are situated at differentlocations (including countries located outside the EU) and we sometimes need totransfer your personal data to third countries to provide our services to you.We strive to ensure adequate level of your personal data protection whereverour contractor is located. Be sure we may transfer your Personal Informationonly in the following cases:
- if the country where we transfer your Personal Information to provides the adequate level of personal data protection
- if we take appropriate safeguards to ensure that your rights as data subject are protected;
- if any derogations for specific situations apply (for instance, if is such transfer is necessary for the establishment, exercise or defence of legal claims or for important reason of public interest).
Your rights
You have the right to access your Personal Information andto require the correction, updating and blocking of inaccurate and/or incorrectdata by sending an email to us at support@7exchange.ioor where possible, you can do these actions in your account profile pageyourself.
Upon your written request at support@7exchange.io, we will inform youof the Personal Information relating to you that we hold and the use andgeneral disclosure of your Personal Information. We will also give you a copyof the Personal Information we have retained. There may be a minimal charge forproviding you additional copies of your Personal Information to coveradministrative costs.
You may also request the erasure of both the Account andPersonal Information by sending an email to us at: support@7exchange.io. CARPATHIANFORGE will action your request, unless we have a legal or regulatory obligationor overriding legitimate interest to store your Personal Information (forinstance, in cases you have performed transactions).
You have the right to ask us to rectify information youthink is inaccurate. You also have the right to ask us to complete informationyou think is incomplete. Moreover, you have the right to restrict and object tothe processing of your personal data in certain circumstances.
You may also ask us to transfer your Personal Information toanother controller of your choice.
To ensure the confidentiality, integrity and availability ofyour information to yourself, we may request you to confirm your identity byproviding identification documentation and/or other methods prior to assistingyou in exercising any of your rights.
If you refuse to prove your identity, we may decline to takeactions in respect of your data, save restricting processing, until we canensure that such actions are the true wish of the data subject.
In the carrying out of our services we may use automatedprocessing and profiling to reduce the risks of fraud, money laundering andabuse of our services. Through this automated processing, we carry out ananalysis of your identification, transactional and behavioural patterns.
We may not able to provide you with some or all our servicesif you do not wish this automated processing to be carried out. If you feelthat this processing might be detrimental to you, please contact us on support@7exchange.io, and our complianceofficer will review your application.
Please note, if you make a request, we have one month torespond to you.
Security
We have implemented technical and organisational securitymeasures to ensure the confidentiality, integrity and accountability of yourPersonal Information and to protect your Personal Information from loss,misuse, alteration or destruction. Such measures include:
- 2-factor authentication;
- the access control;
- the ability to ensure the ongoing confidentiality, integrity, availability and resilience of our processing systems and services;
- the ability to restore the availability and access to personal data in a timely manner in the event of a physical or technical incident.
Only authorised personnel of CARPATHIAN FORGE have access toyour Personal Information, and these personnel are required to treat theinformation as confidential.
Where you have consented to, or we are obliged to pass onPersonal Information to third parties to provide you with a requested serviceor in the carrying out of a regulatory or legal obligation, we will requestthat the same levels of technical and organisational security measure beapplied through contractual arrangements, where possible.
We conduct testing, assessment and evaluation of ourtechnical and organisational measures effectiveness on a regular basis.Technical and organisational security measures in place will, from time totime, be reviewed in line with legal and technical developments.
In the event of a personal data breach or the failure of themeasures of protection of such information we will immediately notify youwithout undue delay.
Security Capabilities and Policy for Transmission ofPayment Card Details
CARPATHIAN FORGE is fully compliant with PCI DSS (Level 1Service Provider). PCI DSS (Payment Card Industry Data Security Standard) is aninformation security standard designated for merchants, financial institutionsand payment service providers in order to ensure the safety of cardholders'data.
Please note that our trusted payment service providers arePCI DSS compliant as well.
Links
There may be links from our Sites to other sites andresources provided by third parties. This Privacy Policy applies only to ourSites. Accessing those third-party sites or sources requires you to leave ourSites.
We do not control those third party sites or any of thecontent contained therein and you agree that we are in no way responsible orliable for any of those third party sites, including, without limitation, theircontent, policies, failures, promotions, products, services or actions and/orany damages, losses, failures or problems caused by, related to or arising fromthose sites. We encourage you to review all policies, rules, terms andregulations, including the privacy policies, of each site that you visit.
Retention of Personal Information
Your information is held within our servers located withinthe European Union. Access to this information is provided to employees of CARPATHIANFORGE whose office may also be outside of the European Union but who adhere tothe same principles of data security and processes as those within the EuropeanUnion (please see the Section on International data transfers for moredetails).
Your payment method information that you may use to effector receive payments from CARPATHIAN FORGE are passed on to a third-partypayment processor(s) which is/are based in the EU and with which CARPATHIANFORGE has a contractual agreement to safeguard your rights. Unless you createan account with us and conduct transactions, we do not retain your paymentmethod information.
We will hold your Personal Information only for as long asit is necessary for the purposes described in this Privacy Policy and our ownlegal and regulatory requirements.
In accordance with record keeping activities for Anti-MoneyLaundering, Tax and Company legal obligations and considering the period duringwhich you may bring legal claims against us under the law of the UnitedKingdom, we will retain Personal Information for a period of five years afterour User closes his or her Account and terminates legal relationships with usfor five years from the end of the tax period in which the User conducts his orher last transaction.
Data stored for regulatory purposes only will be protectedfrom unnecessary processing and will be held only for the purpose of being ableto provide information or access to relevant authorities.
Disposal of Personal Information
Once we do not have any obligation to providing you with aservice you requested, nor an obligation to hold Personal Information forregulatory or legal purpose, we will anonymise or dispose of your PersonalInformation in line with acceptable industry and security standards so thatthis cannot be subsequently retrieved and associated to you.
Where we cannot directly remove such records, such as inarchived backups, we will retain a log of which Personal Information should beremoved if ever the backup data is restored.
Marketing
We will ask you for your consent on registration orpost-registration, by providing you the ability to check marketing preferencescheck boxes located within your account profile page to allow us to contact youor use your Personal Information for marketing purposes. We may also notify ourexisting Users on our own products or services similar to those we have alreadyprovided based on our legitimate interest.
You have the right to retract the consent for us to processyour Personal Information for marketing purposes. You can exercise your rightto prevent such processing by unchecking marketing preferences check boxes onyour account profile or by contacting us at any time on support@7exchange.io.
Our Data Protection Officer
Our Data Protection Officer is the person in charge ofensuring our company adheres to this privacy policy. This person is also themain contact for our Data Protection Supervisory Authority, the State Data Protection Inspectorate. The DataProtection Officer may be contacted on support@7exchange.io
Data Protection Supervisory Authority
Our Data Protection Supervisory Authority in terms of dataprotection is the Polish State Data Protection Inspectoratehttps://vdai.lrv.lt/en/. You may contact the authority at ada@ada.lt if you wish to discuss with themany instance where you feel we may not be adhering to the terms within thisPrivacy Policy or to raise a complaint.
Changes
Our Sites policies, content, information, promotions,disclosures, disclaimers and features may be revised, modified, updated, and/orsupplemented at any time and without prior notice at the sole and absolutediscretion of CARPATHIAN FORGE. If we change this Privacy Policy, will takesteps to notify all users by a notice on CARPATHIAN FORGE's Site and will postthe amended Privacy Policy on the CARPATHIAN FORGE's Site.
If we consider that your rights may be affected by any suchchanges, we will request you to confirm your consideration and acceptance priorto continue our relationship with you.
This current version of the Privacy Policy has last beenamended as of November 2023.
Fraud, Phishing and Email scams disclaimer
Please be notified that CARPATHIAN FORGE is not in anypartnership with entities who represent themselves as customer support agents,providing customer support services via phone and/or social media and promiseto help solve your issues for money. Remember - customer support is providedonly via the CARPATHIAN FORGE website and is always provided free of charge.
If you discovered what you believe is a fraud, phishing, orscam which impersonates CARPATHIAN FORGE, please contact us by live chat on thewebsite.
Contact Us
If you have any questions, comments, or concerns regardingour Privacy Policy and/or how we process your personal data, please contact usat the email address support@7exchange.io.
You may also wish to check our Help Centre for frequently asked questionswhere a solution may easily be found ready for you.
