PRIVACY POLICY  TIGER VAULT LTD 

Version 1.0 

Effective Date: July 4 2026 

1. INTRODUCTION 

TIGER VAULT respects your privacy. This policy explains: 

• What data we collect 
• Why we collect it 
• How we use it 
• How we protect it 
• Your rights regarding it 

2. DATA COLLECTION 

We collect data through: 

• Account registration 
• Document uploads 
• Payment processing 
• Customer support 
• Platform usage 
• Browser cookies (minimal) 

We collect: 

• Personal identification (name, DOB, nationality) 
• Contact information (email, phone) 
• Document copies (passport, ID, etc.) 
• Financial information (bank account for verification) 
• Transaction details (amounts, beneficiaries, dates) 
• Purpose of the transaction 
• Communication records (support emails, messages) 

3. DATA USAGE 

We use your data to: 

• Process your payments 
• Verify your identity (KYC) 
• Screen sanctions lists (AML) 
• Assess payment risk 
• Prevent fraud 
• Comply with regulations 
• Provide customer support 
• Improve our service
• Send important notices 

We do NOT use data to: 

✗ Send marketing (unless you opt-in) 

✗ Sell to third parties 

✗ Build profiles for advertisers 

✗ Share with partners beyond settlement ✗ Make decisions that affect you (without review) 

4. DATA SHARING 

We share data with: 

Settlement Partners: 

Purpose: Process your payment under their license 

Compliance Vendors:(for document verification) Purpose: Verify identity and documents 

Regulatory Authorities: 

• Only if legally required (court order, NBE request) • Only for compliance/legal purposes 

We do NOT share with: 

✗ Marketers 

✗ Data brokers 

✗ Social media platforms 

✗ Analytics services 

✗ Any other third party 

5. DATA STORAGE 

We store your data: 

• On AWS servers (encrypted) 
• In secure facilities 
• With access controls 
• With backup copies 

We retain data: 

• Transaction records: 5 years (legal requirement) • Account data: While active + 1 year after • Document scans: 2 years post-transaction • Marketing consent: Until withdrawn

6. DATA SECURITY 

We protect your data with: 

• TLS 1.3 encryption (in transit) 
• AES-256 encryption (at rest) 
• Multi-factor authentication (your login) 
• Role-based access (staff access limited) 
• Activity logging (all access monitored) 
• Regular security testing 
• Incident response plan 
• Cyber liability insurance 

7. COOKIES 

We use minimal cookies: 

• Session cookies (you’re logged in) 
• Preference cookies (remember your settings) • No tracking cookies 
• No third-party cookies 
• You can disable cookies (but site may not work well) 8. YOUR RIGHTS 

You can: 

Access your data: 

• Request copy of all data we hold 
• Free of charge, once per year 
• Receive within 30 days 
• Email:Support@tigervault.com 

Correct your data: 

• Update inaccurate information 
• Submit in writing with proof 
• We correct within 30 days 

Delete your data: 

• Request deletion where possible 
• Exception: Legal/compliance data (must retain 5 years) • Email:Support@tigervault.com 

Withdraw consent: 

• Stop marketing communications 
• Withdraw data processing consent 
• Does not affect data already processed lawfully 

Complaint: 

• File with UK Information Commissioner’s Office (ICO)
• Website: www.ico.org.uk 
• Email: casework@ico.org.uk 

9. DATA BREACH 

If we suspect data breach: 

• We investigate immediately 
• Notify ICO within 72 hours (required) • Notify you promptly 
• Describe what happened and our response • Tell you your rights 

10. THIRD-PARTY LINKS 

Our website may link to third parties. 

We are NOT responsible for their privacy policies. Review their policies before providing data. 

11. CHILDREN 

Tiger Vault is not for anyone under 18. We do not knowingly collect data from children. If you’re under 18, get parental permission. If we discover child data, we delete it. 

12. INTERNATIONAL TRANSFERS 

Your data may be transferred to: 

• Settlement partners (various jurisdictions) • Cloud hosting (USA-based but encrypted) • (global data processing) 

All transfers protected by: 

• Encryption (data unreadable) 
• Data agreements (contractual protection) • Equivalent data protection standards 

13. POLICY CHANGES 

We may update this policy: 

• For legal compliance 
• For service improvements 
• To be clearer 

We will: 

• Post updated version 
• Email notification 
• Show effective date
• Allow 30 days to review 
• Your continued use = acceptance 

 Last Updated: July 4 2026 

Next Review: July 4 2026 + 1 YEAR