GDPR & CCPA Institutional Compliance
Tassetsvortex Global Wealth Management Group Ltd ("Tassetsvortex", "we", "us", or "our") respects the privacy rights of our global clients. This Global Privacy & Data Protection Policy details how we collect, store, process, protect, and disclose personal and financial telemetry in accordance with the European Union General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and global financial privacy mandates.
Section 1 — Categories of Information We Collect
To provide international wealth management, fiduciary custody, and regulatory compliance, we collect the following categories of data:
- Identity & KYC Data: Legal full name, date of birth, residential address, nationality, government-issued photo identification (passports, driver's licenses, national ID cards), biometric selfie verifications, and tax identification numbers.
- Financial & Transaction Data: Bank account routing numbers, wire transfer receipts, blockchain wallet public keys, investment plan subscriptions, equity trade history, and earnings balances.
- Asset Ownership Documentation: Real estate purchase applications, municipal property deed registrations, motor vehicle VIN registries, and instalment amortization schedules.
- Technical & Telemetry Data: IP addresses, browser fingerprinting, device identifiers, session timestamps, operating system telemetry, and geographic location tags collected during sign-in.
Section 2 — Legal Basis for Processing Under GDPR
We process your personal information strictly under established lawful bases:
- Performance of Contract: Processing necessary to maintain client wallets, execute investment allocations, and manage property/vehicle instalment amortization schedules.
- Legal & Regulatory Compliance: Fulfilling mandatory obligations under statutory Anti-Money Laundering (AML), Counter-Terrorist Financing (CTF), and Foreign Account Tax Compliance Act (FATCA) standards.
- Legitimate Interests: Protecting our institutional platform against fraud, cyber attacks, identity theft, and unauthorized multi-device account takeover.
Section 3 — Data Protection & Cryptographic Security Architecture
Tassetsvortex employs multi-layered military-grade defense architectures:
- Encryption in Transit: All HTTP traffic is enforced over TLS 1.3 with 256-Bit Elliptic Curve Cryptography (ECC) and perfect forward secrecy.
- Encryption at Rest: Database assets, user KYC document repositories, and ledger archives are encrypted using AES-256 with rotation-managed keys.
- Access Controls: Administrative personnel undergo rigorous background checks and access data via role-based access control (RBAC), hardware security keys (FIDO2), and audited session logging.
Section 4 — Data Retention Mandate
Pursuant to international financial regulations, including the Financial Action Task Force (FATF) standards and Bank Secrecy Act (BSA) rules, Tassetsvortex is legally obligated to retain customer identification files, transactional records, and double-entry ledger histories for a minimum statutory period of seven (7) years following the closure of an account or final asset contract payoff.
Upon expiration of the statutory retention window, data is cryptographically expunged and shredded in accordance with ISO/IEC 27001 disposal standards.
Section 5 — Client Data Rights
Subject to applicable statutory exemptions, clients residing in the EU, UK, and California retain the following rights:
- The right to request confirmation of data processing and access to personal archives.
- The right to rectify inaccurate, out-of-date, or incomplete records.
- The right to data portability in structured JSON/CSV format.
- The right to lodge a complaint with your competent supervisory data authority.
To exercise any rights, contact our Data Protection Officer at: [email protected].