Digital Asset ExchangeScope and company contact
This notice concerns personal information processed through the Aldenex website, account service and operational support. The company identified for privacy correspondence and legal review is ADEMEX TECHNOLOGIES LTD, registered in England and Wales under company number 15576900, with its registered office at 71–75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom. “Personal information” identifies you or can reasonably be linked to you; public wallet addresses and transaction IDs can become personal information when linked to an account.
Your wallet, email provider, Telegram and public blockchains operate independently and have their own privacy practices. This notice does not imply that Aldenex controls their records or can delete an on-chain transfer.
Account and technical information
Account information includes email, user identifier, creation date, account status and authentication records. Supabase Auth handles passwords, verification, login and recovery. Authentication cookies carry session information in your browser. Never include a password in correspondence.
Technical information may include IP addresses, request times, browser or device information, authentication events and error or security logs generated by the application and its providers. These support operation, troubleshooting and account protection. No deployed behavioural advertising profile is described here.
Transaction, verification and support records
Financial records include selected Assets and Networks, requests, receiving destinations and memos, claimed and verified transaction IDs, amounts, Ledger entries, balances, Quotes, exchanges, withdrawal destinations, statuses and operator messages. Sources include your instructions, platform records and independently checked blockchain or transfer evidence.
Further verification can involve identity, age, address, beneficial ownership, transaction purpose, source of funds and evidence of entitlement to a receipt. The sign-up form does not collect identity documents. Supply sensitive material only after an appropriate secure submission method and explanation have been provided.
Support records include messages, contact details, attachments you choose to provide and investigation correspondence. Telegram support also involves your Telegram identifier and messages. Limit third-party data to what is necessary and never provide credentials or recovery material.
Purposes and lawful bases
Information necessary to create and administer the account, authenticate instructions, prepare Quotes, record exchanges, process transfer requests and provide related support is used to take steps you request and perform the account service. Contract performance does not automatically justify every item collected for security or compliance.
Security, fraud prevention, reliability and the establishment or defence of claims may rely on legitimate interests where not overridden by your rights. A legal-obligation basis applies only where an actual applicable duty requires the processing, for example binding recordkeeping or disclosure requirements. A general reference to compliance does not establish a need for every possible identity document.
Where consent is appropriate for an optional purpose, it must be specific and can be withdrawn. The current application does not implement optional advertising or analytics tracking. Sensitive verification information requires an appropriate basis and any additional statutory conditions; sign-up is not blanket consent to unrestricted collection.
Providers and other recipients
Supabase provides authentication and database services. The configured authentication email service delivers confirmation and recovery messages. Hosting and infrastructure providers process requests and technical records needed to serve the site. Authorised operators access information relevant to administration and review, not for unrelated purposes.
Public market prices are retrieved from Binance’s public data API. Such requests use market symbols rather than requiring disclosure of your account identity. Telegram handles support conversations you initiate through that service; it is not an Aldenex identity-document vault.
Information may be disclosed where necessary and lawful for professional advice, fraud investigation, legal claims or a binding request from a competent authority. This notice does not describe sale of customer data, an advertising marketplace or routine transmission of customer records to market-data providers.
International processing
A UK company address does not mean all information stays in the UK. Providers and authorised personnel may process information in other countries. Public blockchain records are globally accessible, and independent external services have their own processing arrangements.
Where the UK GDPR applies to a restricted transfer, an applicable transfer mechanism and related assessments are required, for example adequacy regulations or appropriate contractual safeguards. No particular hosting region, adequacy finding or executed transfer agreement is asserted here. You may request information about the mechanism applicable to your data and relevant safeguards, subject to lawful redactions.
Retention and closure
Retention depends on purpose, applicable legal duties, unresolved operations and the establishment or defence of claims. Active account information supports ongoing service. Closure does not automatically remove financial evidence, an unresolved verification case or records under a lawful preservation requirement.
Ledger and audit records preserve financial integrity and are not individually rewritten simply to remove an account from view. This does not create an unlimited exemption from data-protection duties. When continued identification is no longer necessary, deletion, restriction or de-identification must be considered under the applicable retention process. Protected backups may remain until their retention cycle ends.
Account records, security logs, support messages and verification evidence cannot accurately be assigned one universal retention period. Contact us for the period or criteria applicable to a particular category. No unsupported fixed number of years is stated.
Security
The application uses authenticated access, administrative role checks, database access policies and controlled financial procedures. Financial and audit records support investigation and reconciliation. These measures reduce risk but do not guarantee immunity from compromise of an account, provider or communication channel.
Protect your email and device, use a strong unique password and sign out on shared equipment. Report suspected exposure promptly without forwarding tokens. Do not place sensitive identity documents in ordinary Telegram messages or send them unsolicited; arrange a suitable channel first.
Your rights
Subject to applicable law, you may request access, correction, erasure, restriction or portability where the relevant conditions are met. You may object to processing based on legitimate interests and withdraw consent for processing that relies on it. Withdrawal does not invalidate earlier lawful processing.
Rights are not absolute. Erasure may not require removal of evidence needed for a legal obligation or claim. If a request cannot be met in full, the response should explain the reason and complaint route. Correcting a financial mistake must preserve the audit trail.
Send requests to the support email and identify the account or records concerned. Proportionate identity verification may be needed before disclosure or changes; do not send more evidence than requested. Applicable statutory response periods and lawful extensions govern privacy requests rather than an invented support deadline.
Automation and public records
Quotes, Available Balance and financial execution checks are calculated automatically. Deposits and withdrawals involve manual review. This is transaction processing, not a claim that an automated identity-scoring or sanctions-decision provider is deployed. Contact support about an incorrect calculation or recorded decision.
Blockchain addresses, amounts and timing may be public independently of Aldenex. Sharing a transaction ID publicly can expose activity. Correcting an internal record does not rewrite an independent blockchain.
Children, complaints and updates
The service is intended for adults aged 18 or over. Contact us if you believe a child supplied information so the circumstances can be assessed. This is not a representation of an automated age-verification system.
You may raise privacy concerns with us or complain to the UK Information Commissioner’s Office at ico.org.uk, or another competent authority where applicable. An internal financial complaint is not a prerequisite to a privacy complaint.
Material changes to purposes, providers or rights information require an updated notice and additional notice or consent where required. The Cookie Policy separately explains authentication storage.
Company contact: ADEMEX TECHNOLOGIES LTD, registered in England and Wales under company number 15576900, with its registered office at 71–75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom. For questions, requests or complaints, email support@aldenex.com or write to the registered office. Operational support is also available through @adelmex_support on Telegram. Never send passwords, authentication tokens, private keys or recovery phrases.