Privacy Policy

1. Information We Collect

We collect information that helps us provide our services and maintain the highest security standards for our clients.

Personal Information: When you register for our services, we may collect:

Full name, contact details, and identification information
Biometric data for secure access (with explicit consent)
Financial information for billing purposes
Emergency contact information

Usage Information: We automatically collect information about how you interact with our services:

Vault access logs and timestamps
Website usage data through cookies and similar technologies
Security system interaction data

Note: We only collect biometric data with your explicit consent and use it solely for authentication purposes. This data is encrypted and stored securely in compliance with GDPR requirements.

2. How We Use Your Information

We use the information we collect for the following purposes:

To provide and maintain our secure vault services
To authenticate your identity and control access to facilities
To process payments and manage your account
To communicate with you about service updates, security alerts, and promotional offers
To improve our services and develop new features
To comply with legal obligations and prevent fraudulent activities

3. Data Sharing and Disclosure

Bakti Universal Vaults does not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

Service Providers: With trusted partners who assist us in operating our business, such as payment processors and security system maintainers, under strict confidentiality agreements.
Legal Requirements: When required by law, regulation, or legal process, or to protect the rights, property, or safety of our company, our clients, or others.
Business Transfers: In connection with a merger, acquisition, or sale of all or a portion of our assets, with appropriate confidentiality safeguards.

International Data Transfers: As a company with headquarters in Asia and operations in Sweden, we may transfer your data between these locations. We ensure all such transfers comply with applicable data protection laws, including GDPR requirements for international data transfers.

4. Data Security

We implement robust security measures to protect your personal information:

Encryption of sensitive data both in transit and at rest
Multi-factor authentication for system access
Regular security audits and vulnerability assessments
Limited access to personal information on a need-to-know basis
Secure facilities with 24/7 monitoring
Regular employee training on data protection and privacy

Despite our efforts, no security measures are 100% impenetrable. We cannot guarantee the absolute security of your information but we continuously work to maintain the highest standards of data protection.

5. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law.

Specific retention periods include:

Account information: Retained for 7 years after account closure for legal and regulatory purposes
Access logs: Retained for 3 years for security monitoring
Financial records: Retained for 10 years as required by financial regulations
Biometric data: Deleted immediately upon account closure or upon your request

6. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

Access: The right to request copies of your personal information
Rectification: The right to request correction of inaccurate or incomplete information
Erasure: The right to request deletion of your personal information under certain circumstances
Restriction: The right to request that we limit the processing of your personal information
Data Portability: The right to receive your personal information in a structured, commonly used format
Objection: The right to object to certain types of processing
Withdraw Consent: The right to withdraw your consent at any time where we rely on consent to process your information

To exercise any of these rights, please contact us using the information provided below.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website and to understand how our services are used.

Types of cookies we use:

Essential Cookies: Necessary for the website to function properly
Performance Cookies: Help us understand how visitors interact with our website
Functionality Cookies: Allow the website to remember choices you make
Security Cookies: Support security features and help detect malicious activity

You can control cookies through your browser settings. However, disabling certain cookies may affect the functionality of our website.

8. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without verification of parental consent, we take steps to remove that information from our servers.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes through our website or by other means prior to the changes becoming effective.

We encourage you to periodically review this page for the latest information on our privacy practices. The "Last Updated" date at the bottom of this policy indicates when it was last revised.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer:

Data Protection Officer

Klarabergsviadukten 63, 111 64 Stockholm, Sweden

Response Time: Within 48 hours for privacy-related inquiries

You also have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal information violates applicable data protection laws.