Bloq Capital Ltd.
Effective Date: March 2025
Bloq Capital Ltd ("we," "us," or "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data in compliance with Gibraltar's Data Protection Act 2004 and the European Union’s General Data Protection Regulation (GDPR), where applicable. By engaging with Bloq Capital, including through our website, investment services, or other interactions, you agree to the practices described in this policy.
We collect and process the following categories of personal data:
- Identity Data: Name, date of birth, passport or national ID details.
- Contact Data: Address, email, phone number.
- Financial Data: Bank details, investment history, and source of funds.
- Transaction Data: Records of your transactions with us.
- Technical Data: IP address, browser type, and other online identifiers (if using our website).
- Compliance Data: KYC/AML verification details, including information from third-party checks.
We obtain your data through:
- Direct interactions (e.g., onboarding, investment applications).
- Third-party service providers (e.g., compliance verification).
- Automated technologies (e.g., website analytics).
We process personal data for the following lawful purposes:
Purpose
- Client onboarding & due diligence
- Compliance with AML/CFT laws
- Investment management & transactions
- Communications & investor relations
- Security & fraud prevention
Legal Basis
- Legal obligation & legitimate interest
- Legal obligation
- Performance of contract
- Legitimate interest & consent (where applicable)
- Legal obligation & legitimate interest
We may share your personal data with:
- Regulatory authorities (e.g., Gibraltar Financial Services Commission (GFSC), tax authorities, law enforcement).
- Service providers (e.g., banking partners, legal and compliance advisors).
- Auditors and professional advisors (for regulatory and risk management purposes).
- Blockchain analytics providers (to ensure AML/CFT compliance).
- We do not sell or rent your data to third parties.
As a crypto private fund, we may transfer personal data outside Gibraltar and the EEA. When doing so, we ensure appropriate safeguards, such as:
- EU Standard Contractual Clauses (SCCs)
- Adequacy decisions from the European Commission
- Binding corporate rules where applicable
We retain personal data for as long as necessary to fulfil regulatory, legal, and contractual obligations.
Generally, AML data is retained for at least five (5) years after the business relationship ends, in line with Gibraltar’s AML laws.
We implement appropriate technical and organizational measures to protect your data, including encryption, secure access controls, and cybersecurity monitoring.
Under Gibraltar’s Data Protection Act and GDPR, you have the right to:
- Access, correct, or update your data Request data deletion (subject to legal obligations)
- Object to processing based on legitimate interest Restrict processing in certain circumstances
- Withdraw consent (where processing is based on consent)
- Data portability, where applicable
Requests can be made by contacting dpo@bloq.capital. We may require proof of identity before processing requests.
Our website may use cookies to enhance user experience. You can manage cookie preferences through browser settings.
We may update this Privacy Policy from time to time. Any changes will be posted on our website, and material updates will be communicated directly to investors where necessary.
If you have any questions or concerns about this Privacy Policy or how we handle your data, please contact: dpo@bloq.capital
Private & Confidential Bloq Capital Limited