Privacy Policy

1. Who are we?

NXO Capital Group B.V. (Chamber of Commerce: 42027650), based in the Netherlands, is the data controller under the General Data Protection Regulation (GDPR) for personal data you provide via our platform or when contacting us.

Privacy enquiries: info@nxocapital.com

2. What data do we collect?

We do not process special categories of personal data (such as health information) and do not intend to collect data about persons under 18.

• Registration data: name, email address, phone number, date of birth, address and nationality.
• Identity data (KYC): copy of ID and selfie for verification, in accordance with the Wwft.
• Financial data: bank account number, transaction history and investment data.
• Platform usage: IP address, browser type, pages visited, click behaviour and session duration.
• Communication: email correspondence, support requests and event participation.
• Source of income: for Wwft compliance purposes.

3. Why do we use your data and on what legal basis?

4. Who do we share your data with?

We share personal data only where necessary with the following categories of recipients:

We enter into processor agreements with all processors. We never sell personal data to third parties.

• OPP (Online Payment Platform): for payment processing, under its own AFM licence.
• KYC provider (e.g. Sumsub): for identity verification and AML screening.
• Cloud infrastructure (Supabase): for storage of platform and account data.
• Email provider: for transactional emails and communication.
• Tax authorities and government bodies: where legally required.

5. International data transfers

Some of our service providers are located outside the European Economic Area (EEA). In that case we ensure appropriate safeguards, such as standard contractual clauses (SCCs) approved by the European Commission, or an adequacy decision.

6. Automated decision-making

For identity verification (KYC) we use automated processing via external software. This may affect access to the Platform. You have the right to human intervention, to object and to request an explanation. Contact us at info@nxocapital.com for this.

7. How long do we retain your data?

• KYC data: at least 5 years after termination of the relationship (art. 33 Wwft).
• Financial data: 7 years under tax retention obligations (art. 52 AWR).
• Account data: up to 2 years after account closure or inactivity.
• Marketing data: until consent is withdrawn.

8. Your rights

Under the GDPR you have the following rights:

Send requests to: info@nxocapital.com. We respond within 30 days.

• Access — request which data we process about you.
• Rectification — have incorrect data corrected.
• Erasure — request deletion (unless statutory retention applies).
• Restriction — temporarily restrict processing in a dispute.
• Objection — object to processing on the basis of legitimate interest.
• Data portability — receive your data in a common format.
• Withdrawal of consent — withdraw previously given consent.

9. Security

We implement appropriate technical and organisational measures to protect personal data, including encrypted connections (TLS/SSL), access control and regular security audits. In the event of a data breach posing a high risk to data subjects, we will inform you as soon as possible.

10. Cookies

We use functional, analytical and — with your consent — marketing cookies. Read our cookie policy (part of this privacy policy) for a full overview.

11. Changes

NXO Capital Group B.V. reserves the right to amend this policy. Material changes will be notified by email or via the Platform. The most current version is always on this page.