AUREX PRIVACY POLICY
Effective Date: 24 February 2026
Introduction
Aurex (“Aurex”, “we”, “us”, or “our”) is a financial technology platform providing digital wallet infrastructure, merchant payment facilitation, and transaction settlement services.
Aurex operates as a subsidiary of Aurex Holdings Ltd, a diversified financial holding company.
This Privacy Policy explains how we collect, use, process, store, disclose, and safeguard personal information when you access our website, wallet platform, merchant services, or related infrastructure.
This policy applies across all jurisdictions in which Aurex operates.
Legal & Regulatory Framework
Aurex processes personal information in accordance with applicable data protection laws, including but not limited to:
- Protection of Personal Information Act (POPIA) – South Africa
- General Data Protection Regulation (GDPR), where applicable
- Applicable data protection laws in jurisdictions of operation
- Anti-Money Laundering (AML) and Counter-Terrorist Financing (CTF) obligations
Where multiple legal frameworks apply, Aurex will apply the higher standard of protection.
Categories of Information Collected
We may collect and process the following categories of information:
3.1 Personal Identification Information
- Full name
- Identification number / passport number
- Date of birth
- Contact details (email, phone)
- Residential address
3.2 Merchant & Business Information
- Company registration documents
- Director and shareholder information
- Banking confirmation details
- Business activity descriptions
- Regulatory registration information (where applicable)
3.3 Financial & Transaction Data
- Wallet balances
- Payment history
- Merchant transaction records
- Settlement data
- Digital asset settlement records (where applicable)
3.4 Technical & Usage Data
- IP address
- Device identifiers
- Browser information
- Log files
- Access timestamps
Purpose of Processing
Personal information is processed for legitimate operational and compliance purposes, including:
- Identity verification (KYC)
- Merchant due diligence
- Transaction processing
- Fraud prevention
- Risk-based monitoring
- Regulatory compliance
- Customer support
- System security enhancement
Aurex does not sell personal information to third parties.
Lawful Basis for Processing
We process personal data based on:
- Contractual necessity
- Legal obligations
- Legitimate business interests
- Consent (where required)
Users may withdraw consent where applicable, subject to regulatory limitations.
Cross-Border Data Transfers
Given the multi-jurisdictional nature of Aurex’s operations, personal information may be transferred across borders to:
- Banking partners
- Payment processors
- Cloud infrastructure providers
- Compliance service providers
- Group entities within Aurex Holdings Ltd
Where data is transferred internationally, Aurex ensures appropriate safeguards are implemented, including:
- Contractual data protection clauses
- Standard contractual safeguards
- Secure infrastructure protocols
- Jurisdictional adequacy assessments
Data transfers are conducted in accordance with applicable data protection laws.
Sharing of Information
We may share information with:
- Licensed financial institutions
- Banking infrastructure partners
- Compliance and identity verification providers
- Regulatory authorities
- Legal advisors
We do not share personal information for unrelated marketing or resale purposes.
All third parties are contractually obligated to maintain confidentiality and security standards.
Data Retention
We retain personal information for:
- The duration of the contractual relationship
- Compliance with AML/CTF obligations
- Regulatory recordkeeping requirements
- Legitimate dispute resolution purposes
- Retention periods may vary by jurisdiction.
- When no longer required, information is securely deleted or anonymized.
Security Safeguards
Aurex maintains technical and organizational safeguards including:
- Encrypted data transmission
- Secure cloud infrastructure
- Role-based access controls
- Transaction monitoring systems
- Internal compliance oversight
While we take reasonable steps to protect personal information, no system can guarantee absolute security.
Digital Asset Settlement Data
Where digital asset settlement functionality is utilized:
- Transaction data may be recorded on distributed ledger infrastructure.
- Aurex does not control public blockchain records.
- Wallet-related personal data remains subject to this Privacy Policy.
Digital asset settlement services are limited to transaction facilitation and do not constitute investment or custody services.
User Rights
Depending on jurisdiction, individuals may have rights to:
- Access personal information
- Request correction
- Request deletion (where legally permissible)
- Object to processing
- Restrict processing
- Lodge complaints with regulatory authorities
Requests may be submitted to:
Cookies & Website Tracking
Our website may use cookies and tracking technologies for:
- Security purposes
- Performance analytics
- Fraud detection
- User experience enhancement
Users may manage cookie preferences via browser settings.
Merchant Responsibilities
Merchants utilizing Aurex services must:
- Maintain their own compliant privacy policies
- Collect customer data lawfully
- Safeguard personal information
- Comply with applicable jurisdictional regulations
Aurex is not responsible for independent merchant data practices.
Children’s Data
Aurex services are not intended for individuals under the age of 18 unless legally permitted under applicable jurisdictional law.
We do not knowingly collect personal data from minors.
Amendments to this Policy
We reserve the right to amend this Privacy Policy periodically.
Updated versions will be published on our website.
Continued use of the platform constitutes acceptance of updates.
Contact Information
Privacy & Data Protection Officer
Aurex – A Financial Technology Subsidiary of Aurex Holdings Ltd
Suite 16, Woodmill Lane Centre, Knysna, 6571