Privacy Policy

At Nativ Holdings Inc. (“the Company”), one of our top priorities is protecting the privacy of users of our NATIV Application (“Service”). This privacy policy, together with our User Terms and Conditions and any other referenced documents, informs you of the types of personal data we collect, use, disclose, or otherwise process when you use our application. Please review this policy carefully to understand how we manage your personal data.

Personal Data

Personal data refers to any information relating to an identifiable individual, such as name, email address, phone number, social media handles, device information, and transaction data. We may collect this data directly or indirectly when you use our Services.

Data Collection and Processing Purposes

We collect and process the following types of data:

  • Full name
  • Telephone number
  • Official identification document (during KYC)
  • Chat channel IDs (optional)
  • Email address (optional)

     

The purposes of collection include:

  1. Providing and maintaining our Services.
  2. Verifying your identity and facilitating transactions.
  3. Sending relevant service and product information.
  4. Fulfilling legal and regulatory obligations.

Permissions and Third-Party Services

  • We request camera and storage permissions to support image uploads during KYC and profile setup.
  • Phone numbers are verified via OTP
  • Sumsub (Sum and Substance Ltd.) is our KYC provider and processes personal data in compliance with GDPR.
  • Optional contact methods (e.g., Facebook ID, Line ID) may be used to share NATIV activity updates.
  • We do not store or collect data from your contact list unless explicitly permitted.
  • We do not share identifiable data for unrelated uses without your consent.

Data Sharing

We may disclose personal data to:

  • Affiliated companies under Nativ Holdings Inc..
  • Third-party service providers (e.g., cloud platforms, auditors, KYC partners).

     

Government authorities, legal entities, or auditors in compliance with laws.

Legal Basis and Consent

We rely on your consent, contractual necessity, compliance with AML/TF laws, or legitimate interests as our legal bases for data processing. You have the right to access, correct, or delete your personal data.

Right to Be Forgotten

You may request deletion of your data. We will act promptly unless retention is required by law.

Security

We maintain robust data security in line with international standards. In case of unauthorized access due to external attacks (e.g., hacking), we disclaim liability unless the breach is due to our negligence.

Children's Privacy

NATIV is not intended for individuals under 18 years of age.

Language

In case of discrepancy between the English and translated versions, the English version prevails.

Support and Data Access

Users may access or modify their data via in-app chat or by contacting our Data Protection Officer.

Data Retention

We retain personal data as required by law or as long as necessary for service provision.

Breach Notification

In the event of a breach, we will notify regulators within 72 hours and inform affected users when applicable.

Governing Law

This policy is governed by the laws of the British Virgin Islands or any applicable jurisdiction where Nativ Holdings Inc. operates.

Policy Updates

We may revise this Privacy Policy. Updated versions will be posted and, where appropriate, we will notify users.

Contact

For any questions or concerns, please contact us via: