1. Who we are
Lyle31 is run by AMS Technology L.L.C-FZ (trade licence number 2533179.01, issued by Meydan Free Zone), of Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, United Arab Emirates. This policy covers this website and the Lyle31 app.
We're registered in the United Arab Emirates, so we follow the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the PDPL). If you live in another country, its data protection law may also apply to you and give you more rights.
2. What we collect
- Account details: your email, mobile number and password. We store the password scrambled, so we can't read it.
- Identity details: your name, date of birth, nationality, address, ID document and a selfie or short video. An identity verification provider checks these for us.
- Wallet and card activity: your balance, deposits, withdrawals, card top-ups and payments, and the crypto addresses you use.
- Device details: your IP address, device, app version and sign-in times.
- Messages you send us.
The selfie or video check is biometric data, which the law treats as sensitive. We use it only to confirm who you are and to prevent fraud.
This website has no cookies, analytics or tracking. Our hosting provider, DigitalOcean, logs your IP address, the page, the time and your browser, to keep the site running and secure.
3. Why we use it
- To run your account, as agreed with you: payments, top-ups, withdrawals, account emails and support.
- Because the law requires it: identity checks, anti-money laundering checks, and tax and accounting records.
- To keep accounts safe and stop fraud, for example by spotting a new device or an unusual payment.
- With your consent, if we ever send marketing.
We don't sell your data.
4. Emails we send you
We email you from no-reply@notify.lyle31.io about your account only:
- codes when you sign up,
- codes to reset your password,
- codes to confirm changes to your security settings, such as resetting your transaction PIN,
- security alerts, such as a new device signing in, or your password or PIN being changed or reset.
If you set an anti-phishing code in the app, every email we send shows it.
You can't turn these off while you have an account, because they keep it safe. We don't send marketing emails. If that ever changes, we'll ask for your consent first and every marketing email will have an unsubscribe link.
If an email claims to be from us but doesn't come from notify.lyle31.io, don't click anything in it. Forward it to security@lyle31.com.
5. Who we share it with
- Service providers who work for us: identity verification, crypto custody, card issuing, cloud hosting and email delivery. They can only use your data to do that work. You can ask privacy@lyle31.com for the full list.
- Authorities, when the law requires it.
- A new owner, if the business is sold, under this same policy.
6. Where it's processed
Your data may be processed outside the country you live in, including in Singapore, Hong Kong, Germany and the United Arab Emirates. Where the law requires a safeguard for this, we use one: a country recognised as protecting data well enough, or a contract that holds the provider to the same standard. You can ask us which applies.
7. How long we keep it
- Account data: while your account is open, then as long as the law requires.
- Anti-money laundering records: at least six years after your account closes or the payment happens.
- App security and audit logs: as long as the records they relate to, up to six years.
- Website logs: 90 days.
8. How we protect it
We encrypt your data, limit who can see it, and log access to it. If a breach affects you, we'll tell you and the authorities as the law requires.
9. Your rights
You can ask us to:
- show you the data we hold and give you a copy,
- correct it,
- delete it,
- limit how we use it,
- stop using it, including for marketing,
- send it to you or another provider in a usable format,
- have a person review a decision made automatically, such as an identity check result or a payment held for review.
You can also withdraw your consent at any time, where we rely on it.
We may have to keep some records by law, such as anti-money laundering records, even if you ask us to delete them. We'll tell you if so.
Email privacy@lyle31.com. We may ask you to prove who you are. We'll reply within 30 days, or sooner if the law where you live says so.
If you're unhappy with how we've handled your data, please tell us first so we can try to put it right. You can also complain to the UAE Data Office. If you live in another country, the data protection law there may give you other rights and a local regulator you can complain to. Email us and we'll apply the rights that law gives you.
10. Children
Lyle31 is for people aged 18 and over. We check your age during identity verification.
11. Changes
If we change this policy, we'll update the date at the top. If the change matters to you, we'll tell you first by email or in the app.
12. Contact us
AMS Technology L.L.C-FZ
Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, United Arab Emirates
Data Protection Officer: privacy@lyle31.com