Privacy Policy

Last updated: 18 February 2026

This Privacy Policy explains how Kronos FortKnox ("we", "us", "our"), a product of KronosFleet, collects, uses, and protects your personal information when you use our custodial digital asset wallet service at www.kronosfleet.net (the "Service").

1. Information We Collect

We collect the following categories of information:

Account Information: Name, email address, and contact details provided during registration.
Identity Verification: Where required by our regulated payment partners for KYC/AML compliance, identity documents and related information may be collected and processed by those partners directly. We do not store identity documents on our systems.
Transaction Data: Records of wallet transactions including amounts, wallet addresses, timestamps, and transaction hashes.
Technical Data: IP address, browser type, device information, and usage logs collected automatically when you access the Service.
Communication Data: Records of correspondence when you contact us for support.

2. How We Use Your Information

We use your information for the following purposes:

To provide, maintain, and improve the Service.
To process wallet transactions and manage your custodial account.
To comply with legal and regulatory obligations, including anti-money laundering requirements.
To communicate with you about your account, service updates, and support requests.
To detect, prevent, and address fraud, security issues, and technical problems.
To analyse usage patterns to improve the Service (in aggregate, non-identifying form).

3. Legal Basis for Processing (UK GDPR)

We process your personal data under the following legal bases:

Contract: Processing necessary to provide the Service to you.
Legal Obligation: Processing necessary to comply with applicable law, including financial regulations.
Legitimate Interest: Processing for fraud prevention, security, and service improvement, where your rights do not override our interests.
Consent: Where we send marketing communications, we will obtain your consent first.

4. Data Sharing

We do not sell your personal data. We may share information with:

Regulated Payment Partners: Our fiat on-ramp providers (e.g., MoonPay) process payments and perform KYC verification under their own privacy policies and regulatory requirements.
Infrastructure Providers: Hosting and technical service providers who process data on our behalf under appropriate data processing agreements.
Law Enforcement: Where required by law, court order, or regulatory request.

5. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

Encryption of data in transit (TLS/HTTPS) and at rest.
Access controls and authentication requirements for all systems.
Regular security reviews and monitoring.
Secure key management practices for custodial wallet operations.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. Transaction records are retained for a minimum of 5 years to comply with financial regulations. You may request deletion of your account data at any time, subject to our legal retention obligations.

7. Your Rights

Under UK data protection law, you have the right to:

Access the personal data we hold about you.
Rectify inaccurate or incomplete data.
Erase your data (subject to legal retention requirements).
Restrict or object to processing in certain circumstances.
Data portability — receive your data in a structured, machine-readable format.
Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at privacy@kronosfleet.net.

8. Cookies

The Service uses essential cookies required for security and functionality (such as session management). We do not use third-party tracking or advertising cookies. No cookie consent banner is required for strictly necessary cookies under UK law.

9. International Transfers

Your data is primarily stored on servers located in the United Kingdom and European Economic Area. Where data is transferred outside of the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR.

10. Children

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal data from minors.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the Service or by email. The "Last updated" date at the top reflects the most recent revision.

12. Contact

For privacy-related enquiries or to exercise your data rights:

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.