Privacy Policy
Last Update: November 25, 2025
This Privacy Policy describes how Hekemai Technology Limited (“Hekemai,” “we,” “our,” or “us”) collects, uses, stores, and protects your personal information when you access or use the services made available through our websites, platforms, and related services (collectively, the “Services”).
By accessing or using the Services, you confirm that you have read and understood this Privacy Policy. This Policy becomes legally binding once you begin using the Services. Hekemai is committed to safeguarding the confidentiality, integrity, and security of your personal data.
Responsible Entity
The entity responsible for the processing of your personal information is:
Hekemai Technology Limited
Company Number: 9389645
NZBN: 9429053299734
New Zealand
Hekemai Technology Limited operates in accordance with applicable New Zealand laws and regulations, including relevant privacy and data-protection requirements.
If you have questions or concerns regarding the handling of your personal data, you may contact our Data Protection Officer at:
Personal Data We Collect
Hekemai may collect and process the following categories of personal information:
1. Information You Provide Directly
You may provide personal data when creating an account or using our Services, including:
Full legal name
Residential or mailing address
Email address
Telephone number
Date of birth
Copies of identification documents (passport, national ID, driver’s license)
Tax identification numbers
Payment card or bank account information
Source of funds and source of wealth documentation
Identity verification materials such as selfies, photographs, or video verification
Information shared during customer support interactions (emails, calls, chats)
For higher-risk activities or to meet regulatory requirements, we may request additional documentation such as bank statements or enhanced verification information.
You are responsible for ensuring that the information you provide is accurate and up to date. Most personal details can be updated through your account profile.
2. Information Collected Automatically
When you interact with our Services, we may automatically collect:
Transaction records and related metadata
IP address and approximate location data
Device identifiers and fingerprinting information
Browser type, operating system, time zone, and device characteristics
Platform usage and interaction data
3. Information From Third Parties
We may receive personal information from third parties, including:
Payment service providers and financial institutions
Identity verification and KYC providers
Compliance, fraud-prevention, and risk-monitoring partners
Public and private databases, including sanctions and watchlist providers
4. Social Media Login Information
Where social login features are enabled and you choose to use them (e.g., Google or similar services), we may receive limited information required for authentication and account creation, in accordance with the provider’s policies.
Minors’ Information
Our Services are intended exclusively for individuals aged 18 years or older.
Hekemai does not knowingly collect personal information from minors. If such data is identified, it will be deleted promptly.
How We Protect Your Information
We apply robust security measures, including:
Encrypted communication between your device and our systems
Continuous monitoring for suspicious or unauthorized activity
Restricted access to personal data on a strict need-to-know basis
Industry-standard technical, organizational, and physical safeguards
Purposes and Legal Bases for Processing
We process personal data on the following legal grounds:
Contractual Necessity
Providing and maintaining the Services
Executing transactions and managing accounts
Communicating with users regarding their accounts
Legal and Regulatory Obligations
AML/CFT compliance
Fraud detection and reporting
Tax and regulatory reporting
Compliance with applicable laws and regulations
Legitimate Interests
Securing and protecting our platforms
Enhancing service performance and user experience
Conducting internal analytics, audits, and testing
Preventing misuse, fraud, and unauthorized access
Consent
Where required, we rely on your explicit consent, such as for optional features or marketing communications.
Disclosure of Personal Information
We may share personal information with trusted third parties, including:
Service providers and technical partners
Banks, payment processors, and settlement partners
Identity verification and compliance providers
Fraud-prevention and security vendors
Analytics and performance service providers
Transaction counterparties or beneficiaries
Regulatory or law-enforcement authorities when legally required
Other parties where you have given explicit consent
Hekemai does not sell personal data.
International Data Transfers
Your information may be processed or stored in New Zealand or other jurisdictions where our service providers operate. Where international transfers occur, appropriate safeguards are implemented in accordance with applicable data-protection laws.
Automated Decision-Making
We may use automated systems for purposes such as:
Fraud detection and risk assessment
Identity verification
Consistency checks between location, payment, and account data
These processes support compliance obligations and platform security.
Cookies
We use cookies and similar technologies to:
Enable core website functionality
Maintain security
Perform analytics and performance monitoring
Cookies are used based on our legitimate interest in operating a secure and reliable website.
Data Retention
Certain personal and transactional data must be retained to meet legal and regulatory requirements, including AML/CFT obligations, even after account closure. Access to retained data is strictly controlled and limited.
Your Rights
Subject to applicable law, you may request:
Access to your personal data
Correction of inaccurate or incomplete information
Deletion of data where legally permissible
Restriction or objection to specific processing activities
Withdrawal of consent where applicable
Updates to communication preferences
Some rights may be limited due to mandatory legal retention requirements.
To exercise your rights, contact: