- We collect what we need to run your account, convert your crypto and pay you: your details, your bank account for payouts and your transactions.
- We never sell your personal data. We share it only with the partners that help us provide the Service, and with authorities when the law requires it.
- Your app passcode and Face ID or fingerprint never leave your phone.
- Financial records are kept for the period the law requires, even after you close your account.
1. Who we are
Bella Trade runs Bella Trade and is responsible for your personal data (the "data controller"). This policy explains how we handle it when you use our website and mobile app, in line with the Nigeria Data Protection Act 2023 and other laws that apply.
2. What we collect
What you give us
- Account details: first and last name, username, email address, phone number, country and password (stored only as a secure hash).
- Payout details: the bank, account number and account name you want to be paid into.
- Information for checks: documents or details you provide if we ask you to confirm your identity or the source of your funds.
- Messages: what you send us through support chat or email.
What we collect when you use the Service
- Transactions: your deposit addresses, blockchain transaction IDs, amounts, rates, payouts, bank references and referral earnings.
- Security and device data: your 2FA settings, the devices and sessions signed in to your account (device name and model, operating system, app or browser version), IP address and the approximate location it indicates, and sign in history.
- Notifications: a push notification token for each phone that allows notifications.
- Website usage: cookies and similar technologies, as described in section 9.
What we do not collect
Your app passcode is checked on your phone and stored there only in a protected, scrambled form; it is never sent to us. Face ID and fingerprints are handled entirely by your phone's operating system, and we never receive your biometric data. We never ask for, or store, your private keys or wallet recovery phrases.
3. How we use it
| Purpose | Legal basis |
|---|---|
| Creating and running your account, converting your deposits and paying you | Performing our contract with you |
| Securing your account: 2FA, device and session management, fraud prevention | Contract; our legitimate interest in keeping the Service safe |
| Anti-money laundering checks, record keeping and reporting to authorities | Legal obligation |
| Transaction notifications and emails (deposit received, payout sent) | Contract |
| Support, complaints and service messages | Contract; legitimate interest |
| Running the referral programme | Contract |
| Improving the Service and fixing errors | Legitimate interest |
| Optional cookies for live chat and analytics, and marketing messages | Your consent, which you can withdraw at any time |
We do not make decisions about you that have legal or similarly significant effects based solely on automated processing, other than automated checks that flag transactions for a person on our team to review.
4. Who we share it with
We never sell your personal data. We share it only as needed with:
- Liquidity partners who complete conversions and send payouts on our behalf. They receive the payout amount, the bank account details and the transaction reference.
- Banks and payment providers that process payouts.
- Service providers that work for us under contract, including: cloud hosting and storage; crypto wallet infrastructure that creates deposit addresses and detects deposits; email delivery; push notifications (Google Firebase Cloud Messaging and Apple Push Notification service); live chat support (tawk.to); error monitoring (Sentry); and spam protection (Google reCAPTCHA).
- Authorities such as regulators, financial intelligence units, law enforcement and courts, when the law requires it or to protect against fraud and crime.
- Professional advisers such as auditors and lawyers, and a buyer or successor if our business is sold or reorganised, who must protect your data in line with this policy.
If you were referred by a friend, they can see your username and the earnings your trades brought them, but not your transactions or any other details.
5. International transfers
Some of our service providers are based, or store data, outside your country. When we transfer your data abroad we make sure it is protected to the standard your law requires, for example through contractual safeguards, and only transfer what the provider needs.
6. How long we keep it
- Account, identity and transaction records: for as long as your account is open, then for at least 5 years after it is closed or after the last transaction, as anti-money laundering law requires (or longer if a law or an investigation requires it).
- Security logs and device records: up to 2 years, unless needed for an investigation.
- Push notification tokens: until you sign out of that phone or turn notifications off.
- Support conversations: up to 3 years.
Because of these legal duties, closing your account does not erase your financial records straight away. We stop using them for anything except meeting those duties, and delete or anonymise them when the retention period ends.
7. How we protect it
We protect your data with encryption in transit, hashed passwords, mandatory two-factor authentication, passcode and biometric locks in the app, per-device sign in that you can revoke, restricted staff access on a need-to-know basis, and monitoring for suspicious activity. No system is perfectly secure; if a breach affects you, we will tell you and the regulator as the law requires.
8. Your rights
Subject to the law, you have the right to:
- access the personal data we hold about you and get a copy;
- have inaccurate data corrected;
- have data erased, or its use restricted, where we no longer need it or have no legal duty to keep it;
- object to our use of your data based on legitimate interests, and to direct marketing at any time;
- receive data you gave us in a portable format;
- withdraw consent you have given, such as for optional cookies, without affecting anything done before.
To use any of these rights, email [email protected] from the email address on your account. We may need to confirm your identity first, and we will respond within the time the law allows. If you are unhappy with how we handled your data, you can complain to the Nigeria Data Protection Commission (NDPC).
9. Cookies
Cookies are small files a website stores in your browser. Our mobile app does not use cookies. On our website we use:
| Cookie | Type | Purpose | Lasts |
|---|---|---|---|
bella_trade_session | Essential | Keeps you signed in and the site working as you move between pages | Session |
XSRF-TOKEN | Essential | Protects forms against cross-site request forgery | Session |
bt_cookie_consent | Essential | Remembers your cookie choice | 1 year |
_GRECAPTCHA | Essential | Google reCAPTCHA spam and bot protection on sign in and sign up, where enabled | 6 months |
TawkConnectionTime, twk_* | Optional | Live chat support (tawk.to) | Up to 6 months |
| Analytics cookies | Optional | Help us understand how the site is used, if we turn analytics on | Up to 2 years |
Optional cookies are only set if you choose "Accept all" in our cookie notice. You can change your choice at any time:
You can also block or delete cookies in your browser settings, but essential cookies are needed to sign in.
10. Children
Bella Trade is only for people aged 18 or over. We do not knowingly collect data from children. If you think a child has given us their data, contact us and we will delete it where the law allows.
11. Changes to this policy
We may update this policy from time to time. If we make significant changes, we will tell you by email or in the app before they take effect. The date at the top shows when it was last updated.
12. Contact us
For privacy questions or requests:
Bella Trade
[email protected]
See also our Terms of Service.