Privacy Policy

1. Introduction

2. Scope

This Privacy Policy applies to:

• Website visitors
• Registered users
• P2P marketplace participants
• Individuals completing identity verification
• Business partners and service providers

It does not apply to third-party platforms or services not operated by Norbit.

3. Information We Collect

We collect the following categories of information:

3.1 Personal Identification Information

• Full name
• Date of birth
• Nationality
• Government-issued identification number
• Selfie or biometric verification data
• Residential address
• Phone number
• Email address

3.2 Financial & Transaction Data

• Cryptocurrency wallet addresses
• Transaction history on the Platform
• P2P trade records
• Fiat payment confirmation details (proof of transfer screenshots, transaction reference numbers)

Norbit does not custody fiat funds.

3.3 Technical Data

• IP address
• Device information
• Browser type
• Operating system
• Log data
• Cookies and session identifiers

3.4 Compliance Data

• KYC verification results
• AML screening results
• Sanctions screening data
• Risk scoring data
• Suspicious activity reports (if applicable)

4. How We Use Your Information

We use collected information to:

• Verify identity (KYC)
• Conduct AML and sanctions screening
• Facilitate P2P crypto transactions
• Operate escrow smart contracts
• Prevent fraud and illegal activity
• Comply with applicable laws and regulatory obligations
• Improve platform functionality
• Respond to user inquiries
• Enforce Terms of Use

We do not sell personal data.

5. Legal Basis for Processing

We process personal data based on:

• User consent
• Contractual necessity
• Compliance with legal obligations
• Legitimate business interests, including fraud prevention and platform security

6. Data Sharing and Disclosure

We may share personal information with:

6.1 Regulatory Authorities

If required by law, court order, or lawful investigation.

6.2 Compliance & KYC Providers

Third-party identity verification and AML screening providers.

6.3 Technical Service Providers

Cloud hosting providers, infrastructure providers, and analytics services.

6.4 Law Enforcement

Where suspicious activity, fraud, or financial crime is detected.

We do not share user data for advertising resale.

7. International Data Transfers

Your information may be processed or stored in jurisdictions outside Bhutan. Where required, we implement appropriate safeguards to ensure lawful data transfers.

8. Data Retention

We retain personal information:

• For as long as the user maintains an account
• As required for regulatory and AML record-keeping obligations
• As necessary to resolve disputes and enforce agreements

After retention periods expire, data is securely deleted or anonymized.

9. Data Security

We implement reasonable technical and organizational safeguards, including:

• Encryption of sensitive data
• Secure server infrastructure
• Access controls and role-based permissions
• Monitoring systems for fraud detection

However, no method of transmission over the internet is completely secure.

10. User Rights & Account Deletion

Subject to applicable law, users may have the right to:

• Access their personal data
• Request correction of inaccurate data
• Request deletion (subject to legal retention requirements)
• Withdraw consent
• Object to certain processing
• Request data portability

How to Delete Your Account:

• - You can initiate an account deletion request directly within the Norbit mobile application under Settings > Account > Delete Account. Alternatively, if you no longer have access to the app, you may submit a request through our Web-Based Account Deletion Portal or by emailing us at media@norbit.digital. Note: Deletion is subject to legal and regulatory retention requirements (e.g., AML/KYC laws), which may require us to retain certain records for a mandatory period after account closure.
• More Details

Requests may be submitted to: media@norbit.digital

11. Cookies and Tracking

We use cookies and similar technologies to:

• Maintain sessions
• Improve user experience
• Analyze traffic patterns
• Enhance security

Users may disable cookies through browser settings, though some features may not function properly.

12. Children's Privacy

Norbit does not knowingly collect personal information from individuals under 18 years of age. If such information is identified, it will be deleted.

13. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be notified via the website or application.

Continued use of the Platform constitutes acceptance of the updated policy.

14. Contact Information

For privacy-related inquiries:

Norbit Digital Private Limited.

Email: media@norbit.digital