Privacy policy

T-REX Network SA and its affiliates (together, "T-REX", "we", "our") provide open, chain-agnostic infrastructure for regulated tokenized assets. This policy describes how we handle personal information you provide when you interact with our websites, marketing pages, application programming interfaces, developer documentation, events, and communications (together, the "Services").

This policy is designed to meet the requirements of the EU General Data Protection Regulation (GDPR), the UK Data Protection Act 2018, and comparable frameworks. Depending on the products or contractual relationship you have with T-REX, additional or supplementary notices may apply.

1. Who is the controller of your data

The data controller for information collected through the public T-REX websites and marketing communications is T-REX Network SA, with registered office in Luxembourg. Where T-REX operates a specific product or feature that involves separate processing, the applicable data controller is identified in the relevant product terms or privacy notice.

2. What data we collect

We collect data in three main ways:

Data you provide to us

• Contact form submissions, including your name, work email, employer, role, and message content.
• Event and webinar registrations, including seniority, country, and topics of interest.
• Newsletter sign-ups.
• Applications to partner programmes, listing programmes, or the developer network.

Data we collect automatically

• Usage information such as pages viewed, links clicked, referrer URL, timestamps, and approximate location derived from IP address.
• Device information such as device type, browser, operating system, and viewport.
• Cookie and similar-technology identifiers, described in our cookie notice below.

Data from third parties

We may receive contact and firmographic data from professional data providers, event partners, or referrers in order to reach the right technical and commercial contacts at institutions we are speaking to. Where we receive personal data from a third party, we ensure that party has a lawful basis and appropriate notices in place.

3. Why we use your data

• To respond to inquiries you submit through contact forms and email.
• To provide the Services, including access to documentation, developer tooling, and admin dashboards where relevant.
• To send you commercial information about T-REX products, standards, and events where you have opted in or where we may rely on legitimate interest.
• To measure and improve our Services, including product analytics, security monitoring, and abuse prevention.
• To comply with our legal, regulatory, tax, and accounting obligations.

4. Lawful bases

Depending on the processing activity, we rely on one or more of the following lawful bases under the GDPR and equivalent frameworks:

• Consent, for non-essential cookies and for marketing communications where required.
• Contract, where processing is necessary to provide you with a Service you have requested.
• Legitimate interests, for site analytics, business-to-business outreach, product improvement, and fraud prevention. You may object at any time (see Section 8).
• Legal obligation, where a specific law requires the processing.

5. Sharing and disclosure

We do not sell personal information. We share data only with third parties that support our Services, and each is bound by contractual obligations, including confidentiality and, where relevant, standard contractual clauses. Categories of recipients include cloud hosting and storage providers, customer relationship and email delivery platforms, analytics providers, event and webinar platforms, professional advisers, and regulators or law enforcement where required.

6. International transfers

Some of our providers are located outside the European Economic Area. Where personal data is transferred internationally, we rely on transfer mechanisms recognised by the European Commission or the UK Information Commissioner, such as adequacy decisions, the EU standard contractual clauses, and, where applicable, supplementary safeguards.

7. Retention

We retain personal data only for as long as necessary for the purposes described in this policy, or for as long as a legal or regulatory requirement obliges us to keep it. Inquiry records are typically retained for up to 36 months from the last interaction. Newsletter records are retained until you unsubscribe. Financial and contract records are retained for the periods required by applicable tax and commercial law.

8. Your rights

Subject to local law, you may:

• Access the personal data we hold about you.
• Ask us to correct inaccurate or incomplete data.
• Ask us to delete data, subject to any legal retention obligation we have.
• Ask us to restrict or object to processing, in particular where we rely on legitimate interests.
• Request portability of data you provided to us.
• Withdraw consent for any processing that is based on consent.
• Lodge a complaint with your national data protection authority.

To exercise any of these rights, please contact us using the details in Section 11. We will respond within one month, in line with GDPR timeframes.

9. Cookies and similar technologies

Our websites use a small number of cookies for essential functionality, security, and privacy-friendly analytics. Non-essential cookies, including analytics and marketing cookies, are only set once you consent through our cookie banner. You can change your preferences at any time by clearing your cookies and revisiting the site.

10. Security

We maintain technical and organisational measures appropriate to the nature of the data and the risk of processing. These include encryption in transit, encrypted storage for sensitive fields, access control, audit logging, and periodic reviews. No system is perfectly secure, but we treat data protection as a first-class part of how we design and operate the Services.

11. Contact us

Questions about this policy or about your personal data can be sent to privacy@t-rex.network. Written correspondence can be sent to T-REX Network SA, Luxembourg. When contacting us, please describe your request clearly so we can respond promptly.

This policy may be updated from time to time. Material changes will be communicated on this page and, where appropriate, by direct notice to registered users.