Privacy Policy
This policy explains what personal data we collect when you use the True Gold platform — including the True Gold mobile application and the True Gold web portal (together, the “Service”) — how we use it, who we share it with, and the choices you have. The Service is operated by True Gold Bullion Trading LLC, Dubai, United Arab Emirates (“we”, “us”).
1. Who this policy covers
The Service is a business platform for trading precious metals. It is used by our customers, suppliers and staff. Accounts are opened by our onboarding team — the app itself does not offer self-service registration. This policy covers all users who sign in to the Service.
2. Information we collect
- Account and identity data. Your name, contact details and sign-in credentials. As a regulated precious-metals business we are required to verify the identity of our customers and suppliers, so during onboarding we collect know-your-customer (KYC) information such as government-issued identification, company registration documents and proof of address.
- Trading and financial data. Records of your deals, orders, account balances, settlements, payments and related documents. These records are the substance of the Service and are maintained as permanent books of account.
- Technical data. Basic device and connection information (such as IP address, device type and app version) and service logs, used for security, troubleshooting and keeping the Service reliable.
The app does not contain advertising, does not use third-party advertising or analytics SDKs, and does not access your location, contacts, photos or files beyond documents you choose to upload.
3. Biometric unlock
The mobile app offers optional fingerprint / face unlock as a convenience. Biometric verification is performed entirely on your device by its operating system (Android Biometric / Apple Face ID or Touch ID). Your biometric data never leaves your device and is never transmitted to, stored by, or accessible to us.
4. How we use your information
- To provide the Service: executing and recording trades, orders, settlements and account statements, and showing you your positions and balances.
- To meet our legal obligations, including anti-money-laundering (AML), KYC and record-keeping requirements that apply to precious-metals trading.
- To keep the Service secure: authenticating sign-ins, preventing unauthorised access and detecting misuse.
- To communicate with you about your account and transactions, including in-app notifications.
- To provide customer support.
We do not sell your personal data, and we do not use it for third-party advertising.
5. Who we share it with
- Regulators and authorities, where disclosure is required by law — for example under AML and counter-terrorist-financing regulations.
- Service providers who host and support our infrastructure, under contracts that restrict their use of your data to providing those services to us.
- Professional advisers such as auditors and legal counsel, where necessary.
6. Data retention
Trading and financial records are books of account which we are legally required to retain for minimum statutory periods, and they remain part of the permanent ledger even after an account is closed. Identity and KYC records are retained for as long as required by applicable AML law. Other account data is kept while your account is active and deleted or anonymised when no longer needed.
7. Security
- All communication between the app and our servers is encrypted in transit (HTTPS/TLS).
- On mobile devices, session credentials are held in the operating system's secure storage (Android Keystore / Apple Keychain).
- Access to data within the Service is restricted by role-based permissions, and every account sees only its own records.
- Financial records are append-only: corrections are made by reversal entries, never by silent edits, preserving a complete audit trail.
8. Your rights
Subject to applicable law — including the UAE Personal Data Protection Law — you may request access to the personal data we hold about you, ask us to correct inaccurate data, or object to certain processing. We will honour such requests except where we are legally required to retain the data (for example, statutory trading records).
9. Account closure and data deletion
To close your account or request deletion of your personal data, contact us using the details below. We will delete or anonymise data that we are not legally obliged to keep; records we must retain under AML and accounting law will be kept for the statutory period and then disposed of securely.
10. Children
The Service is a business platform intended for adults. It is not directed at, and must not be used by, anyone under 18 years of age.
11. Changes to this policy
If we change this policy we will publish the updated version at this address and update the effective date above. Material changes will also be communicated through the Service.
12. Contact us
For any question about this policy or your personal data: