Privacy Policy

Last Updated: 1st January 2026

Introduction

Valena Ltd ("we", "us", or "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website valena.world or use our money services. We are registered in Ireland with company registration number 709812.

Data Controller Information

Valena Ltd acts as the data controller for the personal data we collect. Our registered office is located at Grafton Street 141, Waterford, X01 0097, Ireland. For any privacy-related enquiries, please contact us at privacy@valena.world or call +353 511321239.

Data We Collect

The data collection practices of Valena Ltd include gathering personal information through various means when you interact with our services. We may collect the following types of personal data:

• Contact Information: Name, email address, phone number, postal address
• Business Information: Company name, job title, business address, VAT number
• Financial Information: Payment details, transaction history, banking information (where applicable)
• Technical Information: IP address, browser type, device information, website usage data
• Communication Data: Records of correspondence, enquiries, and support requests
• Identity Verification: Documentation required for compliance with anti-money laundering regulations

How We Use Your Information

We use of your data is governed by lawful bases under GDPR and is necessary for the provision of our money services. How we use your information includes the following purposes:

• Service Provision: To provide money services, process transactions, and fulfil contractual obligations
• Regulatory Compliance: To meet legal obligations including anti-money laundering and know-your-customer requirements
• Customer Support: To respond to enquiries, provide technical support, and resolve service issues
• Business Operations: To manage our business relationship, send important notices, and maintain accurate records
• Risk Management: To assess and manage financial and operational risks
• Marketing: To send relevant information about our services (with your consent where required)
• Website Improvement: To analyse website usage and improve our digital services

Legal Basis for Processing

We process your personal data under the following legal bases as defined by GDPR:

• Contractual Necessity: Processing necessary for the performance of contracts for our money services
• Legal Obligation: Compliance with financial regulations, anti-money laundering laws, and tax obligations
• Legitimate Interest: Business operations, risk management, and service improvement
• Consent: Marketing communications and optional services (where applicable)

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner. For detailed information about our use of cookies, please refer to our Cookie Policy.

Data Sharing and Disclosure

We may share your personal data with the following categories of recipients:

• Regulatory Authorities: Irish financial regulators, tax authorities, and law enforcement agencies
• Service Providers: Third-party providers who assist in delivering our services (under strict confidentiality agreements)
• Professional Advisors: Legal, accounting, and compliance professionals
• Business Partners: Where necessary for the provision of money services
• Successors: In the event of business sale, merger, or acquisition

Data Retention

Data retention periods are determined by legal requirements and business needs. We retain personal data for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, and resolve disputes. Financial transaction data is typically retained for seven years in accordance with Irish financial regulations. Marketing data is retained until you withdraw consent or for a maximum of three years from last interaction.

International Data Transfers

We primarily process data within the European Economic Area (EEA). Where we transfer data outside the EEA, we ensure appropriate safeguards are in place, including adequacy decisions, standard contractual clauses, or other approved mechanisms under GDPR.

Your Rights

Under GDPR, you have the following rights regarding your personal data:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data (subject to legal obligations)
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for marketing or optional processing

To exercise your rights, please contact us at privacy@valena.world. We will respond to your request within one month.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, access controls, regular security assessments, and staff training. However, no method of transmission over the internet or electronic storage is completely secure.

Contact Information

If you have questions about this Privacy Policy or our data practices, please contact us:

Complaints

You have the right to lodge a complaint with the Irish Data Protection Commission if you believe your data protection rights have been violated. Contact information for the Irish Data Protection Commission can be found at www.dataprotection.ie.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website and updating the "Last Updated" date. Continued use of our services after such changes constitutes acceptance of the updated policy.