Privacy Policy
Last updated: 16 September 2026
1. Who we are
This Privacy Policy is issued by BloomFi Labs ("BloomFi," "we," "us," "our"), the operator of the website at bloomfi.xyz and any associated mobile application (together, the "Services").
- Registered address: IFZA Business Park, DDP, PO Box 342001, Dubai, United Arab Emirates
- Contact for privacy matters: subscriptions@bloomfi.xyz
This Policy explains how we collect, use, disclose, and protect personal data in accordance with the PDPL and any implementing regulations issued by the UAE Data Office.
2. Scope
This Policy applies to personal data we process about:
- Visitors to bloomfi.xyz
- Prospective and actual customers using our Services
- Individuals who complete identity verification (KYC) as part of onboarding
It does not apply to data processed by independent third parties (e.g., banking, custody, or verification partners) under their own privacy policies, which we encourage you to review separately.
3. Personal data we collect
| Category | Examples |
|---|---|
| Identity data | Full name, date of birth, nationality, government ID details, photograph/selfie for verification |
| Contact data | Email address, phone number, residential address |
| Financial data | Account balances, transaction history, source-of-funds information, tax residency status |
| Verification data | Documents and data submitted to our identity-verification provider(s) |
| Crypto-related data | Wallet addresses and transaction data associated with crypto balances held through the Services |
| Technical data | IP address, device identifiers, browser type, app usage data |
| Communications data | Correspondence with our support team |
We collect this data directly from you (e.g., during onboarding), automatically (e.g., via cookies and app analytics), and from identity-verification and financial-partner service providers acting on our instructions.
4. Purposes of processing
We process personal data to:
- Create and administer your account
- Perform identity verification and meet our KYC/AML obligations
- Provide, operate, and improve the Services (including fiat and crypto account functionality)
- Process transactions and maintain accurate financial records
- Detect and prevent fraud, money laundering, and other financial crime
- Comply with applicable legal and regulatory obligations
- Communicate with you about your account, transactions, and (where you've opted in) product updates
- Analyse usage to improve the Services
5. Legal basis for processing
Under the PDPL, we rely on one or more of the following bases:
- Consent — where you have given clear consent (e.g., marketing communications)
- Contractual necessity — processing needed to provide the Services you've requested
- Legal obligation — where processing is required to comply with UAE law (e.g., AML/KYC requirements)
- Legitimate interest — for fraud prevention, security, and service improvement, balanced against your rights
6. How we share personal data
We share personal data with:
- Identity verification providers, to confirm your identity as part of onboarding
- Banking and payment partners, to hold and move fiat balances
- Crypto custody providers, to hold and secure crypto balances
- Regulators and law enforcement, where legally required
- Professional advisers (legal, audit, compliance), under confidentiality obligations
- Service providers supporting our technology infrastructure (e.g., cloud hosting, analytics)
We do not sell personal data.
7. Cross-border data transfers
Some of our service providers may be located outside the UAE. Where personal data is transferred internationally, we take steps required under the PDPL to ensure an adequate level of protection, including contractual safeguards.
8. Data retention
We retain personal data for as long as necessary to:
- Provide the Services to you
- Meet AML/KYC record-keeping obligations under applicable law
- Resolve disputes and enforce agreements
9. Your rights under the PDPL
Subject to applicable exceptions, you have the right to:
- Request access to your personal data
- Request correction of inaccurate data
- Request erasure of your data
- Restrict or object to certain processing
- Request data portability
- Withdraw consent at any time (without affecting prior lawful processing)
- Lodge a complaint with the UAE Data Office
To exercise these rights, contact us at subscriptions@bloomfi.xyz.
10. Security
We apply technical and organisational measures designed to protect personal data against unauthorised access, loss, or misuse, consistent with the sensitivity of financial and identity data we hold.
11. Children
Our Services are not directed at individuals under 18. We do not knowingly collect personal data from minors.
12. Cookies
bloomfi.xyz uses cookies and similar technologies for functionality, analytics, and (where consented) marketing purposes.
13. Changes to this Policy
We may update this Policy from time to time. Material changes will be notified via the website or app before they take effect.
14. Contact us
For questions about this Policy or our data practices: subscriptions@bloomfi.xyz