Version v2 · Effective 2026-10-25

Kiroex Privacy Policy

1. Who We Are

Kiroex ("Kiroex," "we," "us," "our") operates the trading-education and community platform at kiroex.com. Kiroex is a trading name of Kiroex Ltd, a company registered in England and Wales under company number 17274823, with its registered office at 124 City Road, London EC1V 2NX

Kiroex is registered as a data controller with the UK Information Commissioner's Office (ICO), registration number ZC246724

For any question about this policy or how we handle your personal data, contact our data protection contact:

• Email: support@kiroex.com
• Post: 124 City Road, London EC1V 2NX, marked "Data Protection"

Kiroex is an educational platform. We are not a financial adviser, broker, custodian, or fund manager. We do not hold client funds for trading, and nothing in this policy should be read as changing that.

2. Scope of This Policy

This policy explains how we collect, use, share, and protect personal data when you use kiroex.com, our mobile-responsive web app, and related services (the "Platform"). It applies to members, traders/educators, Kiroex Connect business users, people who book calls through My Kiros, and visitors. It does not cover the practices of independent third parties we link to (such as brokers, prop firms, or payment processors), whose own privacy policies govern their handling of your data.

Our use of cookies and similar technologies is addressed briefly at Section 22 and in full in our separate Cookie Policy.

3. What Data We Collect

3.1 Account and profile data

Name, email address, username, password (hashed), country, profile photo/avatar, bio, social links, and, for traders/educators, community and public profile details.

3.2 Payment and billing data

Billing name, billing address, subscription tier and status, transaction history, and — where you pay by cryptocurrency — public wallet addresses associated with your transactions. We do not store full card numbers or crypto private keys. See Section 6.

3.3 Trading and journal data

Trade history you choose to import manually (CSV/HTML) or via a live connection to your own trading account through MetaApi or Finatic (positions, entry/exit prices, sizes, P&L, instruments, timestamps), and any notes, tags, or screenshots you add to your trade journal.

If you use the Trade Copier, we also process the live positions, balances and equity of the accounts you link, and a record of every trade copied, skipped or closed. If you use Prop Practice, we process your practice trades, results and any certificates you earn.

3.4 Uploaded content

Avatars, chart screenshots, images and files attached to posts, forum messages, journal entries, or support tickets.

3.5 Communications data

Direct messages between members and traders (end-to-end encrypted client-side — see Section 13), public forum posts and comments, support tickets, and correspondence with us.

3.6 Usage and device data

Log data, IP address, device and browser type, pages viewed, features used, referral source, and analytics events, generally collected via cookies and similar technologies (see our Cookie Policy).

3.7 Referral and affiliate data

Affiliate/referral codes, click identifiers, and attribution data linking a signup or subscription to the affiliate who referred it.

3.8 Event attendance data

If you register for a Kiroex-hosted live session or event directly through the Platform, we collect your registration details and attendance record. This does not include attendees who register solely through a third-party platform such as Eventbrite, where that provider is the controller of the registration data (see Section 11).

3.9 Discord/Telegram data (where a trader opts in)

If a trader connects their community to Discord or Telegram, limited data (such as your Discord/Telegram username, if you choose to link your account for community access) may be shared to enable that integration. See Section 14.

3.10 Bookings

If you book a call through My Kiros, we collect your name, email, any answers or photo you add, and the booking details, and share them with the person you booked. If you choose to create a free Kiroex member account when booking, we create it with your name and email; you can remove it from the link in your booking confirmation.

3.11 Business and Kiroex Connect data

If you use Kiroex Connect or list a firm on Kiroex, we process your business details, the people listed on your profile and the information you publish. If you contact our business development team, we process your message and contact details to reply. We may also contact traders, educators and firms using business contact details they have made public, to tell them about Kiroex; you can ask us to stop at any time.

3.12 Phone and browser notifications

If you allow notifications, we store the notification address your browser or phone gives us so we can send you alerts. You can turn them off in your browser or account settings.

3.13 Calendar and video meeting accounts (Google, Zoom)

If you use My Kiros, Kiroex's booking and scheduling tool, you can choose to connect a Google account or a Zoom account so Kiroex can create video meetings for your bookings automatically. Connecting is optional; without it, Kiroex provides a meeting link through another service.

When you connect, we store your account email address, the permissions you granted, and access tokens. The tokens are encrypted before they are stored and are never visible to other users or to Kiroex staff in readable form.

Google. With your permission, Kiroex:

• creates a calendar event with a Google Meet link when someone books a meeting with you;
• moves or deletes that event when the booking is rescheduled or canceled;
• checks your calendar's busy and free times, so people can't book you when you're already busy (we see only that a time is taken, not what the event is);
• applies your chosen "who can join" setting to each new Meet.

Kiroex does not read the contents of your other calendar events, emails, or files.

Zoom. With your permission, Kiroex creates a Zoom meeting for each booking under your Zoom account, updates or deletes it when the booking changes, and reads your Zoom account email to show which account is connected.

What we never do with this data: we never sell it, never use it for advertising, never use it to train AI models, and never share it except as needed to provide the booking feature.

Disconnecting. You can disconnect at any time from My Kiros settings. We then revoke Kiroex's access with Google or Zoom and delete the stored tokens. Meetings already created keep their links.

Kiroex's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4. Why We Collect It, and Our Lawful Basis

UK GDPR requires us to identify a lawful basis for each purpose. We rely on the following:

• Creating and administering your account, providing subscriptions you've purchased: Contract (necessary to perform our agreement with you)
• Processing payments via Stripe, BoomFi, NOWPayments or Startbutton: Contract; Legal obligation (for tax/accounting records)
• Operating the trade journal, including AI-generated analysis of your own trades: Contract
• Providing the in-app AI assistant and AI-assisted support responses: Contract; Legitimate interests (improving support efficiency)
• Enabling direct messaging between members and traders: Contract
• Hosting and moderating public and per-community forums: Contract; Legitimate interests (maintaining a safe platform)
• Importing trading history via MetaApi or Finatic, or via manual CSV/HTML upload, and copying trades between your own linked accounts: Consent (you actively opt in and can disconnect at any time)
• Displaying public profiles, trade setups, and community content: Contract; Legitimate interests (operating a public community platform)
• Operating the marketplace and paying traders via Stripe Connect: Contract
• Fraud prevention, platform security, and abuse monitoring: Legitimate interests; Legal obligation
• Sending service and transactional emails (billing, security alerts, password resets): Contract; Legal obligation
• Sending marketing communications (product updates, promotions): Consent (opt-in, see Section 10)
• Affiliate/referral tracking and attribution: Legitimate interests (crediting the person who referred you, see Sections 9 and 22)
• Broker and prop-firm referral link tracking: Legitimate interests / Consent, depending on mechanism (see Section 8)
• Running Kiroex-hosted events and maintaining an attendee record: Contract; Legitimate interests
• Identity verification for payouts and for educators going live: Legal obligation; Legitimate interests (preventing fraud) (see Section 17)
• Contacting traders, educators and firms using public business contact details: Legitimate interests (telling businesses about Kiroex; you can object at any time)
• Responding to legal requests, enforcing our Terms: Legal obligation; Legitimate interests

Where we rely on legitimate interests, we have considered that this is not overridden by your rights and freedoms, and you can object at any time (Section 20).

5. Joint Controllership With Educators

When you purchase a course, subscribe to a trader-led community, or register for an educator-hosted event, both Kiroex and the relevant trader/educator act as controllers of certain data about you. This is a joint controllership arrangement under UK GDPR, and this section sets out its essence in plain English.

• What the educator receives: your name, username, email address (where required for communication), subscription/attendance status, and any content you post within their community or send them directly.
• What the educator may do with it: communicate with you about their course, community, or event; deliver the content or service you've paid for; and — subject to their own obligations under our Educator Terms and applicable law — contact you about related offerings, unless you opt out.
• What the educator may not do: sell your data to third parties, use it for purposes unrelated to their community, or retain it after you unsubscribe beyond what's reasonably necessary for their own records and legal obligations.
• Who to contact:

• For questions about how Kiroex processes your data (platform infrastructure, payments, hosting), contact us using the details in Section 1. - For questions about how a specific educator uses your data within their community, contact that educator directly; their contact details are available on their community page. - If you're unsure, contact us and we will help direct your query.

This arrangement mirrors the data protection terms in our Educator Terms of Service, which educators agree to as a condition of using Kiroex.

6. Payment Data

We use several payment processors, each handling payment data differently. Kiroex never stores your full card number, card CVV, or crypto private keys.

• Stripe — processes card and direct debit payments for platform subscriptions and marketplace community subscriptions, and powers payouts to traders via Stripe Connect. See [Stripe's Privacy Policy](https://stripe.com/gb/privacy).
• BoomFi — processes certain payments, including stablecoin/crypto payment flows, where offered. See BoomFi's privacy policy on their website.
• NOWPayments — processes cryptocurrency payments where offered, and crypto payouts to traders and affiliates. See NOWPayments' privacy policy on their website.
• Startbutton — processes local payments in some African countries, where offered. See Startbutton's privacy policy on their website.

We also record which currency you chose to see prices in and your approximate country (from your internet connection), so we can show the right prices and payment options.

Crypto wallet addresses are personal data. If you pay by cryptocurrency, the wallet address you use is recorded against your transaction. Although a blockchain address is pseudonymous on its own, once it is linked to your Kiroex account it becomes personal data under UK GDPR, and we treat it accordingly — with the same access, retention, and security safeguards as other account data. We do not link your wallet address to your identity beyond what is necessary for payment reconciliation and fraud prevention.

Each processor is an independent controller for the payment data it collects directly from you (e.g., full card details), and a processor for us in respect of the transaction data it returns to us (amount, status, timestamp, partial card/wallet reference).

7. Connected Trading Accounts (Trade Journal, Trade Copier)

If you choose to connect your own trading account via MetaApi or Finatic, or to manually import trade history via CSV/HTML, we ingest the trading data you provide: instruments traded, position sizes, entry/exit points, open/close timestamps, and resulting P&L.

• What we ingest: raw trade history as returned by MetaApi or Finatic, or contained in your uploaded file. With MetaApi, your account password is passed to MetaApi to set up the connection and is not stored by Kiroex unless you choose to let us remember it, in which case it is stored encrypted. With Finatic, you sign in on Finatic's own page and Kiroex never sees your broker login. You can disconnect at any time.
• Trade Copier: if you link accounts to the Trade Copier, we read their positions and place, change or close trades in the accounts you choose, following your settings. You can pause or remove a link at any time.
• Whether it's displayed publicly: by default, your trade journal is private to you. If you are a trader/educator, you may choose to make certain performance statistics or verified trade history visible to your subscribers or the public — this is always an opt-in action on your part, and we will clearly indicate what is public before you publish it.
• Verification badges and leaderboards: where we operate verification badges or leaderboards, we may show summary statistics derived from your connected or imported trade history (for example, win rate or number of trades) only if you have chosen to take part.

You can delete imported trade history from your journal at any time, and disconnecting a live MT5 connection stops any further data being imported.

8. Broker and Prop-Firm Referral Links

Some pages on the Platform link to third-party brokers and proprietary trading firms. When you click one of these links, we record that the click happened (the link, the time, and, if you are signed in, your account) so we can measure which partners are useful to our users and reconcile any referral fees we are paid. If you then open an account with that broker or prop firm, they handle your data under their own privacy policy, not ours. We do not receive your account details, balances or trading activity from them.

When you arrive on Kiroex through an affiliate or invite link, we set a cookie (kx-referral, 30 days) recording which link brought you, so the right person is credited if you sign up. See Section 22 and our Cookie Policy.

9. Affiliate and Referral Program

If you join our affiliate program, we process your name, contact details, referral code, the signups and subscriptions attributed to you, and the commission you have earned. To pay commission we also process the payout details you give us (for example, a connected Stripe account or a crypto wallet address).

If you sign up using someone else's referral link, we record that you were referred by them so we can credit them. The affiliate can see that a referral led to a signup or purchase and the commission earned, but not your payment details or private account information.

10. Marketing Communications

We send service emails (such as receipts, password resets, booking confirmations and security alerts) because they are needed to provide the Platform. We only send marketing emails, such as product news and promotions, if you have opted in. You can unsubscribe at any time using the link in any marketing email or from your account settings; this does not affect service emails.

11. Events

If you register for an event hosted directly on Kiroex, we process your registration details, ticket information and whether you attended, so we can run the event and share attendance with the event's host (see Section 5).

Some events are ticketed through Eventbrite. If you register through Eventbrite, Eventbrite collects your registration data as an independent controller under its own privacy policy. We receive only the information needed to show the event on Kiroex and, where you are a Kiroex user, to connect your ticket to your account.

12. AI Features

Some features use artificial intelligence, including the trade journal's analysis, the in-app assistant (Kira), automated support replies, writing help, identity-document and photo checks, and research that keeps broker and prop firm listings up to date. To provide these, the relevant content (for example, the trades you ask to be analyzed, your question to Kira, or the text of your support ticket) is sent to our AI providers, principally Anthropic. Research of public websites uses xAI (Grok). Voice features in Kira use ElevenLabs to turn text into speech.

Connecting your own AI assistant. If you are a trader and connect your own AI assistant (such as ChatGPT, Claude or Grok) to Kiroex, that assistant can read summary information about your community (for example totals and trends, never your members' names, emails, messages or payment details) and save drafts for you. The AI company you choose processes that information under its own terms and privacy policy. You can disconnect it at any time from Studio.

Our AI providers process this content on our behalf to return a response. Anthropic does not use content sent to it through its business API to train its models, and we do not use your content to train any AI model ourselves. AI output is automated and may be inaccurate; it is not financial advice.

13. Direct Messages

Direct messages and group chats are end-to-end encrypted in your browser before they are sent. This means Kiroex stores only encrypted text and cannot read, moderate or recover the content of your messages. We do process limited information about messages (such as who sent a message to whom, and when) so the feature works, and we may act on a message if a participant reports it to us and shows us its content.

14. Third-Party Integrations

Some features only work if you choose to connect another service. When you do, we exchange the minimum data needed with that service:

• Discord and Telegram — traders can connect a Discord server or Telegram channel so trade setups and announcements are posted there. We store the connection details and the channel identifiers, and send the content the trader chooses to publish.
• LinkedIn — traders can connect LinkedIn to post updates. We store the connection and send only the posts the trader chooses to publish.
• Trading accounts (via MetaApi or Finatic) — see Section 7.
• Your own AI assistant — see Section 12.
• Google and Zoom — see Section 3.10.
• Dropbox — educators can import course videos from their Dropbox. We access only the files they select.
• Eventbrite — see Section 11.

Each of these services is an independent controller for the data it holds about you under its own privacy policy. You can disconnect any of them from your settings at any time.

15. Who We Share Your Data With

We do not sell your personal data. We share it only where needed to run the Platform, with:

• Service providers acting for us (processors): hosting and database (Vercel, Supabase), email delivery (Resend), video hosting (Bunny.net), AI services (Anthropic, xAI, ElevenLabs), trading-account connections (MetaApi, Finatic) and analytics, where you have agreed to analytics cookies.
• Payment providers: Stripe, BoomFi, NOWPayments and, in some African countries, Startbutton (see Section 6).
• Educators and community hosts, as described in Section 5.
• Integrations you choose to connect, as described in Section 14.
• Professional advisers such as lawyers and accountants, under a duty of confidentiality.
• Authorities, where the law requires it, or to protect the rights, safety and property of our users or Kiroex.
• A buyer or successor, if Kiroex or its assets are sold or merged, in which case your data would remain protected by this policy.

16. International Transfers

Some of our providers store or process data outside the UK, including in the United States and the European Economic Area. Where data leaves the UK, we make sure it is protected by an approved safeguard: a UK adequacy decision, the UK International Data Transfer Agreement or Addendum to the EU Standard Contractual Clauses, or an equivalent mechanism. You can ask us for more detail using the contact details in Section 1.

17. Identity Verification

To protect our users and prevent fraud, we ask some users to verify their identity — for example, educators going live, and anyone receiving payouts. This may involve an identity document, a selfie, your legal name, date of birth and address. Payout verification may also include the crypto wallet address you want to be paid to. Some checks are carried out by Stripe Identity; others are carried out by us, using automated checks (including AI) followed where needed by review from our team. Identity documents are kept in restricted storage and are only accessible to you and to authorized Kiroex staff.

18. How Long We Keep Your Data

We keep personal data only as long as we need it:

• Account and profile data: while your account is open. If you delete your account, we delete or anonymize this data, except where we must keep it for the reasons below.
• Payment and transaction records: six years after the end of the financial year they relate to, as required by UK tax law.
• Identity verification records: while you use the features that require verification, and for up to five years afterwards, to prevent fraud and meet our legal obligations.
• Trade journal data: until you delete it or close your account.
• Support tickets and correspondence: up to three years after the matter is closed.
• Marketing preferences: until you withdraw consent, plus a record of your opt-out so we respect it.
• Connected-account tokens (Google, Zoom, Discord and similar): until you disconnect the service or close your account.

Where data is kept for longer to resolve a dispute or comply with the law, we keep it only for as long as that requires.

19. How We Protect Your Data

We use technical and organizational measures to protect your data, including encryption in transit, encryption of sensitive tokens at rest, access controls so staff can only see what their role requires, two-factor sign-in for our administrative tools, and monitoring for unauthorized access. No system is completely secure, so please use a strong, unique password and keep your login details private. If a data breach is likely to put you at risk, we will tell you and the ICO as the law requires.

20. Your Rights

Under UK data protection law you have the right to:

• access the personal data we hold about you and receive a copy;
• rectification of inaccurate or incomplete data;
• erasure of your data in certain circumstances;
• restrict how we use your data in certain circumstances;
• object to processing based on our legitimate interests, and to direct marketing at any time;
• data portability — to receive data you gave us in a commonly used format, or have it sent to another provider;
• withdraw consent at any time, where we rely on consent, without affecting processing that took place before;
• not be subject to a decision based solely on automated processing that has legal or similarly significant effects on you, and to ask for a human to review such a decision.

To use any of these rights, email support@kiroex.com. We will respond within one month, and may need to verify your identity first. Exercising your rights is free of charge in most cases.

If you live in the United States, depending on your state you may also have the right to know what personal data we hold about you, to have it deleted or corrected, and to opt out of its sale or use for targeted advertising. We do not sell your personal data or share it for targeted advertising. To use these rights, email support@kiroex.com; we will not treat you differently for doing so.

If you are unhappy with how we have handled your data, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

21. Children

Kiroex is for adults. You must be at least 18 to create an account, and we do not knowingly collect data from anyone under 18. If we learn that a child has given us personal data, we will delete it and close the account.

22. Cookies

We use cookies and similar technologies to keep you signed in, remember your preferences (such as language, currency and country) and, with your consent, to measure how the Platform is used and to track referrals. You can change your choices at any time using the cookie settings link in the footer. Our separate Cookie Policy explains the cookies we use in full.

23. Changes to This Policy

We may update this policy from time to time. When we make significant changes, we will tell you by email or through the Platform before they take effect. The date at the top of this page shows when it was last updated.

Cookie Policy

Version v2 · Effective 2026-10-25

Cookie Policy

1. Introduction

This Cookie Policy explains how Kiroex ("Kiroex", "we", "us", "our") uses cookies and similar technologies when you visit or use kiroex.com (the "Platform"). It should be read alongside our Privacy Policy, which explains more generally how we collect and use personal data.

By using the Platform, you may be asked to give or manage your consent to certain categories of cookies through our cookie preferences control. This policy explains what cookies are, the categories we use, why we use them, how long they last, and how you can manage your choices.

2. What Are Cookies?

Cookies are small text files that are placed on your device (computer, tablet, or mobile) when you visit a website. They are widely used to make websites work, work more efficiently, and to provide information to the website owner.

Similar technologies include pixels, tags, local storage, and software development kit (SDK) identifiers used within web and app environments. For simplicity, we refer to all of these collectively as "cookies" in this policy.

Cookies can be:

• Session cookies – temporary cookies that are deleted when you close your browser.
• Persistent cookies – cookies that remain on your device for a set period, or until you delete them.
• First-party cookies – set directly by Kiroex.
• Third-party cookies – set by a domain other than kiroex.com, such as an analytics or advertising provider we work with.

3. Categories of Cookies We Use

We use four categories of cookies on the Platform, consistent with standard consent frameworks.

3.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function and cannot be switched off. They are usually only set in response to actions you take, such as logging in, setting privacy preferences, or completing a checkout.

Example purposes:

• Keeping you logged in to your Kiroex account securely across pages.
• Enabling secure checkout and payments processed by our payment providers (Stripe, BoomFi, NOWPayments and Startbutton).
• Remembering your cookie consent choices.
• Load-balancing and maintaining the security and stability of the Platform.
• Detecting and preventing fraud or abuse (for example, during sign-up or payment).

Because these cookies are necessary to deliver the service you have requested, they do not require your consent, though we still tell you about them here.

3.2 Analytics Cookies

These cookies help us understand how visitors and members use the Platform, so we can improve it. They collect information anonymously or in aggregate wherever possible.

Example purposes:

• Measuring which pages, features, courses, or communities are most used.
• Understanding how users navigate between the trade journal, forums, and live sessions.
• Identifying errors or performance issues.
• Testing and measuring the impact of new features before wider rollout.

3.3 Functional Cookies

These cookies allow the Platform to remember choices you make and provide enhanced, more personalized features.

Example purposes:

• Remembering display preferences, such as theme, language, currency, country or timezone settings.
• Remembering which communities, forums, or courses you have recently viewed.
• Supporting embedded live session players and remembering playback settings.
• Enabling optional integrations you choose to set up, such as connecting Discord, Telegram or LinkedIn (for traders), a calendar or video account, or your trading account via MetaApi or Finatic.

3.4 Marketing Cookies

These cookies are used to make advertising more relevant to you and to measure the effectiveness of our marketing, including our affiliate/referral program and broker or prop-firm referral links.

Example purposes:

• Tracking referral and affiliate links so that referral partners or affiliates are correctly credited.
• Measuring the performance of our own marketing campaigns.
• Showing you more relevant adverts for Kiroex on third-party platforms, where applicable.
• Limiting how often you see the same advert.

3.5 Cookies Kiroex Sets

These are the main cookies and browser storage Kiroex sets itself:

• sb-…-auth-token — Keeps you signed in. Strictly necessary; lasts: until you sign out, refreshed while you use Kiroex.
• kx-otp-challenge, kx-teams-… — Remembers that you completed a sign-in code check (staff and team accounts). Strictly necessary; lasts: up to 30 days.
• kx-connect-access, kx-kiros-oauth, kx-linkedin-oauth — Complete a sign-in or connection you started (Kiroex Connect, calendar and LinkedIn connections). Strictly necessary; lasts: minutes to days.
• kx_cookie_consent (browser storage) — Remembers your cookie choices. Strictly necessary; lasts: until you change them.
• kx-country — Remembers your country so we show the right prices and payment options. Functional; lasts: 30 days.
• kx-currency — Remembers the currency you chose for prices. Functional; lasts: 1 year.
• kx-theme, language and layout settings (browser storage) — Remember light or dark mode, language and similar display choices. Functional; lasts: until you clear them.
• kx_returning — Tells us you have visited before, so returning visitors skip the welcome screens. Functional; lasts: 1 year.
• kx-referral — Records the affiliate or invite link that brought you to Kiroex, so the right person is credited if you sign up. Marketing; lasts: 30 days.

4. Third-Party Cookies

Some cookies on the Platform are set by third parties who provide services to us or whose content is embedded within the Platform. These third parties may include:

• Payment and marketplace infrastructure – Stripe and Stripe Connect, BoomFi, NOWPayments and Startbutton, used to process subscriptions, marketplace payments, and payouts to traders.
• Analytics providers – used to measure usage and performance of the Platform.
• Marketing and affiliate tracking providers – used to attribute referrals and measure marketing performance.
• Embedded content providers – such as video or streaming services used for live trading sessions, or services underlying optional Discord or Telegram broadcasts.
• MetaApi and Finatic – where you choose to connect your trading account, these services may set cookies or use similar technologies as part of that connection.

These third parties may set cookies when you interact with their content on our Platform. We do not control third-party cookies directly, and we encourage you to review the relevant third party's own cookie or privacy policy for further information.

We do not control cookies set by AI service providers we use to power certain features (such as the trade journal analysis, in-app assistant, or support responses), as these providers process content rather than set cookies through your browser; details of how such data is handled are set out in our Privacy Policy.

5. How Long Do Cookies Last?

Cookie duration depends on the type and purpose of the cookie:

• Session cookies are deleted automatically when you close your browser.
• Persistent cookies remain on your device for a fixed period, which varies by cookie but is typically between 30 days and 24 months, unless deleted sooner by you.
• Strictly necessary cookies generally last only for your session or, where needed for login persistence, for a limited period (typically up to 30 days).
• Analytics, functional, and marketing cookies typically persist for periods ranging from 30 days up to 24 months, depending on the specific provider and purpose.

Specific expiry periods for individual cookies may be provided in more detail within our cookie preferences control or on request.

6. Managing Your Cookie Preferences

When you first visit the Platform, you will be shown a cookie banner or preference center allowing you to accept or reject non-essential cookies (analytics, functional, and marketing).

You can change your preferences at any time by:

• Using the "Cookie Preferences" or "Manage Cookies" link, typically available in the website footer.
• Clearing cookies through your browser settings, which will remove existing cookies and reset your preferences on your next visit.

Please note:

• Strictly necessary cookies cannot be disabled through the preference center, as they are required for the Platform to function.
• If you reject analytics, functional, or marketing cookies, some features may not work as intended (for example, remembered preferences may be lost, or embedded content may not display correctly).
• Withdrawing consent does not affect the lawfulness of any use of cookies before you withdrew consent.

Most web browsers also allow you to control cookies through their settings, including blocking or deleting cookies. Refer to your browser's help section for instructions, as the process varies by browser and device.

7. Changes to This Cookie Policy

We may update this Cookie Policy from time to time to reflect changes in the cookies we use, legal requirements, or the way the Platform operates. Where changes are significant, we will take reasonable steps to notify you, such as displaying a notice on the Platform or requesting renewed consent where required.

The "last updated" date at the top of this document (or, where not shown, the version available on kiroex.com) indicates when this policy was last revised.

8. Contact Us

If you have any questions about this Cookie Policy or how we use cookies, please contact us at support@kiroex.com or write to Kiroex Ltd, 124 City Road, London EC1V 2NX.