Privacy and Data Protection

What we collect

• Identity information: mobile number, national ID number, first and last name, father's name, birth certificate number, date of birth and gender.
• Contact and delivery information: email, province, city, address, postcode and phone number.
• Banking information: card number or IBAN (Sheba) in your own name for deposits and withdrawals, and the receipts you upload when topping up your wallet.
• Transaction history: orders, invoices, wallet transactions and the codes of the bars you have bought.
• Technical information: what is needed for secure sign-in and for the site to work (such as a session cookie), and anonymous visit statistics.

Why we need it

• Identity checks and legal requirements: gold and silver trading is subject to anti-money-laundering rules. Before your first purchase, your identity is matched against Iran's National Organization for Civil Registration records, and people under 18 cannot buy.
• Fulfilling orders: issuing the official invoice, preparing the order, and posting it or handing it over.
• Account security: sending one-time passwords for sign-in and payment confirmation, and preventing unauthorised access.
• Support: answering tickets, calls and contact form messages.
• Improving the site: statistical, aggregated analysis of visits to understand which pages are useful.

Who we share it with

We do not sell your information. It is shared only as far as necessary with:

• banks and payment gateways, to process and check transactions;
• identity verification services, to match your national ID number and mobile number;
• the postal service, only the recipient's name, address and phone number, to deliver the parcel;
• our SMS provider, for one-time codes and order notifications;
• legal authorities, only on official request and as the law requires.

How we protect it

• Connections to the site are encrypted over HTTPS.
• Sensitive identity information is stored encrypted, on top of access controls, and staff access to it is restricted and logged.
• Sign-in and payments are confirmed with short-lived one-time passwords, and the number of attempts is limited.
• Your card details (PIN, CVV2 and expiry date) are entered on the bank's gateway. Talavest never receives or stores them.

How long we keep it

Financial records and invoices are kept for as long as tax law and anti-money-laundering rules require. Contact details you sent only for a support request are no longer used once the request is dealt with.

Your rights

• You can view your information in your "Profile" and correct your contact details and address. Verified identity details can only be changed by asking support and having your documents reviewed.
• You can ask for your account to be closed. Records we are legally required to keep are not deleted, but they are not used for anything else.
• For any question about your information, email info@talavest.com.

Cookies

The site uses essential cookies to keep you signed in, hold your basket and remember your language. Visit statistics come from a web analytics tool that reports data in aggregate. You can limit cookies in your browser settings, but sign-in and purchasing will not work without the essential ones.