The GDPR Rights List, and the Clause That Limits One of Them

What you can request

The published policy lists six rights: access, rectification, erasure within legal limits, objection, restriction of processing, and data portability — all exercised by contacting the published address.

The qualifier that matters

"Within legal limits" is doing real work in the erasure right. KYC-specific data is retained for five years following account closure as a regulatory compliance requirement.

Why the distinction is worth making

Users often read a retention period as a company preference they can negotiate. Separating regulatory obligation from discretionary retention makes it clearer what's actually within a provider's power to change.

Learn more: https://beexpay.app • Telegram Mini App: https://t.me/Beexpay_bot