Privacy Policy

1.Information We Collect

We collect and process several types of information in order to provide our services, comply with legal requirements, and maintain a secure environment:

• Personal Information: Name, email address, phone number, and government-issued identification documents.
• Business Information: Company name, legal registration details, tax identification numbers, and ownership structure.
• Transaction Data: Payment instructions, invoices, trade history, settlement records, counterparties, and amounts.
• Compliance Data: Know Your Customer (KYC) and Know Your Business (KYB) information, sanctions screening results, enhanced due diligence outcomes, and risk assessments.
• Technical Data: Internet protocol (IP) addresses, browser type, operating system, device information, and usage logs.

We may also collect information from third-party service providers, public records, and verification databases to comply with regulatory requirements.

2.How We Use Your Information

The information we collect is used for the following purposes:

• To provide, operate, and improve our payment, trading, and account services.
• To process and record transactions, generate invoices, and provide settlement confirmations.
• To comply with legal, regulatory, and financial reporting obligations, including anti-money laundering (AML) and counter-terrorism financing (CTF) rules.
• To verify identities and conduct ongoing due diligence in accordance with our AML/KYC policy.
• To monitor activity for fraud prevention, risk management, and system security.
• To communicate with you regarding account activity, service updates, compliance requests, or customer support inquiries.
• To conduct audits, internal reporting, and regulatory examinations.

We process data only for legitimate purposes that are aligned with our services and obligations.

3.Legal Basis for Processing

Depending on your jurisdiction, we rely on several legal bases for processing your data:

• Contractual necessity, to deliver services you request.
• Compliance with applicable financial, AML, tax, and corporate regulations.
• Legitimate interests in ensuring secure, efficient operations and fraud prevention.
• Where applicable, your consent for certain processing activities.

4.Sharing of Information

We do not sell or rent your personal or business data. Information may be shared only under the following conditions:

• With regulated financial institutions, liquidity providers, custodians, and settlement partners strictly for transaction execution and account servicing.
• With legal, tax, or regulatory authorities when required under applicable law.
• With professional advisors such as auditors, lawyers, or compliance consultants for governance purposes.
• With service providers that perform functions on our behalf, including IT, analytics, and security vendors, subject to strict confidentiality and data processing agreements.

5.International Data Transfers

Because iTransfr serves clients globally, your information may be transferred and stored in jurisdictions outside of where you are located. When this occurs, we ensure that appropriate safeguards are applied, such as contractual protections, encryption, and adherence to international standards like the EU General Data Protection Regulation (GDPR).

6.Data Retention

We retain client and transaction data for a minimum of five years, in accordance with AML and financial regulations. In some cases, records may be retained longer if required for legal, compliance, or auditing purposes. Once data is no longer required, it is securely deleted or anonymized.

7.Security

We apply strict security measures to protect your information, including encryption of sensitive data, segregation of customer accounts, continuous monitoring, and restricted access controls. Our systems are tested regularly to prevent unauthorized access, misuse, or data loss.

8.Your Rights

Depending on where you are located, you may have certain rights under applicable privacy laws. These rights may include:

• The right to request access to the personal data we hold about you.
• The right to correct or update your information.
• The right to request deletion of your data, subject to regulatory retention requirements.
• The right to restrict or object to certain types of processing.
• The right to request a copy of your data in a portable format.
• The right to file a complaint with a supervisory authority.

To exercise these rights, please contact us at the addresses listed below.

9.Contact Information

If you have questions, requests, or concerns about this Privacy Policy or how your information is handled, you may contact us at: