This Privacy Policy is effective from 5th January 2024. Version Number: 2.2 This Privacy Policy (“Policy”) explains how we collect, use, and process your personal data when you use our website https://CreditCapitalPay.com (“Website”), our web application (“Web App”), our mobile app (“App”) and email messages that we send to you (jointly called “Services”). If anything here applies to only one of our Services or to customers in a particular country, we’ll explicitly point this out to you. For Australia, Brazil, Canada, Hong Kong, India, Indonesia, Israel, Japan, Malaysia, Mexico, Philippines, Singapore, South Korea, Türkiye, UAE, and USA By continuing your interactions with us, such as by submitting information to us, or using our Services, you confirm that you understand and consent to the collection, use, disclosure, and processing of your personal data (or the personal data of any individual you provide) as described in this Privacy Policy. For USA Please note personal information relating to U.S. users that we collect in connection with the solicitation and/or provision of our payment services is subject to our Consumer Privacy Notice. In the event of conflict or inconsistency between this Privacy Policy and our Consumer Privacy Notice, the Consumer Privacy Notice will apply to that information. Other information we collect from our U.S. users will be subject to the provisions of this Privacy Policy.
The Data Controllers for the collection, processing and use of personal information are listed in the table below. If you have any questions about how we protect or use your data, please email us at privacy@CreditCapitalPay.com.
Personal data, or personal information, means any information about an identified or identifiable individual. It does not include anonymous data, which cannot be linked back to the individual. We will collect and process personal data about you as follows:
You may give us information about yourself when you sign up to use our Services, e.g. when you provide us with personal details including your name and email address. This also includes information you provide through your continued use of our Services, your participation in discussion boards or other social media functions on our Website or App, through entering a competition, promotion or survey, and by reporting problems with our Services. Additional information you give us for security, identification and verification purposes may include your address, phone number, financial information (including credit card, debit card, or bank account information), payment reason, geographical location, social security/insurance number, national identification number, personal description, photograph, tax reference number, proof of address, proof of residency, passport and/or National ID. If you fail to provide any of this information, it might affect our ability to provide our Services to you. For Brazil: This also includes the registry number of Cadastro de Pessoas Físicas do Ministério da Economia – CPF/ME. The content of your communications with us, which we collect via telephone call recordings, online chat, emails, direct messaging and other means. In some cases, including when you send or receive high value or high volume transactions, or where we need to comply with anti-money laundering regulations, we may also need more identification information from you, including a copy of your bank account statements. For New Zealand: Where we request further information from you to comply with our anti-money laundering obligations, we are doing so under the Anti-Money Laundering and Countering Financing of Terrorism Act 2009. Providing such information to us is mandatory. You have the right to request access to and correction of personal information that we hold about you. If you would like to make a request, please submit it in writing to privacy@CreditCapitalPay.com. In providing the personal data of any individuals other than yourself, including connected persons, you confirm that you have obtained consent from such individuals to disclose their personal data to us or are otherCreditCapitalPay entitled to provide this information to us. You also confirm that you have brought this Policy to their attention if legally necessary, and have received their consent to our collection, use and disclosure of such personal data for the purposes set out in this Policy. The term ‘connected person’ means an individual connected to CreditCapitalPay through the use of our Services and could be an account holder, payment beneficiary, recipient of a designated payment, guarantor, director, shareholder, partners or members of a partnership, trustee, authorised signatory of a designated account, a friend you have recommended, individuals in your contact list or any other person who has a relevant relationship with CreditCapitalPay. If you enable your discoverability feature for some of our Services we will generate a link and a nickname on your behalf to be shared. Such a link may include your name, business name, account details, nickname and, at your option, your avatar or photograph. Please ensure that your personal data is current, complete and accurate by logging onto your account and updating it whenever necessary.
3.1 We take the safeguarding of your information very seriously. The transmission of information via the internet is not completely secure. Although we do our best to protect your personal data, we cannot guarantee the security of your data during transmission, and any transmission is at your own risk. Once we have received your information, we use strict procedures and security features to ensure it stays secure, including:
Communications over the Internet between you and CreditCapitalPay systems are encrypted using strong asymmetric encryption. This makes it unreadable to anyone who might be listening in; We update and patch our servers in a timely manner; We run a Responsible Disclosure and bug bounty program to identify any security issues in CreditCapitalPay services; Our technical security team proactively monitors for abnormal and malicious activity in our servers and services; When information you’ve given us is not in active use, it is encrypted at rest.
Lawful basis: We will only use your personal data when the law allows us to. Depending on the country in which you are in, we rely on the following legal bases to process your personal data: Where you have given us your consent to process your data - please note that when we are processing your personal data on the basis of consent, the applicable local regulations apply; Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests; Where we have a legal obligation to process your personal data to comply with laws, regulations or court orders; Where it is necessary to fulfil our obligations under a contract with you; Where it is necessary to protect the vital interests of yourself or other individuals.