ABOUT THIS POLICY
This Privacy Policy (“Policy”) applies to Krypital Exchange’s website at Krypitalex.com, the Krypital Exchange mobile app, and any other Krypital Exchange-owned websites, applications, or programs that link to this Policy.
This Policy, together with our Cookie Policy and the applicable “User Agreement” applies to your use of our Services.
Where we use other capitalized words and phrases in this Policy (such as Agreement, Account, Profile, Services and Transaction), these have the same meaning as given to them in the applicable User Agreement, unless we have defined them differently in this Policy.
WHO ARE WE?
Krypital Exchange Inc. is incorporated in Canada under Incorporation Number BC1529793 and is Registered as a Money Services Business by FINTRAC under Registration No. 180805. Registered address: 535 YATES ST SUITES 200 VICTORIA BC V8W2Z6 CANADA.
WHAT PERSONAL DATA DO WE COLLECT?
The personal data that we collect from you depends on how you interact with us and our products and services. When we say "personal data" or "personal information" we mean any information related to an identified or identifiable natural person. The following are the categories and specific types of personal data or information we may collect:
Basic Identifying Information: Including your full name (including aliases), postal address, e-mail address, phone number, date of birth, gender, occupation and employer, username or social media handle, or other similar identifiers (including a customer ID auto generated by us to identify you in our systems).
Customer Support Information: Information you give to us when you contact customer services or our offices including call recordings (such as when we record customer service calls for quality assurance).
Government Issued Identification or Records: Including your driver's license, state or country government issued identification card (such as a passport, driver's license, military or immigration identity cards or visas, national identification cards), as well as a picture or recording of yourself with your identification documentation, records of proof of address (e.g., utility bill, loan or mortgage statement), tax reference number, social security number, or evidence of how you will fund your Transaction (e.g., bank statement or pay slip).
Marketing & Communications Information: Including your preferences to receive marketing from us and our third parties, communication preferences, and information we lawfully receive from market research, advertising networks, or analytics providers.
Payment Information: Including your financial or payment instrument details (either debit/credit card) or bank account details.
Promotions & Competitions Information: Including your name and email address and certain other personal information that you may be asked to provide to participate in promotions or competitions.
Recipient or Authorized User Information: Including your recipient or authorized user’s full name, postal address, phone number, depending on the disbursement method selected certain financial institution or financial account details such as bank account or mobile wallet account. If there is a dispute about whether money has been received by your recipient or authorized user, we may ask you for additional information so we can verify their identity with the financial institution.
Sensitive Personal Data: Including biometric data, mainly face scan information from photos and videos you provide for identity verification purposes and monitoring login activity and your interactions with our site to protect your account and identify suspicious or fraudulent activity. While we do not process your biometric data, our identity verification service provider, processes it on our behalf.
Survey & Feedback Information: Including information such as your name, email address or other contact information, responses to surveys, reviews, feedback, testimonials and certain other personal information that you may be asked to provide.
Technical Information: Including the hardware and software you use to access our Services, network information, internet service provider, operating system, the type of browser you use, unique device identifier (e.g. your device's IMEI number, MAC address, or mobile number), IP address, other similar unique identifiers, your current location (using GPS technology, which some of our location enabled Services require your personal data for this to work).
Transaction Information: Including your transaction history (including a unique Transaction reference number), transaction receipts, purpose of transfers, relationship with the recipient or authorized user, your average transaction amount, how often you use our Services, if you send to multiple recipients or have multiple authorized users, and other information we collect in order to comply with anti-money laundering and know your customer obligations.
Usage Information: Including information on your interactions with our Services or Sites or browsing or search activity.
HOW DO WE COLLECT YOUR PERSONAL DATA?
We collect personal data about you from various sources. For example, we collect and obtain information:
Directly from you
We collect personal data you provide, such as when you use our Service, create an Account or Profile, contact us (including via chat), respond to a survey, interact with us at events, participate in a sweepstakes, contest, or other similar campaign or promotion, respond to a survey, post a review, or sign up to receive emails, text messages, and/or postal mailings.
Using cookies and other automatic data collection technologies
When you visit our websites, use our app, open or click on emails we send you, or interact with our advertisements, we or third parties we work with automatically collect certain information using technologies such as cookies, web beacons, clear GIF, pixels, internet tags, web server logs, and other data collection tools. For more information, please see our Cookie Policy.
From Other Sources
We may obtain information about you from other sources, such as data analytics providers, marketing or advertising service providers, social media platforms or networks, fraud prevention or identity verification service providers, electronic databases, credit reporting agencies, vendors that provide services on our behalf, or publicly available sources.
HOW DO WE USE OR PROCESS YOUR PERSONAL DATA?
We will only use your personal data when the law allows us to. Depending on the country in which you reside, we rely on the following legal bases to process your personal data:
COMPLY WITH LEGAL OBLIGATIONS
We use your personal data to comply with our legal or regulatory obligations, to establish or exercise our rights, and to defend against a legal claim.
Security and Fraud Prevention
We use your personal data to detect, investigate, prevent, or take action regarding possible malicious, deceptive, fraudulent, or illegal activity, including fraudulent transactions, attempts to manipulate or violate our policies, procedures, and terms and conditions, security incidents, and harm to the rights, property, or safety of Krypital Exchange and our users, customers, employees, or others.
Comply with Applicable Laws
We use your personal data to comply with applicable laws and regulations, such as those relating to "know-your-customer," anti-money laundering requirements, sanctions legislation, and the various associated regulatory rules and guidance in relation to risk
investigation, risk scoring, fraud, counter terrorist financing, consumer protection and complaint handling.
TO PERFORM A CONTRACT
To Provide Our Services
We use your personal data when you access or use our Services, including to process your Transaction(s), maintain and manage your account, deliver/fulfill promotional offers or rewards, and process payments.
Communicating With You
We use your personal data to communicate with you, such as to respond to and/or follow-up on your requests, inquiries, issues or feedback, and to provide customer service.
CONSENT OR LEGITIMATE INTEREST
Marketing and Promotional Purposes
We use your personal data for marketing and promotional purposes, such as to send marketing, advertising, and promotional communications by email, text message or postal mail; to show you advertisements for products and/or services tailored to your interests on social media and other websites; and to administer our new customer promotions, sweepstakes, contests, and other similar promotions.
Analytics and Personalization
We use your personal data to conduct research and analytics, including to improve our services and product offerings; to understand how you interact with our websites, mobile apps, advertisements, and communications with you; to improve our websites, app, and marketing campaigns (business and marketing analytics); to personalize your experience, to save you time when you visit our websites and app, and to customize the marketing and advertising that we show you; to understand how you use our app and website.
Other Business or Commercial Purposes
At your direction or with your consent, we may process certain personal data to fulfill any other business or commercial purposes.
For additional information on our legal bases for processing your personal data, please see the section below entitled, "What is our Legal Basis for Processing your Personal Data?".
WHO DO WE SHARE YOUR PERSONAL DATA WITH?
In addition to the specific situations discussed elsewhere in this privacy policy, we disclose personal data in the following circumstances:
Corporate Affiliates
We may share personal data with our corporate affiliates, including our parent company, affiliates and subsidiaries. Such corporate affiliates process personal data on our behalf to provide services or in other circumstances with your consent or as permitted or required by law.
Service Providers
We share certain personal data with third parties that perform services to support our core business functions and internal operations. This includes banks, disbursement providers, or other financial institutions completing your transfer or other financial service request (including payment processors), identity verification or KYC service providers, third parties that provide software and tools to send postal mail, e-mails and text messages, or analyze customer data, provide marketing assistance, administer our reviews, investigate fraudulent activity, conduct customer surveys, and outsourced customer service providers.
Third Party Partners
We may share your personal data with third parties that we have partnered with to jointly create and offer a product, service, or joint promotion. We may also share your personal data with our banking or distribution partners in the event we suspect you are violating our terms or engaging in fraudulent behavior as it relates to our business. Their use of your information is not governed by this privacy policy, but by their own respective privacy policies.
Social Media Platforms and Networks
Some of our websites have features such as, plugins, widgets, or other tools made available by third parties that may result in information being collected or shared between us and the third party. Their use of your information is not governed by this privacy policy, but by their own respective privacy policies.
Business Transactions
If we become involved with a merger, corporate transaction or another situation involving the transfer of some or all of our business assets, we may share your information with business entities or people involved in the negotiation or transfer.
Legal Process
We may disclose personal data in response to subpoenas, warrants, court orders, government inquiries or investigations, or to comply with relevant laws and regulations. We may also disclose information to establish, exercise, or protect our rights or the rights of others; to defend against a legal claim; to protect the safety and security of our visitors; to detect and protect against fraud; and to take action regarding possible illegal activities or violations of our policies.
Other Instances
We may ask if you would like us to share your information with other third parties who are not described elsewhere in this Policy.
WHY DO WE PROCESS SENSITIVE PERSONAL DATA?
We may ask that you provide biometric data to one of our identity verification providers. Where data protection laws only permit the processing of biometric data with your consent, we will seek your consent prior to the processing.
For example, in order to verify your identity, Krypital Exchange uses the services of service provider. Service provider will check if your identity documents are valid, and also confirm that your selfie photo and/or video matches the photo on the documents and may process your biometric information per their data protection policy. The results of the check will then be shared with Krypital Exchange. Your photo and ID documents will be shared with service provider for this purpose as well as to allow service to maintain, protect and improve its services.
DO WE MAKE AUTOMATED DECISIONS ABOUT YOU?
We use automated processes to check that your access to our services and your use of our services meet our required standard, including verifying your identity, and to help prevent fraud or other illegal activities. These processes may make an automated decision to reject your proposed transaction, to block a suspicious attempt to log into your account, or to close your account. If you feel that an automated process may have impacted you, please contact our Privacy team at privacy@Krypitalex.com.
WHAT ARE MY PRIVACY RIGHTS?
Access Your Data & Data Portability
You may request that we provide you a copy of your personal data processed by us. This information will be provided without undue delay subject to certain exceptions or limitations, including if such provision adversely affects the rights and freedoms of others.
Correct Your Data / Data Rectification
You have the right to request that we update and correct inaccuracies in your personal data. You can update certain information related to your account by logging into your account on our site or app, as applicable or otherwise contacting us as described in the Exercising Your Privacy Rights section below.
Data Deletion/Erasure
You may request to erase your personal data, subject to applicable law. If you close your account, we will mark your account in our database as "Closed," but will keep certain account information for a period of time. This is necessary to deter fraud, by ensuring that persons who try to commit fraud will not be able to avoid detection simply by closing their account and opening a new account, and to comply with our legal obligations. However, if you close your account, your personal data will not be used by us for any further purposes, nor shared with third parties, except as necessary to prevent fraud and assist law enforcement, as required by law, or in accordance with this Policy.
Object to the Processing of Data
You have the right to object to us processing or transferring your personal data under certain circumstances. You may object to any processing based on the legitimate interests ground when there is something about your particular situation where you feel processing on this ground impacts your fundamental rights and freedoms.
Unsubscribe from Direct Marketing
You have the right to ask us not to process your personal information for marketing purposes. You can exercise this right at any time by carrying out 'unsubscribe' actions which are made available to you (such as clicking on the 'unsubscribe' link in each promotional email we send you). We will honor your choice and refrain from sending you such communications. Please note that if you ask us not to contact you by email at a certain email address, we will retain a copy of that email address on a "suppression list" in order to comply with your no-contact request. You are free to change your marketing choices at any time.
You may also control how we use some of your personal data as part of our Services (such as how we may communicate with you) by confirming your preferences in your Account. Please note that not all communications can be switched off -- for example, we may be required to send you email notices about our Services to comply with our legal obligations under national laws and regulatory guidance.
Automated Individual Decision-Making, Including Profiling
In some jurisdictions, you have the right not to be subject to a decision based solely on automated processing of your personal data, including profiling, which produces legal or similarly significant effects on you, unless there are applicable exceptions under relevant data protection laws. We may reject your request, as permitted by applicable law, including when providing the information would result in a disclosure of a trade secret or would interfere with the prevention or detection of fraud or other crime. However, generally in these circumstances we will verify that the algorithm and source data are functioning as anticipated without error or bias or if required by law to adjust the processing.
Withdraw Your Consent
You have the right to withdraw your consent for us to process data, where our lawful basis for processing is based on that consent. Note that withdrawal of consent does not affect the lawfulness of processing which may have taken place prior to withdrawal of consent. If you withdraw your consent, we may not be able to provide certain products or services to you.
Exercising Your Privacy Rights
To exercise any of the above privacy rights, please submit a request
through one of the following methods:
We typically do not charge a fee for exercising your privacy rights, but where permitted by law, we may charge a reasonable fee for requests that are excessive or manifestly unfounded.
Identity Verification
For us to process some requests, we will need to verify your identity to confirm that the request came from you. We may contact you by phone or e-mail to verify your request. If we are unable to contact you or you fail to respond to our requests to identify you, we may be unable to fulfill your request.
HOW DO WE PROTECT YOUR DATA?
We employ industry accepted technical and organizational measures to protect the information you submit to us. We protect your sensitive personal data such as bank account number, credit card number, date of birth, and government identification number using encryption in transit and encryption at rest. We leverage access controls to limit access to personal data to those with a need to know. We also require the use of security credentials (which may, for example, include a username and password) from each user who wants to access their information on our Site and/or our App.
Where we have given you (or you have chosen) security credentials (such as a password) that enable you to access certain parts of our Service, you are responsible for keeping these details confidential and secure. Moreover, if you allow access to our Services via using your fingerprint on your Device (for example, via Apple Touch ID), then you should not allow any other person to register their fingerprint on that Device as it may allow them access to our Services and you could be held responsible for their actions. However, no method of transmission over the Internet, or method of electronic storage, is 100% secure. Therefore, we cannot guarantee its absolute security and any transmission of personal information is at your own risk. If you have any questions about security, you can contact us at privacy@Krypitalexchange.com.
TRANSFERRING PERSONAL DATA INTERNATIONALLY
We share your personal data within the Krypital Exchange family of products, including Krypital Exchange Group entities and subsidiaries, and to external third parties (the categories of which are referred to in this Policy). This may involve transferring your personal data internationally including outside of the country of your residence. Whenever we transfer your personal data internationally we will ensure a similar degree of protection is afforded to it. In some instances, your personal information may be transferred to countries that have been deemed to provide an adequate level of protection for personal data by the applicable data protection authority or government agency (as specified in the Our Relationship With You section below). In other instances, we will ensure at least one of the lawful safeguards are implemented, which may include the use of intra-company agreements, contractual protections, or specific contracts approved (such as standard contractual clauses) by the applicable data protection authority or government agency (as specified in the Our Relationship With You section below), which give personal data the same protection it has in your country of residence.
HOW LONG DO WE RETAIN YOUR DATA?
We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting or reporting requirements. To determine the appropriate retention period for personal data, we consider the following based upon your country of residence (among other things):
As a regulated financial institution, we are required by law to store some of your personal and transactional data beyond the closure of your account with us. Please note that by using our Services you expressly agree to us retaining your personal data (including data related to your Transactions and our collection and verification of your identity) for at least 7 years following the end of your legal relationship with us.
CHANGES TO THIS POLICY
We may amend this Policy at any time, and whenever we do so we will notify you by posting a revised version on our Site and App. Please review this Policy each time you make a Transaction as it may have been updated since you initially registered for our Services, or since your last Transaction.
LINKS TO THIRD PARTY WEBSITES AND SERVICES
Parts of our Service use Google Maps services, including the Google Maps API(s). Use of these features is subject to the Google Maps Additional Terms of Use and the Google Privacy Policy. By using this Site and the Service you also agree to the Google Terms (as amended from time to time).
Our Site and App includes links to other websites whose privacy practices may differ from those of Krypital Exchange.
If you submit personal information to any of those websites, your information is governed by their privacy policies and we do not accept any responsibility or liability for these policies or for any personal information which may be collected and processed via those websites or services (such as contact and location data). We encourage you to carefully read the privacy policy of any website or software application you use or visit.
This Policy does not cover the practices of third parties that you may engage with when using our Services, such as your mobile network operator or other users of our Services. You should contact the applicable third party about their privacy policy before providing them with any personal information.
PRIVACY POLICY TRANSLATION
This Policy is drafted in the English language and translations may be provided in other languages. You agree that the English version of the Policy will control in the event of any inconsistency between the English and any translated versions in any dispute related to this Policy.
CONTACT AND COMPLAINTS
If you have any questions, comments, or requests regarding our privacy policy, you may reach out to privacy@Krypital Exchange.com or our Data Protection Officer at DPO@Krypitalex.com.
If you feel that we have not addressed your questions or concerns adequately, or you believe that your data protection or privacy rights have been infringed, you can complain to any supervisory authority or other public body with responsibility for enforcing privacy laws, as listed in the section entitled "Our Relationship with You" section.
OUR RELATIONSHIP WITH YOU
Company Name: Krypital Exchange Inc.
Address: 535 YATES ST SUITES 200 VICTORIA BC V8W2Z6 CANADA.
Data Protection Authority: www.priv.gc.ca/en/
Copyright © 2025 Krypitalex - All Rights Reserved.
Krypital Exchange Inc. is incorporated in Canada under Incorporation Number BC1529793 and is Registered as a Money Services Business by FINTRAC under Registration No. 180805. Registered address: 535 YATES ST SUITES 200 VICTORIA BC V8W2Z6 CANADA.
We use cookies to analyze website traffic and optimize your website experience. By accepting our use of cookies, your data will be aggregated with all other user data.