1. Data we collect
We collect identity and contact information (name, address, email, phone), financial information (account balances, transaction history, wallet addresses), verification data (KYC documents, biometric checks where required), device and log data (IP address, browser type, session identifiers), and correspondence (support tickets, compliance chats).
2. How we collect data
Directly when you register, complete KYC, or contact us; automatically through cookies, analytics, and server logs; and from third-party providers such as identity verification services, sanctions screening databases, and credit-reference agencies where permitted by law.
3. Purpose and lawful basis
We process data to provide banking and custody services, meet legal and regulatory obligations (AML, CTF, tax reporting), prevent fraud and financial crime, manage risk, communicate with you, and improve our platform. Processing is based on contractual necessity, legal obligation, legitimate interests, and consent where required.
4. Data sharing
We share data with regulators, law enforcement, and courts when legally required; with trusted service providers (hosting, KYC, analytics) under strict contracts; and with financial partners (card networks, correspondent banks) to execute transactions. We do not sell personal data to third parties.
5. International transfers
Your data may be transferred to and processed in jurisdictions outside your country of residence. Where this occurs, we ensure adequate protection through standard contractual clauses, adequacy decisions, or equivalent safeguards approved by applicable regulators.
6. Data retention
We retain personal data for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or regulatory requirements. Typical retention periods range from 5 to 10 years after account closure, depending on the jurisdiction and service type.
7. Your rights
You have the right to access, correct, or delete your personal data; object to or restrict processing; request data portability; and withdraw consent where processing is consent-based. Requests may be submitted through your account or by contacting compliance. We may retain data where required by law.
8. Cookies and tracking
We use cookies and similar technologies to authenticate sessions, remember preferences, analyse usage, and detect fraud. You can manage cookie preferences through your browser settings. Disabling essential cookies may affect platform functionality.
9. Security
We implement technical and organisational measures including encryption at rest and in transit, access controls, network segmentation, and regular security assessments. Despite our efforts, no system is completely secure, and we cannot guarantee absolute protection.
10. Changes to this policy
We may update this Privacy Policy to reflect changes in law, our practices, or our services. Material changes will be notified in-app or by email at least 30 days before they take effect, except where a shorter period is required by law.
11. Contact
For privacy-related questions, data subject requests, or complaints, contact our Data Protection Officer at privacy@thevisionbank.com or through a support ticket in your account.