PRIVACY POLICY - OlyPay - Your trusted bridge between fiat and crypto

Last updated on 27 November 2023 .

PRIVACY POLICY

Last updated on 1 May 2023 .

By using OlyPay’s services or registering an account with https://olypay.com/ (the “Website” or “Site”), or any associated websites, you agree that you have read and accepted all the provision contained in this Privacy Policy.

OlyPay values your privacy and is dedicated to safeguarding your personal information. This Privacy Policy aims to provide you with clear information on how we handle your personal data when you access our Website and OlePay services. Additionally, it outlines your privacy rights and the legal protections in place to ensure your privacy.

This Privacy Policy olicy aims to inform you about how OlyPay collects and handles your personal data when you utilize our Website, services, or subscribe to promotional materials related to our services and products. Please note that our Website and services are not intended for children, and we do not knowingly collect data pertaining to children.

It is essential that you review this Privacy Policy and this will ensure that you have a complete understanding of how and why your data is being used. This Privacy Policy complements other notices and privacy policies and is not intended to supersede them.

Block Capital UAB trading as OlyPay is the controller and responsible for your personal data (collectively referred to as “OlyPay”, “we”, “us” or “our” in this Privacy Policy).

If you have any questions about this Privacy Policy or our privacy practices, please contact our DPO in the following ways:

Full name of legal entity: Block Capital UAB

Email address: [email protected]

Postal address: Žalgirio g. 90-100, Vilnius, Lithuania

Third-party services

Our Website, staff, services may contain links to third-party websites, plug-ins, and applications. By clicking on these links or enabling such connections, you may enable third parties to collect or share data about you. We do not have control over these third-party websites or providers and cannot be held responsible for their privacy statements. Therefore, we encourage you to review the privacy policy of each website you visit when you leave our website or application.

In some cases, we may request your authorization to allow third-party websites, plug-ins, and applications on your device. This authorization is necessary for us to utilize specific features such as app tracking transparency or security measures. Please be aware that we do not retain any of this data since it is utilized by third parties that you have already authorized.

Data we collect

Personal data, also known as personal information, refers to any information that can identify an individual. It does not include data where the identity has been removed (anonymous data). We may collect, use, store, and transfer various types of personal data about you, which we have categorized as follows:

• Identity Data: This includes your full name, username or similar identifiers, date of birth, passport data, address.

• Contact Data: This encompasses your billing address, delivery address, email address, and telephone numbers.

• Financial Data: Where applicable, this includes bank account details and digital asset wallet information.

• Transaction Data: This consists of details about payments, digital asset transactions, and other information related to products and services you have purchased from us.

• Technical Data: This includes your internet protocol (IP) address, device ID, login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology used on the devices you utilize to access our website or application.

• Profile Data: For limited users, this may include your username and password, purchases or orders made by you, your interests, preferences, feedback, and survey responses.

• Usage Data: This comprises information about how you use our website, application, products, and services.

• Marketing and Communications Data: This covers your preferences for receiving marketing materials from us and our third parties, as well as your communication preferences.

Please note that we do not collect any Special Categories of Personal Data about you. This includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data. Furthermore, we do not collect any information regarding criminal convictions and offenses.

In situations where it is necessary to collect personal data by law, for services provision or as part of a contractual agreement, if you fail to provide the requested data, we may be unable to fulfill the contract we have or are attempting to establish with you. For instance, this could prevent us from delivering goods or providing services to you. In such cases, we may need to cancel a product or service you have with us. However, if this situation arises, we will inform you of the circumstances at the appropriate time.

Data collection and use

We employ various methods to collect your personal data, including:

Voluntary Provision: You may provide your personal data to us when signing up for a OlyPay account or when using our products and services.
Communication: When you communicate with us through email, chat, telephone, or any other means, we collect the communication itself and any personal data shared within it.
Platform Usage: As you utilize the OlyPay platform, we gather information on your transactions and the usage of your OlyPay account.

How We Handle Your Personal Data:

We adhere to the following principles in the handling of your data:

Purpose Limitation: Personal data will only be collected for purposes that are consistent with the intended purpose for which it is required. The specific purposes for collecting information will be evident from the context in which it is requested, as outlined below.
Purpose Compatibility: Personal data will only be processed for purposes that are compatible with the initial purpose for which it was collected, unless you have provided consent for an alternative purpose.
Data Retention: We do not retain your data indefinitely. Any personal information that is no longer required for its initial or subsequent purposes will be destroyed or deleted. In certain cases, we may retain your personal data in a securely blocked manner during periods where legal or contractual liabilities may arise.

We may use your personal information in the following ways:

Provide, Maintain, and Improve: We use your personal data to provide, maintain, and enhance the features and functionality of our Website and services. This is done based on our legitimate interest and/or the performance of the contractual relationship between you and us.
Internal Non-Marketing and Administrative Purposes: Your personal data may be utilized for internal purposes that are non-marketing or administrative in nature. This is done based on our legitimate interest.
Updates and New Services: We may provide you with information regarding updates and new services. This is done based on the performance of the contractual relationship between you and us, your consent (where applicable), or our legitimate interest.
Billing and Fee Collection: We process billing and collect fees as part of our contractual or pre-contractual relationship with you.
Legal and Regulatory Compliance: We fulfill our legal and regulatory obligations as required by applicable laws.

What We Don’t Do:

We do not engage in the following activities with your personal data:

Marketing without Consent: We will not use your personal data for marketing purposes without obtaining your consent, where applicable.
Unauthorized Sharing: We do not share your personal data with third parties without a legal basis or without your explicit consent.
Retention Beyond Purpose: We do not retain your personal data for longer than necessary for the purposes it was initially collected, unless required by law or for legitimate reasons.
Sale of Personal Data: We do not sell your personal data to third parties.

Data collection purposes

Purpose	Type of data	Lawful basis
To register you as a new customer	Identity;Contact	Performance of a contract
To provide services	Identity;Contact;Financial;Transaction ;Marketing and Communications	Performance of a contract; Legitimate interest
To manage our relationship with you	Identity;Contact;Profile;Marketing and Communications	Performance of a contract;Legitimate interestComply with a legal obligation
To administer and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data)	(Identity;Contact;Technical	Legitimate interest;Comply with a legal obligation
To deliver relevant website content and advertisements to you	Identity;Contact;Profile;Usage;Marketing and Communications; Technical	Legitimate interest
To use data analytics to improve and maintain our services	Technical;Usage	Legitimate interest

You can ask us or third parties to stop sending you marketing messages at any time by contacting us at any time.

Where you opt out of receiving these marketing messages, this will not apply to personal data provided to us as a result of service purchase, warranty registration, service experience or other transactions.

Personal data disclosure

In order to fulfill our legal and regulatory obligations while providing our services, we may need to disclose information about you and/or your account to the following trusted third parties:

Individuals employed by us or our affiliated companies.
Agents, affiliates, and professional advisors working with us.
Financial and other institutions with whom we have partnered to offer our products and services.
Law enforcement, regulatory bodies, and government agencies upon request.
Service providers who assist us in processing transactions and providing necessary services.
Third-party cryptocurrency (or virtual or digital asset) service providers when you send cryptocurrency over the blockchain. The third-party service provider may also use this information for transaction screening and processing purposes.
Companies and organizations that aid us in identity verification, background checks, due diligence, transaction processing, and fraud prevention services. By signing up for a OlePay account, you acknowledge that you have read, understood, and accepted this Privacy Policy, KYC Policy, AML Policy and Terms of Service.

Apart from the aforementioned cases, we will treat your personal data as private and confidential. We will not share it with other parties unless:

You have given us permission to do so.
We believe it is reasonably necessary to comply with any applicable law, regulation, legal process, or governmental request.
It is necessary to enforce our Terms of Use or other agreements, or to protect our rights, property, or safety, as well as the rights, property, or safety of our customers or others.
We may transfer rights and obligations according to our agreement with you.

Your Data Protection Rights

We prioritize the rights of our clients and adhere to all relevant data protection laws, including UK data protection laws, the General Data Protection Regulation (GDPR) (EU) 2016/679, and any other applicable data protection legislation.

Under these laws and regulations, you have the following rights:

Right to Rectification – If there are any changes to your personal information or if you believe that the information we have about you is inaccurate, incomplete, misleading, or not up-to-date, please notify us promptly at [email protected].
Right to Erasure (“right to be forgotten”) – You have the right to request the deletion of your data when it is no longer necessary or when it is no longer subject to a legal obligation. You can make this request by submitting a support ticket to our support team at [email protected]. However, please note that deleting your account may result in the inability to access our services, as certain data is required to provide them.
Right to Withdraw Consent – If the processing of your personal data is based on consent, you have the right to withdraw that consent at any time.
Right to Access – You have the right to access the personal data we hold about you. To exercise this right, please contact us at [email protected]. For your protection, we will verify your identity before fulfilling your request.
Right to Request Information – You have the right to request information about whether your personal data is being retained, the purposes of processing, the categories of personal data involved, the recipients of the data, and any applicable retention periods.
Right to Data Portability – You have the right to obtain and reuse your personal data, and request its transfer to a third party.
Right to Lodge Complaints – You have the right to lodge complaints regarding the processing of your personal data by us with the relevant data protection authorities.
Right to Avoid Automated Decision-Making – You have the right to avoid being subject to a decision based solely on automated decision-making, including profiling, if the decision would have a legal or similarly significant effect on you.
Request Restriction of Processing – You can request the suspension of processing your personal data in the following situations:

When you want us to verify the accuracy of the data.

If the use of your data is unlawful, but you prefer us to retain it rather than erase it.

When you require us to retain the data, even if we no longer need it, because you need it to establish, exercise, or defend legal claims.

If you have objected to our use of your data, and we need to verify whether we have overriding legitimate grounds to continue using it.

If you wish to exercise any of the above rights, please submit a support ticket by emailing us at [email protected]. Please note that these rights may be limited in certain situations, such as when we have a legal obligation to process your data. We reserve the right to assess correction requests at our discretion and may require additional supporting documentation to prevent fraud and ensure accuracy.

All personal data we collect serves a legitimate purpose in providing our products and services to you. If you have any questions, would like to delete your account, or wish to object to any of our information collection practices, please email us at [email protected].

In certain cases, such as application forms or account opening forms, it may be necessary to provide your personal data to us in order to process your application for our products or services. If you choose not to provide the required personal data, we may be unable to process your application/request or provide you with our products or services.

Data Protection Measures

We implement appropriate and reasonable technical and organizational measures to safeguard personal data from loss, damage, unauthorized destruction, or unlawful access and processing. We have established systems to minimize the exposure of your data and control its handling.

We proactively identify and assess both internal and external risks associated with your personal data that is under our control. Based on these assessments, we establish and maintain suitable safeguards to mitigate identified risks.

In the event of any security breaches or suspected compromises involving your personal data, we will notify you promptly. We will inform you about the consequences of the breach and, if required, notify the relevant authorities within 72 hours of becoming aware of the breach.

Global Operations

Please note that the personal information we collect from you may be transferred, stored, and processed outside of your jurisdiction. The laws governing data protection in these countries may differ from those in your own country. When transferring data from the European Economic Area (EEA), we ensure strict compliance with the General Data Protection Regulation (GDPR) and employ the necessary Standard Contractual Clauses with data recipients.

Your account information is securely stored on a server maintained and operated by third-party service providers. These providers adhere to the applicable data processing agreements and comply with the GDPR.

Data Retention

OlyPay will retain your personal data for the duration of your relationship with us and as long as necessary to fulfill our legitimate business purposes. This includes compliance with legal obligations, fraud prevention, dispute resolution, enforcement of agreements, and safeguarding the interests of OlyPay and its customers. We will also retain data as required by applicable law.

Cookies

We utilize cookies to enhance the functionality of our website and provide you with a better user experience. Through the use of Google Analytics, cookies help us analyze visitor numbers and identify popular pages on our website. This information is vital for us to ensure that we deliver up-to-date and relevant content.

What is a Cookie?

A cookie is a small data file that is sent to your computer or mobile device by a website. It enables the website to recognize your device when you revisit the same site. Typically, a cookie contains a unique identifier, such as a randomly generated number, which is stored on your device’s hard drive. Many cookies are automatically deleted once you finish using a website. Cookies are not programs and do not collect information from your computer.

Managing Cookies

Cookies are sent to your browser by a website and stored in the cookies directory on your computer. To manage your cookies settings, you need to determine the browser and its version that you are using. You can usually find this information by opening your browser, clicking on ‘Help,’ and then selecting ‘About.’ This will provide you with details about your browser version. For instructions on allowing, blocking, deleting, and managing cookies, please visit www.aboutcookies.org and choose your browser. You can also refer to your browser’s built-in or online help for further guidance. Consult your mobile phone’s manual to learn how to manage cookies on your mobile device.

Impact of Declining or Blocking Cookies

If you decline or block cookies, the usage of the OlyPay website will not be counted, preventing us from considering your actions in data analysis and identifying ways to enhance our Website.

Revisions to this Privacy Policy

We reserve the right to modify this Privacy Policy at any time. Any changes made to the Privacy Policy will be posted on the Website, and it is recommended that you review it regularly. The date of the latest version of the Privacy Policy will be indicated below, providing you with information on when it was last updated.

Contact us

If you have any questions, comments, or requests concerning this Privacy Policy, please feel free to contact us at [email protected]. We welcome your feedback and will be happy to assist you.