Introduction
At MetaX, we recognize that our customers form the bedrock of our business. Consequently, we place a premium on transparently managing and safeguarding personal data and privacy. This Privacy Policy delineates our practices and policies in this regard and is applicable to individuals who are current, past, or prospective customers of MetaX.
MetaX, a business entity operating as MetaX Payments Ltd, holds Incorporation Number BC1406436 and is duly registered in British Columbia, Canada, situated at 28 19628, 55A Avenue, Langley, British Columbia, V3A 3X2 Canada.
Registered with FINTRAC in Canada under MSB registration number M23579425, MetaX provides specified services encompassing money transferring services, dealing in virtual currencies, and payment service provider services.
Functioning as the "data controller" for any personal data submitted to us via email, telephone, social media, post, or through our Services, Website, or any other communication channels, we bear the responsibility for determining how personal data about you is collected, used, and managed.
MetaX is dedicated to safeguarding the security and confidentiality of information under its purview, upholding responsible use and protection of personal data, demonstrating transparency, and respecting individual rights in compliance with applicable data protection laws.
It is imperative that you carefully read and comprehend the information below regarding our handling of your personal data. For any inquiries, please reach out to us via email at support@metaxpayments.com.
Types of Personal Data We Collect and Handle
Personal Data:
At MetaX, we systematically collect and manage various forms of personal data provided by you or your representatives when utilizing our products and services. Additionally, we may acquire and process personal data obtained legally from other members of our organization, public authorities, client introducers, or publicly accessible sources, including but not limited to online databases (e.g., Registrars of Companies, Screening databases - sanctions/AML), websites, security searches, and social media.
We gather information when you:
When applying to become a MetaX customer, whether an individual, legal entity, partnership, trust, or charity, we will request specific personal information to verify your identity and manage your account. The information required may vary based on the product you are applying for and includes, but is not limited to:
If you represent or own a legal entity, partnership, trust, charity, or any other organizational structure that is our customer, we may also collect and process additional data about your business or legal entity to confirm it’s existence, ownership structures and other applicable documents.
If you provide us with personal information belonging to others (such as your representative, secretary, or employee) or request that we share their personal information with third parties, you confirm that you have previously informed them of this policy.
Other Data:
We may also gather non-identifying information about you. This non-personal information may include:
Please note that some links on the MetaX website (www.metaxpayments.com) may lead to other non-MetaX websites or areas with their own data protection policies that may differ from our Privacy Policy. Before accessing other websites or areas, it's crucial to ensure that you agree with the policies of those entities. MetaX is not responsible for any issues arising from third-party websites.
If you are not the intended recipient of this Privacy Policy, please review the privacy practices of the entity responsible for controlling your personal data. MetaX may also be involved in the handling of your information in certain cases as outlined in this policy.
Legal Basis for Processing Your Personal Data
We process your data with the fundamental principle of data minimization, ensuring that only the necessary amount and types of data are processed for lawful purposes. MetaX employs the data for various purposes, including:
Fulfillment of Our Contract: We utilize the collected data to establish your customer record and effectively manage your account. Personal information is employed to verify your identity, and in certain instances, we may share some or all of your data with third parties. These may include fraud prevention agencies, anti-money laundering organizations, credit reference agencies, law enforcement, regulatory bodies, government departments, and providers of our sales or servicing platforms.
Protection of Legitimate Interests: Processing of personal information is conducted to safeguard our legitimate interests, provided such interests do not unduly compromise your rights and freedoms. These interests encompass the improvement of our services, protection of both our and your data through our IT and security systems, and the initiation or preparation for litigation procedures.
Compliance with Legal Obligations: The data enables us to fulfill our legal and regulatory obligations, encompassing compliance with the Electronic Money Regulation, Money Laundering Law, Tax laws, and other applicable statutes. As a regulated entity under FINTRAC in Canada, we adhere to its requirements, utilizing your personal information to prevent fraud and money laundering.
Communication: Your personal data is utilized for communication regarding your account, providing service-related updates, and delivering necessary notifications. While we aim to leverage our e-banking platform for communication, certain situations may necessitate contacting you in a specific manner as dictated by regulations.
Troubleshooting, Analysis, Testing, Research, and Statistical/Survey Purposes: We employ your data for a range of purposes, including troubleshooting, conducting data analysis, testing, research, and gathering statistical and survey data.
Marketing: With your explicit permission, we may utilize your information for marketing purposes. This involves identifying products and services that may align with your interests, ensuring a tailored and relevant approach to our marketing efforts.
Your privacy and data protection are paramount to us, and we operate in accordance with applicable laws and regulations to safeguard your information.
Retention Period
The retention of personal data at MetaX is contingent upon various purposes and is subject to rigorous standards and regulations. In essence, personal data is retained for the duration necessary to provide the requested services, fulfill relevant legal, accounting, or reporting requirements, investigate potential fraud, comply with anti-money laundering and counter-terrorism financing laws, and ensure you have a reasonable opportunity to access your personal data.
In the context of marketing, personal information provided for such purposes will be retained until you opt-out or until we identify inaccuracies in the data.
Disclosure of Your Personal Data
MetaX diligently collects your personal information to execute requests, deliver services, and meet contractual and legal obligations.
Your personal data remains confidential and is not shared with external parties unless deemed essential for our business operations, to fulfill requests, provide services, or mandated by law. Instances where disclosure may be necessary include:
Rest assured, MetaX prioritizes the security and confidentiality of your personal data and only engages in disclosures when essential for the smooth operation of our services or mandated by legal and regulatory obligations.
Countries Where Your Data May Be Transferred
MetaX, being a globally-reaching company, may process your personal data in the local country of our operations or in other countries where we or our partners operate worldwide, in accordance with legal permissions. Your personal data might be transferred from the European Union/European Economic Area (EU/EEA) or from another country imposing restrictions on personal information transfers to third countries or international organizations. Such transfers may occur under the following circumstances:
Automated Decision-Making & Profiling
At MetaX, we do not make decisions solely through automated processing. However, specific aspects of your personal data may undergo automated processing in the following situations:
Cookies
Our website utilizes cookies to enhance your browsing experience. For detailed information on how we use cookies, please refer to our Cookie Policy, available on our website.
Your Rights Regarding Your Personal Information
You hold the following rights concerning the personal information we have about you. It's crucial to note that some of these rights apply only under specific conditions, and their applicability may be limited if we have a compelling interest, legal requirement, or data exemption due to confidentiality reasons.
1. Right to Access:
You have the right to request a copy of the personal data retained and confirmation from us about whether personal data is being processed.
2. Right to Correction:
You can request the correction of inaccurate or incomplete personal data related to you. This includes correcting any incorrect personal data about you and completing any incomplete personal data in line with the processing purpose.
3. Right to Erasure:
You may request the erasure of your personal data under the following circumstances:
However, the right to erasure does not apply if the processing is necessary for freedom of expression and information, compliance with a legal obligation, reasons of public interest, or for initiating, pursuing, or defending legal claims.
4. Right to Restriction of Processing:
You have the right to request the temporary suspension of processing certain personal data related to you under the following circumstances:
5. Right to Object:
When we process your personal data based on legitimate interests, you have the right to contest it. However, we may still have the right to continue processing your information. Additionally, you can object to the processing of your personal data for direct marketing purposes.
6. Right to Withdraw Consent:
If we process your personal data based on your consent, you have the right to withdraw it at any time. If there's another lawful basis for processing your data, we may continue to do so. Withdrawal resulting in the inability to provide services will be communicated.
However, we may continue to retain your data if there's another valid reason for doing so, such as legal obligations or public interest.
7. Right to File a Complaint:
If you have complaints about data use or the exercise of your rights, please contact our Data Protection Officer at the provided contact details. We will promptly investigate and respond to your complaint.
At MetaX Payments Ltd, we understand that trust is fundamental to our relationship with our customers. This Privacy and Data Protection Policy reflects our commitment to protecting your privacy while providing high-quality financial services. We believe in complete transparency about how we collect, use, and protect your information.
MetaX Payments Ltd operates as a registered Money Services Business (MSB) in British Columbia, Canada. We are authorized to provide various financial services including money transfers, currency exchange, and payment services. Our operations are subject to oversight by multiple regulatory bodies, including the Financial Transactions and Reports Analysis Centre of Canada (FINTRAC) and provincial regulators.
As a financial institution operating both domestically and internationally, we maintain strict standards of data protection and privacy that meet or exceed regulatory requirements across all jurisdictions where we operate.
This policy serves multiple purposes:
This policy applies to all information we collect through:
The policy covers both our Canadian operations and our international services, ensuring consistent protection of your information regardless of where you interact with us.
To help you better understand this policy, we use these key terms:
The Personal Information Protection and Electronic Documents Act (PIPEDA) forms the foundation of our privacy practices. Under PIPEDA, we adhere to these key principles:
As a British Columbia-based organization, we comply with the Personal Information Protection Act (PIPA), which provides additional privacy protections. PIPA requires:
Our global operations require compliance with international data protection standards, including:
As an MSB, we adhere to specialized regulations including:
We collect personal information necessary to provide our services and meet regulatory requirements. Our collection practices are designed to gather essential information while respecting your privacy.
Identity Information
Basic identification information includes:
Financial Information
To process transactions and maintain your account, we collect:
Transaction Data
For each transaction, we record:
Digital/Technical Data
When you use our online services, we collect:
For business clients, we collect information necessary to establish and maintain business relationships while meeting regulatory requirements.
Entity Documentation
Standard business documentation includes:
Ownership Structure
To understand business ownership, we collect:
Management Information
For key individuals in the business, we require:
Business Activity Data
To understand your business operations, we collect:
All information collection is conducted in accordance with applicable laws and regulations, with appropriate security measures in place to protect your data. We regularly review our collection practices to ensure they remain necessary and proportionate to our services and regulatory obligations.
Your trust is essential to our business, and we want you to understand exactly how and why we process your information. Our primary purposes for processing personal and business information are directly connected to providing our financial services and meeting our regulatory obligations.
Service Provision
We process your information to:
For example, when you initiate an international money transfer, we process your identification information to verify your identity, your financial information to execute the transfer, and your recipient's information to ensure accurate delivery of funds.
Regulatory Compliance
As a regulated financial institution, we are legally required to:
Risk Management
To protect both you and our institution, we process information to:
Beyond our primary purposes, we may process your information for additional purposes that support and improve our services.
Service Improvement
We analyze service usage patterns to:
Marketing and Communications
With your explicit consent, we may use your information to:
You can opt out of marketing communications at any time while continuing to receive essential service-related communications.
Analytics and Research
We conduct analysis and research to:
Within our organization, we maintain strict controls on internal access to your information:
We carefully select and monitor third-party service providers who help us deliver our services. These may include:
Essential Service Providers
Professional Services
All service providers are bound by:
As a regulated financial institution, we are required to share certain information with regulatory authorities:
Mandatory Reporting
We report to various regulatory bodies including:
Regulatory Compliance
Our reporting obligations include:
When processing international transactions, information sharing across borders is necessary:
Cross-Border Services
We share information with:
Transfer Safeguards
All international transfers include:
To provide our services, we work with various financial partners:
Financial Networks
We participate in:
Partner Requirements
All partners must maintain:
We implement comprehensive technical measures to protect your information:
Infrastructure Security
Our systems include:
Access Controls
We maintain strict access controls through:
Our organizational security measures include:
Policy Framework
We maintain:
Physical Security
Our facilities are protected by:
We ensure our staff understand and follow security requirements:
Training Programs
All staff complete:
Policy Enforcement
We maintain:
We maintain comprehensive incident response procedures:
Response Framework
Our response includes:
Management Procedures
We follow structured:
In the unlikely event of a data breach:
Response Protocols
We will:
Recovery Procedures
Our recovery includes:
As a financial institution operating globally, we regularly transfer data across borders to provide our services. We ensure all international transfers have a proper legal foundation and appropriate safeguards.
Legal Framework
Our cross-border transfers are conducted under:
For example, when you initiate an international money transfer, your transaction information must flow through various jurisdictions to reach its destination. We ensure this process follows all applicable laws and regulations in both originating and receiving countries.
Compliance Mechanisms
For each transfer, we ensure:
We carefully select and monitor our international partners to maintain data protection standards across borders. All international partners must:
Specific security measures protect data during international transfers:
Technical Protection
We implement:
Organizational Controls
We maintain:
We address varying privacy requirements across jurisdictions:
Compliance Framework
We maintain:
You have the right to understand and access your personal information in our systems.
Information Access
You can request:
Access Process
To exercise your access rights:
You have the right to ensure your information is accurate and complete.
Correction Requests
You can request:
Correction Process
We will:
You have certain rights to request deletion of your information, subject to legal requirements.
Deletion Scope
You can request deletion of:
Retention Requirements
We must retain certain information:
We provide clear procedures for addressing privacy concerns.
Complaint Process
Our process includes:
Resolution Framework
We ensure:
We make it easy to exercise your privacy rights while maintaining security.
Request Procedures
To exercise your rights:
Response Timeline
We will:
We maintain clear retention schedules for all information we hold.
Standard Retention
We typically retain:
Legal Requirements
We must retain certain records:
All retention periods are based on specific requirements or legitimate needs.
Retention Grounds
We retain information based on:
Regular Review
We conduct:
We follow structured procedures for secure data deletion.
Deletion Methods
We use:
Verification Process
We ensure:
We maintain secure archives for required retention periods.
Archive Security
Our archives have:
Archive Management
We maintain: