Privacy Policy
Introduction
TrustLinq (“we,” “our,” or “us”) respects your privacy and is committed to protecting personal information in compliance with Swiss data protection laws and the EU’s General Data Protection Regulation (GDPR). This privacy policy explains how we collect, use, and protect personal information when you use our website and services. TrustLinq is a Swiss-incorporated company serving clients worldwide, providing crypto-to-bank transfer services for personal and business expenses. By using our website or services, you agree to the practices outlined in this policy.
1. Information We Collect
We collect and process different types of personal information for various purposes, as detailed below:
- Personal and Business Information: When you sign up or create an account, we may collect personal and business details, including your name, address, contact details, and other information required to set up your account, process payments, and verify your identity.
- Financial and Transactional Data: For financial transactions, we may collect payment information such as bank account details and transaction history. This data is used solely for processing payments and providing you with requested services.
- Newsletter Subscription: When you subscribe to our newsletter, we collect your email address and may collect additional information about your preferences to tailor content and offers to your interests.
- Usage Data and Analytics: Our website uses Google Analytics to collect data on how visitors interact with our site. This includes IP addresses, device information, browser type, pages visited, and time spent on each page. Google Analytics data is used to analyze site performance and improve our services. We have enabled IP anonymization with Google Analytics, as required under GDPR, to enhance privacy protection.
- Cookie Data: We use cookies and similar technologies to store certain information when you visit our website. Cookies help us understand usage patterns, remember your preferences, and improve website performance.
2. How We Use Your Information
We process your personal data for specific purposes based on lawful grounds, as required under Swiss law and GDPR:
- To Provide Services: We use your data to create and manage your account, process payments, and respond to your inquiries. Processing is necessary for the performance of our contract with you.
- To Improve Our Services: Usage and analytics data help us understand website performance, optimize user experience, and make enhancements to our platform based on visitor interactions.
- To Communicate with You: We use your contact information to send transactional communications, respond to inquiries, and, with your consent, send marketing and promotional materials, including newsletters.
- For Security and Compliance: We process personal data to comply with legal obligations, including AML (Anti-Money Laundering) and KYC (Know Your Customer) requirements, and to protect against fraud, unauthorized access, and other potential security risks.
- To Manage and Optimize Our Website: Cookies and similar tracking technologies allow us to understand site usage, improve performance, and manage visitor preferences. Consent for these technologies is obtained as required by GDPR.
3. Legal Bases for Processing under GDPR
We rely on the following legal bases for processing personal data under GDPR:
- Contractual Necessity: Processing is necessary for fulfilling the services you request, including managing accounts and processing transactions.
- Consent: We obtain your consent for marketing communications, cookies, and, where required, specific data processing activities.
- Legitimate Interests: We process data for our legitimate business interests, such as improving website functionality and ensuring security, balanced with your data protection rights.
- Legal Obligation: We may process personal data to comply with applicable laws, such as AML and KYC regulations.
4. Data Sharing and International Transfers
We do not sell or share your personal information with third parties for their own marketing purposes. However, we may share your information with:
- Service Providers: We work with trusted third-party service providers, such as Google Analytics, to help us operate our website, process transactions, and analyze usage. These providers process data on our behalf and are contractually obligated to protect it in compliance with GDPR.
- Legal and Regulatory Authorities: We may disclose personal data to comply with legal obligations, regulatory requirements, or in response to lawful requests from authorities, if necessary for security and legal compliance.
Since we serve international clients, personal data may be transferred to and processed in countries outside of Switzerland and the European Union. Where applicable, we implement safeguards, such as Standard Contractual Clauses (SCCs), to ensure an adequate level of data protection for international transfers.
5. Cookies and Tracking Technologies
Our website uses cookies to enhance user experience and track website performance. Cookies are small text files stored on your device when you visit our site. The types of cookies we use include:
- Essential Cookies: These are necessary for website functionality and cannot be disabled without affecting your experience.
- Analytical Cookies: These help us understand how visitors interact with our website, enabling us to improve performance.
You can manage cookie preferences in your browser settings. For users in Switzerland and the EU, we obtain consent for cookies as required under the EU User Consent Policy. For more details on Google’s cookie practices, please refer to Google’s Privacy Policy.
6. Your Rights under GDPR and Swiss Law
You have rights regarding your personal data under GDPR and Swiss law, including:
- Right to Access: You can request access to the personal data we hold about you.
- Right to Correction: You can request that we correct any inaccurate or incomplete data.
- Right to Deletion (Right to be Forgotten): In certain circumstances, you can request that we delete your personal data.
- Right to Restrict Processing: You can ask us to limit processing of your data in certain situations.
- Right to Data Portability: You can request a copy of your data in a structured, machine-readable format to transfer it to another provider.
- Right to Object: You can object to processing based on legitimate interests or direct marketing.
- Right to Withdraw Consent: If you have given consent, you may withdraw it at any time, though this will not affect data processed before withdrawal.
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month, as required under GDPR.
7. Data Security
We take data security seriously and implement industry-standard measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. Our security practices include encryption, access controls, and regular security assessments.
8. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law. When data is no longer needed, it is securely deleted or anonymized.
9. Consent for Marketing and Communications
Where you have provided consent, we may use your email address for direct marketing and promotional communications. You may unsubscribe from our newsletter at any time by following the link provided in each communication or contacting us directly.
10. Changes to This Privacy Policy
We may update this privacy policy periodically to reflect changes in our data practices or legal requirements. We encourage you to review this page regularly to stay informed of updates. The latest version will always be available on this page.
11. Contact Information
If you have questions, concerns, or requests regarding this privacy policy or your data, please contact us at [email protected].
Last edited: August 23, 2024