Cash X as Data Controller

Cash X is an international money transfer company, working with banks and non-banking financial companies, Cash X has established one of the largest agent-based remittance networks in the industry. 

These agents are independent entities from Cash X who offers, along with other services, money remittance trough Cash X platform.

Information Collection And Use

We collect several different types of information for various purposes to provide and improve our Service to you.

While using our Service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you (“Personal Data”). Personally identifiable information may include, but is not limited to:

Email address

First name and last name

Phone number

Address, State, Province, ZIP/Postal code, City

Cookies and Usage Data

 

Purpose of this Privacy Statement

Being transparent and providing accessible information to Data Subjects about how Cash X will use their Personal Data is a key element of the Data Protection Regulations.

In response of that, Cash X has created this privacy statement to provide clarity on how Cash X collects, uses, discloses, and manages Personal Data. Cash X encourages Data Subjects to review this privacy statement and become familiar with it.

We may also collect information that your browser sends whenever you visit our Service or when you access the Service by or through a mobile device (“Usage Data”).

This Usage Data may include information such as your computer’s Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers and other diagnostic data.

When you access the Service by or through a mobile device, this Usage Data may include information such as the type of mobile device you use, your mobile device unique ID, the IP address of your mobile device, your mobile operating system, the type of mobile Internet browser you use, unique device identifiers and other diagnostic data.

 

Personal Data processed by Cash X

What does Personal Data mean?

Personal Data means any information related to a specific individual, such as name, address, telephone number and e-mail address.

Cash X collects Personal Data from Data Subjects mainly through its network of agents and in some other cases, through digital mechanisms, such as Cash X website.

Personal Data collected by the Cash X Agents

To provide the remittance services asked by Cash X customers, Cash X collects the following Personal Data through its network of agents:

• Full Name (sender and recipient of the transaction)
• Address (sender and recipient of the transaction)
• Nationality (sender and recipient of the transaction)
• Telephone, including mobile (sender and recipient of the transaction)
• Relationship between sender and recipient of the transaction
• E-mail
• Age
• Gender
• Birth Place
• Labor details
• Origin of the financial resources
• Financial background
• Identification document (e.g. National ID, Driving License, Passport) and the data contained there
• Bank Statements
• Transaction amounts
• Bank account numbers
• Credit / Debit card numbers
• Marketing & other Contact Preferences

As a financial institution and in connection with identity verification, fraud prevention and similar security purposes, Cash X collects and/or confirms some of these Personal Data elements through third parties’ sources such as government agencies and consumer reporting agencies.

Personal Data collected by Cash X websites

At its websites, Cash X collects Personal Data and aggregate information that Data Subjects voluntarily provide there, or by the implementation of cookies as follows:

Definition and usage of cookies

A “cookie” is a small piece of information that is stored on your device (such as your computer) and which records the way that you use a website so that, when you revisit that website, it allows Cash X to provide tailored options based on the information that has been collected from your last visit. Cookies can also be used to analyse traffic and, in some cases, for providing you with tailored advertising and marketing.

Users of Cash X websites accept cookies, when visiting Cash X website for the first time. However, they are not required to turn on cookies in order to have a functioning website. Only after accepting to turn on the cookies, Personal Data will be processed. A different option is that the user sets his/her browser to warn him/her with a message for each cookie, only the cookies that have been accepted will be processing Personal Data. Whilst essential cookies are necessary to run Cash X Websites, the rest are not compulsory and require your consent.

Following are the broad categories of cookies used on Cash X websites:

• Essential cookies: These cookies make Cash X website operation work and therefore they cannot be turned off or rejected. These cookies do not gather any information about you and do not have the ability to remember how you have used our website;
• Performance cookies: Cash X use these cookies to help in the analysis on how its website is used and to improve its performance. For example, Cash X use them to understand where visitors to Cash X site are based, how many people visit the website and which sections of the website are the most used;
• Functionality cookies: These cookies allow Cash X website to remember if you have previously visited Cash X site or the choices you made to provide a more personalised online experience.
• Third-Party cookies: These are only installed if the user accept the cookies. They collect information from their device and perform tasks that analyse behaviour and collect other information, such as demographics. These cookies may be used to provide you with personalised advertising.

How to manage cookies

Our Performance, Functionality and Third-Party cookies are not strictly necessary for our website to work but will provide you with a better browsing experience. You can delete or block these cookies, but if you do this, you may have to manually adjust some preferences every time you visit our website and some features of the site may not work as intended. Most internet browsers are initially set up to automatically accept cookies, however you can decide at any time what type of cookies you want to accept. You can change the settings on your browser to block cookies or to alert you when cookies are being sent to your device.

 

Legal basis for processing Personal Data

Personal Data will be processed by Cash X only if and to the extent that at least one of the following applies:

Compliance with Legal Obligations

Cash X may process Data Subjects’ Personal Data, when it is necessary for the compliance with a legal obligation, e.g. Anti-Money Laundering screening and reporting activities, to protect Cash X rights and to comply with court order or judicial proceedings.

Legitimate Interests

Cash X may process Data Subject’s Personal Data when there is a weighed and balanced legitimate interest where the processing is needed, and such interest is not overridden by the rights of others, including the Data Subjects. e.g., to provide the service required, internal documentation, contact customers in relation to the transaction or for customer care initiatives and from prevention.

 

Consent

In certain scenarios, Cash X will process Personal Data from Data Subjects only after they have provided their consent for that specific purpose. For example, before sending direct marketing materials to customers and/or potential customers Cash X must obtain their consent.

Contract

Cash X will process Personal Data of Data Subjects to comply with its contractual obligations. For example: Cash X will transfer Personal Data from Data Subjects to third parties in order to provide the service required by Data Subjects, this in alignment with the terms and conditions of such service. Purposes of the Personal Data processing

 

Purpose of Data Processing:

Cash X generally uses Personal Data from Data Subjects for the purpose of providing them a service. This may include the following:

• Authorising and processing Data Subjects’ transactions, including effecting and administering money transfers and ensuring proper payment to the designated recipient of funds.
• Monitoring and improving our services including websites/mobile apps and its content.
• Sending information about Cash X products and services.
• Customer care initiatives to improve Cash X services.
• Meeting legal, regulatory, self-regulatory, risk management, fraud prevention and security requirements, which may include (among other measures) verifying the identity of the sender and recipient of funds and checking identities against money laundering, terrorist financing or similar watch lists established by regulatory agencies or similar bodies. For identity verification purposes, senders and recipients of money transfers may be required to produce valid identification or consent to verification by other means before releasing funds.
• Maintaining business and transaction records for reasonable periods, and generally managing and administering Cash X business.
• Meeting insurance, audit and processing requirements.
• Otherwise with the Data Subjects’ consent or as permitted or required by law.

Automated Processing

Cash X may conduct automated processing of Data Subjects’ Personal Data, such as: address, employment information, date of birth and transactions amounts with the sole purpose to comply with anti-money laundering regulations.

 

Personal Data Sharing

In alignment with the purposes established in this privacy statement, Cash X may disclose Personal Data from its Data Subjects to:

• Data Processors: Cash X will share Personal Data with third-party service providers, acting in behalf of Cash X (hereinafter œData Processors) including affiliates of Cash X acting as Data Processors to perform services on Cash X behalf, for example: information technology, data hosting, marketing, customer care, fraud prevention, etc. Cash X takes reasonable measures to ensure that Personal Data that is processed by Data Processors is protected and not used or disclosed for purposes other than as directed by Cash X.
• Third Party Data Controllers and Joint Controllers: Cash X will share Personal Data with third parties acting independently from Cash X but only in connection to the services required by the Data Subjects, for example: any intermediary banks or other financial institutions involved in the transaction of Cash X services.
• Successors: if Cash X is purchased by/sold to a third party, in which case personal data held by Cash X including you as our customer will be transferred. We will notify you of this through the most appropriate means
• Relevant Authorities: Cash X may disclose Data Subjects’ Personal Data as necessary to meet legal and regulatory requirements. This may include lawful requirements to disclose Personal Data to government authorities, for example, disclosures in compliance with suspicious activity reporting requirements under anti-terrorism, anti-money laundering and similar laws and regulations.

 

Cross Border Personal Data Transfers

In providing services to its customers, Cash X may transfer the Personal Data collected to destinations outside of the country where the Personal Data was originally collected, within the Cash X group of companies, with third party processors, or with Cash X partners. This is because the Personal Data is processed in those other locations. Where Cash X do so, Cash X ensure that security measures and appropriate safeguards are put in place to protect the Personal Data and ensure that all transfers comply with applicable data protection law. Cash X also ensures that processing is only ever carried out in accordance with Cash X instructions.

In all cases where Cash X transfers Personal Data across borders, Cash X rely on acceptable and defined legal mechanisms to ensure that Cash X protects Personal Data at all times. Cash X may use agreements and adequacy’ protections that have been defined and approved by the relevant Data Protection Authorities.

 

Data Subject’s Rights

Data Subjects have certain right over their Personal Data being processed by Cash X. In summary, the Data Subject rights are:

• To be informed: Data Subject’s right to know how, why, for how long, on what legal bases his/her Personal Data is processed. This is the main purpose of this privacy statement.
• Access: Data Subject’s right to access their Personal Data to know what Cash X process from the and for what’s purposes (among other things).
• Rectify: Data Subject’s right to correct their Personal Data when this is not accurate.
• Erasure: Data Subject’s right to permanently delete their Personal Data after fulfilling certain requirements. The right is not absolute and only applies in certain circumstances.
• Restriction of processing. This means that an Data Subject can limit the way that Cash X uses their Personal Data. In such case and if applicable, Cash X will only store the Personal Data to comply with relevant regulation, but it won’t be processed for anything else.
• Right to object: In some cases, Data Subject have the right to object to certain processing, for example, if the Data Subject does not want to be contacted by Cash X for marketing purposes.
• Data portability. In certain scenarios Data Subjects may request Cash X to provide a copy of their Personal Data in a digital format or send it to a third party appointed by them.

 

Security Measures to protect Personal Data

Cash X takes all reasonable steps to ensure that all Personal Data collected through its agents and websites is treated securely and in accordance with this privacy statement and strict data protection standards.

 

Retention of Personal Data

Cash X only retain Personal Data for as long as is necessary for Cash X to use it as described in this privacy statement or to comply with Cash X legal obligations. When determining the relevant retention periods, Cash X will take into account different factors, including: contractual obligations and rights; legal obligations to retain data for a certain period of time (for example, anti-money laundering laws); statute of limitations under applicable law; potential disputes; guidelines issued by relevant data protection authorities; and Cash X legitimate interests, where we need to consider retaining information to meet any other obligations. Otherwise, Cash X securely erase Personal Data once this is no longer needed.

 

Removal from Cash X Marketing Communications

Data Subjects may want to discontinue receiving marketing information from Cash X. While this may mean that Data Subjects will not receive product or service information of interest to them, Cash X respect Data Subject’s wishes not to be informed directly of these promotions or product introductions.

Data Subjects may inform Cash X that they want to opt-out for these communications by exercising their Data Subject rights (as explained in this privacy statement) or by opting out through the marketing materials received.

Changes to this Privacy Statement

Cash X reviews this privacy statement from time to time and may make periodic changes to it in connection with that review. Therefore, Data Subjects should periodically review Cash X website to make sure they are aware on the latest version.

Important

The Data Protection Act 2018 controls how your personal information is used by organisations, businesses or the government.

The Data Protection Act 2018 is the UK’s implementation of the General Data Protection Regulation (GDPR).

We confirm that, the usage of your personal data has to follow strict rules called ‘data protection principles’. And make sure that your information is:

used fairly, lawfully and transparently

used for specified, explicit purposes

used in a way that is adequate, relevant and limited to only what is necessary

accurate and, where necessary, kept up to date

kept for no longer than is necessary

handled in a way that ensures appropriate security, including protection against unlawful or unauthorised processing, access, loss, destruction or damage

You may visit the following links for more related information that we applied on your data:

UK Data Protection: https://www.gov.uk/data-protection

Your Rights When Making Payments In Europe :https://ec.europa.eu/info/sites/info/files/business_economy_euro/banking_and_finance/documents/leaflet-your-rights-payments-eu_en.pdf

For a Data Subject’s rights request, and queries or suggestions about this privacy statement, Cash X may be contacted at: info@cashxremit.com