Thank you for using iWallet!
This Privacy Policy applies when you use iWallet Inc.’s services and tells you, amongst other things, about:
1. The ways we collect and store your Personal Data and why we do so,
2. How we use and disclose your Personal Data, and
3. The choices you have about your Personal Data.
This Privacy Policy is issued by iWallet Inc. on behalf of itself, its subsidiaries and its affiliates (together, “iWallet”, www.iwallet.com, “we”, “us” and “our”) and is addressed to individuals outside our organization with whom we interact, including customers, visitors to our Sites, and other users of our services (together, “you”). To ensure transparency this Privacy Policy describes our information handling practices when you access our website located at www.iwallet.com and/or when you use the iWallet mobile app or third party applications relying on such an API, and related services (referred to collectively hereinafter as "Services").
If you do not want iWallet to collect, store, use, or share your data in the ways described in this Privacy Policy, you may not use iWallet’ s Services. If you have any questions about this Privacy Notice, please contact us at hello@iwallet.com.
1. ACCEPTANCE OF PRIVACY POLICY
By accessing and using our Services, you signify acceptance to the terms of this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described below. If you do not agree with or you are not comfortable with any aspect of this Privacy Policy, you should immediately discontinue access or use of our Services.
2. CHANGES TO THIS PRIVACY POLICY
We reserve the right to modify this Privacy Policy at any time, and when required by law, we will notify you of changes to this Privacy Policy. If we make any material changes, we will notify you by email (sent to the e-mail address specified in your account) or by means of a notice on our Services prior to the change becoming effective.
iWallet may provide additional "just-in-time" disclosures or additional information about the data collection, use and sharing practices of specific Services. These notices may supplement or clarify iWallet's privacy practices or may provide you with additional choices about how iWallet processes your personal information.
3. THE DATA WE COLLECT ABOUT YOU
Personal Data, or personal information, means any information about an individual from which that person can be identified, or any other data or information described as “Personal Data” or “Personal Information” under applicable laws. It does not include data where the identity has been removed (anonymous data). We may collect, use, store and transfer different kinds of Personal Data about you which we have grouped together as follows:
We may also collect, use and share aggregated data such as statistical or demographic data for any purpose. Aggregated data may be derived from your Personal Data but may not be considered Personal Data in law as this data does not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific website feature. However, if we combine or connect aggregated data with your Personal Data so that it can directly or indirectly identify you, we treat the combined data as Personal Data which will be used in accordance with this Privacy Policy & Cookie Policy. Furthermore, to the extent any such aggregated data may be classed as Personal Data under applicable law, we will treat such data as Personal Data as required.
We do not intend to collect the following special categories of Personal Data about you: your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data.
4. IF YOU FAIL TO PROVIDE PERSONAL DATA
Where we need to collect Personal Data by law, or under the terms of a contract we have with you and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you. In this case, we may cancel a service you receive from us but we will notify you if this is the case at the time.
5. HOW WE COLLECT YOUR PERSONAL DATA
We use different methods to collect data from and about you including through:
Once we obtain such information from third parties, we do not subsequently share it with any other third parties except as described in this Policy or the Terms. This information is shared with iWallet's processors and corporate group as necessary to perform the Services.
We request various types of Personal Data from you, and can only receive such data if you provide it willingly and consent to its provision to us, and our use, acquisition, collection and processing of your Personal Data as described in this Policy, our Terms, or elsewhere on our applications, websites, or other written communications, when opening an account with us or procuring any Services. Any use or transmittal of your data will only be completed once you are made completely aware of its use and transmittal, and then only with your consent. If you wish to know of any specific use of your data that may be undertaken by iWallet, please email us at hello@iwallet.com.
6. USE OF YOUR PERSONAL DATA
a) We only use your Personal Data when the law allows us to. Generally, we will use your Personal Data in the following circumstances:
7. PURPOSES FOR WHICH WE MAY PROCESS YOUR PERSONAL DATA
We may process your Personal Data for the following purposes, subject to applicable law:
8. DISCLOSURE OF PERSONAL DATA TO THIRD PARTIES
We may disclose your Personal Data to other entities within iWallet, for legitimate business purposes (including operating our Sites, and providing Services to you), in accordance with applicable law. In addition, we may disclose your Personal Data to:
9. HOW PERSONAL DATA IS SHARED WITH THIRD-PARTY SITES AND SERVICES
Please note that merchants you interact with may have their own privacy policies, and iWallet is not responsible for their operations, including, but not limited to, their information practices. Information collected by third parties, which may include such things as contact details or location data, is governed by their privacy practices. We encourage you to learn about the privacy practices of those third parties.
If you authorize one or more third-party applications to access your iWallet Account, then information you have provided to iWallet may be shared with those third parties. Unless you provide further authorization, these third parties are not allowed to use this information for any purpose other than to facilitate your transactions using iWallet Services.
10. OPTING OUT
We offer you the opportunity to receive marketing information from us. We will normally send direct marketing by email if we have your email address, but may choose to contact you via other methods, if you have provided your consent for us to market to you using these methods. If you consented to receive marketing communications when you registered and created a customer account, you can tell us that you do not wish to receive any more at any time by selecting the ‘unsubscribe’ option in the marketing communications we send or at any time by changing your account preferences.
11. COOKIES
When you visit or use our Services we may place Cookies onto your device, or read Cookies already on your device, subject always to obtaining your consent, where required, in accordance with applicable law. We use Cookies to record information about your device, your browser and, in some cases, your preferences and browsing habits. We may Process your Personal Data through Cookies and similar technologies. We may also automatically collect certain technical data that is sent to us from the computer, mobile device and/or browser through which you access the Website using cookies or similar technologies (“Automatic Data”). Automatic Data, includes without limitation, a unique identifier associated with your access device and/or browser (including, for example, your Internet Protocol (IP) address), characteristics about your access device and/or browser, statistics on your activities on the Service, details of the products and services we have provided to you or that you have enquired about, including any additional information necessary to deliver those products and services and respond to your enquiries, or information about how you came to the Service. We attempt to anonymize such information, however, to the extent that IP addresses or similar identifiers are considered Personal Data by applicable law, we also treat these identifiers as Personal Data. We collect Automatic Data based on your consent which was granted to us by you when you accessed our Service, or when you registered as a user, and thereby accepted this Privacy Policy. If you do not want us to collect this information, do not use the Service or delete your account on the Service. Please note: If you restrict, disable or block any or all cookies from your web browser or mobile or other device, our services may not operate properly, and you may not have access to certain services or parts of the Service. We shall not be liable for any interruption in, or inability to use, our services or degraded functioning thereof, where such are caused by your settings and choices regarding cookies.
12. INTERNATIONAL TRANSFERS OF PERSONAL DATA
As a global entity, iWallet may store, transfer, and otherwise process your Personal Data in countries outside of the country of your residence, including the United States and possibly other countries. Data transfer abroad is based on consent, in that we shall only transfer your data outside your home jurisdiction for the purpose of providing access to our Services. Such data transfer will be to third parties who maintain confidentiality requirements and data protection capabilities sufficient to protect and secure your data, if this is at all required. By registering an account with us, you hereby agree to allow your data to be transferred outside your home jurisdiction for the reasons described in this paragraph, and subject to the terms described herein. If you want to specifically know how and to whom your data may be transferred to, please get in touch with us at hello@iwallet.com.
iWallet participates in and has certified its compliance with the EU-U.S. Privacy Shield Framework. iWallet is committed to subjecting all Personal Data received from European Union (EU) member countries, in reliance on the Privacy Shield Framework, to the Frameworks applicable Principles. To learn more about the Privacy Shield Framework, visit the U.S. Department of Commerces Privacy Shield List at https://www.privacyshield.gov.
iWallet is responsible for the processing of Personal Data it receives under the Privacy Shield Framework and subsequently transfers to a third party acting as an agent on its behalf. Pursuant to the Privacy Shield Principles, iWallet will use Personal Data only in ways that are compatible with the purposes for which it was collected or subsequently authorized by the individual. We will take all reasonable steps to ensure that Personal Data we process is limited to only what is relevant to the purposes for which it was collected and that it is accurate, complete, and up-to-date.
iWallet complies with the Privacy Shield Principles for all onward transfers of Personal Data from the EU, including the onward transfer liability provisions. Consequently, before iWallet shares your information with any third party that is not also certified under the E.U.-U.S. Privacy Shield Framework, iWallet, Inc. will enter into a written agreement that the third party provides at least the same level of privacy safeguard as required under those Frameworks, and assures the same level of protection for the Personal Data as required under applicable data protection laws.
iWallet, Inc. commits to resolve European data subjects' complaints about their privacy and our collection, use or disclosure of their Personal Data in compliance with the EU-U.S. Privacy Shield Principles. European data subjects with inquiries or complaints regarding this Privacy Policy should first contact iWallet at hello@iwallet.com.
iWallet, Inc. commits to resolve European data subjects' complaints about their privacy and our collection, use or disclosure of their Personal Data in compliance with the EU-U.S. Privacy Shield Principles. European data subjects with inquiries or complaints regarding this Privacy Policy should first contact iWallet at hello@iwallet.com.
We are also subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission with respect to the Framework. Please note that if your complaint is not resolved through these channels, under limited circumstances, a binding arbitration option may be available before a Privacy Shield Panel. In certain situations, iWallet may be required to disclose Personal Data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
13. HOW WE PROTECT AND STORE PERSONAL DATA
We understand how important your privacy is, which is why iWallet maintains (and requires its service providers to maintain) appropriate physical, technical and administrative safeguards to protect the security and confidentiality of the Personal Data you entrust to us.
Critical parts of our Services employ the highest level of security standards, from HTTPS SSL, encryption-at-rest to password encryption. These measures are intended to prevent the loss, misuse, and alteration of the information that we obtain from you.
We may store and process all or part of your personal and transactional information, including certain payment information, such as your encrypted bank account and/or routing numbers, in the United States and elsewhere in the world where our facilities or our service providers are located. We protect your Personal Data by maintaining physical, electronic, and procedural safeguards in compliance with the applicable laws and regulations.
For example, we use computer safeguards such as firewalls and data encryption, we enforce physical access controls to our buildings and files, and we authorize access to Personal Data only for those employees who require it to fulfill their job responsibilities.
However, we cannot guarantee that loss, misuse, unauthorized acquisition, or alteration of your data will not occur. Please recognize that you play a vital role in protecting your own Personal Data. When registering with our Services, it is important to choose a password of sufficient length and complexity, to not reveal this password to any third-parties, and to immediately notify us if you become aware of any unauthorized access to or use of your account.
However, we cannot guarantee that loss, misuse, unauthorized acquisition, or alteration of your data will not occur. Please recognize that you play a vital role in protecting your own Personal Data. When registering with our Services, it is important to choose a password of sufficient length and complexity, to not reveal this password to any third-parties, and to immediately notify us if you become aware of any unauthorized access to or use of your account.
14. DATA ACCURACY
We take every reasonable step to ensure that:
From time to time we may ask you to confirm the accuracy of your Personal Data.
15. DATA RETENTION
We will only retain your Personal Data for as long as we believe necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, reporting or audit requirements. To determine the appropriate retention period for Personal Data, we consider the amount, nature, and sensitivity of the Personal Data, the potential risk of harm from unauthorized use or disclosure of your Personal Data, the purposes for which we process your Personal Data and whether we can achieve those purposes through other means, and the applicable legal requirements. We will retain your data to the extent retention may be required for our legitimate purposes (such as, but not limited to, the enforcement of our, or any affiliated parties' legal rights, or for compliance with our legal obligations), and to the extent permitted under applicable law, but in no case for longer than ten (10) years (unless required otherwise by law).
Details of retention periods for different aspects of your Personal Data are available by contacting us hello@iwallet.com.
16. YOUR LEGAL RIGHTS
Under certain circumstances, you have rights under data protection laws in relation to your Personal Data. These include rights:
If you wish to exercise any of the rights set out above, please contact us hello@iwallet.com. To the extent that you have rights under any current or future privacy laws, you may contact us at hello@iwallet.com to exercise any applicable rights you may have under such laws. To the extent that such laws apply to you and to us, we will respect your rights in accordance with such laws.
17. TERMS OF USE
All use of our Services is subject to our Terms of Use. We recommend that you review our Terms of Use regularly, in order to review any changes we might make from time to time.
18. NOTE REGARDING CHILDREN (UNDER 18 YEARS OF AGE)
Please note that we do not knowingly permit or solicit information from individuals under eighteen (18) years of age. In addition we do not knowingly market our products or Services to individuals under eighteen (18) years of age. You may use our Services only with involvement and permission of a parent or guardian.
19. DIRECT MARKETING
We may process your Personal Data to contact you via email, telephone, direct mail or other communication formats to provide you with information regarding services that may be of interest to you. If we provide services to you, we may send information to you regarding our services, upcoming promotions and other information that may be of interest to you, using the contact details that you have provided to us and always in compliance with applicable law.
You may unsubscribe from our promotional email list at any time by simply clicking on the unsubscribe link included in every promotional email we send. After you unsubscribe, we will not send you further promotional emails, but we may continue to contact you to the extent necessary for the purposes of any services you have requested.
20. CALIFORNIA PRIVACY RIGHTS
To the extent that the California Consumer Privacy Act (“CCPA”) is applicable to either you or us: both parties agree to comply with all of their obligations under the CCPA; and in relation to any communication of ‘Personal Data’ as defined by the CCPA, the parties agree that no monetary or other valuable consideration is being provided for such Personal Data and therefore neither party is ‘selling’ (as defined by the CCPA) Personal Data to the other party, unless specifically agreed for and consented to by the parties.
The principal rights the user has under the CCPA include but are not limited to:
Both parties agree to notify the other immediately if they receive any complaint, notice, or communication that directly or indirectly relates to either party’s compliance with the CCPA. Specifically, we shall notify user within ten (10) working days if we receive a verifiable consumer request under the CCPA.
21. CONTACT DETAILS
For the purposes of this Policy, iWallet is the Controller.
You may contact us at via post, telephone, fax, email or via our online Contact Us form.
If you have any comments, questions or concerns about any of the information in this Policy, or any other issues relating to the Processing of Personal Data carried out by us, or on our behalf, please contact us at hello@iwallet.com or by calling us at 1-866-376-4880.
22. BREACH NOTIFICATION PROCEDURES AND CONFIDENTIALITY
You will be notified of any breach of Personal Data stored on the Service or provided to us by you within 72 hours of the occurrence of such a breach. At the time we notify you of the breach, we shall also inform you as to all rectification steps we have taken to rectify and mitigate the breach. For information related to our data security and the security of any Personal Data you provide us via this Website, please get in touch with us at the contact address specified under Section 21 of this Privacy Policy.
Any use or transmittal of your data will only be completed once you are made completely aware of its use and transmittal, and then only with your consent, for the sole purpose of delivering services or products via this Website. If we disclose any of your Personal Data to third parties, it will be done so only with confidentiality and protective measures equivalent to those provided by us through this Privacy Policy. We will not make any of your Personal Data public, or disclose the same to third parties, unless you authorize us specifically.
23. ACCESS TO PERSONAL DATA
You can access the Personal Data we hold about you by contacting us using the contact details listed in Section 21 above. Sometimes, we may not be able to provide you with access to all of your Personal Data and, where this is the case, we will tell you why. We may also need to verify your identity when you request your Personal Data.
If you think that any Personal Data we hold about you is inaccurate, please contact us using the contact details provided in Section 13 and we will take reasonable steps to ensure that it is corrected.
We will consider and respond to all requests in accordance with all applicable laws.
24. DATA OF THIRD PARTIES
If you submit any data belonging to third parties to us, you are solely and strictly responsible for ensuring that you have the consent of such third parties to do so, and that such third parties have been made aware of and agreed to the terms of our data processing and collection, including this Privacy Policy, the Terms, and other legally binding agreements we provide you with. In case of any failure on your part to uphold this obligation with respect to third parties, you agree to immediately defend, indemnify and hold us harmless against any costs, damages, fees and expenses which arise from such failures, including attorneys fees, fines, penalties or other legal costs, on demand.
LAST UPDATED: NOVEMBER 29th, 2023