Welcome to Nimiq Pay

Provided by Nimiq Network Ltd. ("we," "us," "our," or the "Company").

Safeguarding the privacy and safety of our users is of paramount importance to us. This Privacy Policy elucidates our practices regarding the collection, use, and protection of personal data through the Nimiq Pay App. We are committed to adhering to stringent data protection laws, including the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA)/California Privacy Rights Act (CPRA), Personal Information Protection and Electronic Documents Act (PIPEDA), and others, ensuring the highest standard of privacy and security.

Personal Data We Collect

We obtain this data directly from you, through automated technologies, and from third-party sources when necessary.

We may collect Personal Information to:

What are Cookies?

Cookies are small text files that are placed on your device when you visit a website. They are widely used to make websites work more efficiently and enhance your user experience. Cookies can also provide information to website owners about how users interact with their websites.

Cookies are utilized for optimal functionality and user experience. They assist in remembering preferences and tracking app usage. Users have the option to manage cookie settings through their browser.

Types of Cookies We Use

We use the following types of cookies:

Third-Party Cookies

We may use third-party services that may set cookies on our behalf to provide certain features or functionalities. These third parties may include analytics services, advertising networks, and social media platforms. Please note that we do not have control over these third-party cookies.

Retention & Deletion

Personal Data is retained only as long as necessary for the purposes outlined. We follow strict protocols for securely deleting or anonymizing personal data when it's no longer needed.

You have the right to request the deletion of your personal data in accordance with applicable laws. To exercise this right, please refer to the "Your Rights for Your Personal Data" section of our privacy policy.

Your Rights for Your Personal Data

Your rights to access, correction, deletion, and restriction to use or share your Personal Information.

Under applicable data protection law, you have certain rights to how your Personal Information is collected, stored, used and shared.

We recognize the importance of your ability to control the use of your Personal Information and provide several ways for you to exercise your rights to access (right to know), correction, deletion (erasure), and to restrict certain information (right to opt out of sharing and right to limit use and disclosure of sensitive personal information).

We will not deny you services, charge you different prices, or provide you with a different level of service solely for exercising your privacy rights.

California also offers a right to opt out of “Selling” and “Sharing” Personal Information. Global Privacy Control setting is a browser setting that notifies website owners of users' privacy preferences regarding selling or sharing their personal information. We do not respond to these settings because we do not sell or share data.

How do you exercise your rights?

If you, or an authorized agent, want to exercise any of your rights relating to your personal information, contact us or submit your request from [email protected]

To ensure the security and privacy of your information, if you or an authorized agent submit a request, we will initiate an identity verification process before responding. We may request information necessary to reasonably confirm your identity, comparing the details provided against our internal business records. If we are unable to verify your identity, regrettably, we won't be able to fulfill your request. In the event of a denial, whether partial or complete, you have the right to appeal. We will furnish you with details about the appeals process in such instances.

Do We Disclose Personal Information, and why?

We do not sell Personal Information to third parties for money or share your personal information for cross-context behavioral advertising, including any sensitive personal information.

However, we will disclose your Personal Information with third parties to help us provide services, protect our customers from risk and fraud, market our products, and comply with legal obligations.

In addition, we may disclose Personal Information with:

Authorities, when accompanied by a subpoena or other legal documentation that requires us to respond. Such authorities include courts, governments, law enforcement, and regulators. We may also be required to provide other third parties information about your use of our Services, for example to comply with card association rules, to investigate or enforce violations of our user agreement or to prevent physical harm or illegal activity.

Other financial institutions, to jointly offer a product, such as credit, cashback, etc.

Card networks and payment processors, to facilitate payment processing or to add cards to your electronic wallet.

Connected Accounts: This includes social media accounts that you have requested us to link, as well as instances where you link an account with another bank, financial institution, card account, or aggregator as part of your engagement in open banking. This connection allows us to verify the adequacy of funds and confirm your ownership of the account.

How Long is Your Personal Information Retained?

We keep personal information for a duration necessary or permissible based on the purpose for which it was collected and in accordance with relevant laws.

Personal Information utilized for the ongoing relationship between you and us is preserved for the duration of the relationship, plus an additional 10 years, unless an extended period is required, such as:

Biometric data is retained for as long as required or permitted based on the purpose of collection, and no more than 3 years after the closure of your account, unless otherwise mandated by applicable law.

How We Safeguard Your Personal Information:

We employ a comprehensive approach to protect your Personal Information, incorporating technical, physical, and administrative security measures. These measures are specifically designed to reasonably safeguard your information from loss, misuse, unauthorized access, disclosure, and alteration. Our security protocols encompass the use of firewalls, data encryption, strict physical access controls to our data centers, and robust authorization controls for information access.

While we are committed to ensuring the security of our systems and services, it's essential for you to play a role in securing and preserving the privacy of your password(s) and account/Connect profile registration information. Additionally, please verify that the Personal Information we hold about you is accurate and up-to-date.

It's important to note that we cannot assume responsibility for the protection of Personal Information shared with a third party based on a linked account connection that you have authorized. Your diligence in managing linked account connections is crucial for the security of shared information in such instances.

Merger or Acquisition

In events like mergers or acquisitions, personal data may be transferred, ensuring the continuity of privacy protections under a new policy.

Children's Privacy

Our Services are not intended for individuals under the age of 16 or those not legally permitted to use them. We consciously refrain from collecting information, including Personal Information, from such individuals. In the event that we become aware of inadvertently collecting Personal Information from someone ineligible to use our Services, we will promptly delete it, unless there exists a legal obligation requiring us to retain such data.

Changes

This Privacy Policy may be updated periodically. Users will be notified of significant changes and prompted to review and accept the updated terms.

Contact Us

For inquiries or requests regarding your data, please contact us through the details provided in this section.

Note on Sensitive Personal Data

We explicitly state that we do not collect any sensitive or personal information beyond what is necessary for the functioning of our app and services.

California Privacy Notice of Collection

Under the laws of California and certain other US states, we are required to provide you with the following additional information about: (1) the purpose for which we use each category of "personal information" we collect; and (2) the categories of third parties to which we (a) disclose such personal information for a business purpose, (b) "share" personal information for "cross-context behavioral advertising," and/or (c) "sell" such personal information.

Under California law, "sharing" is defined as the targeting of advertising to a consumer based on that consumer's personal information obtained from the consumer's activity across websites, and "selling" is defined as the disclosure of personal information to third parties in exchange for monetary or other valuable consideration. We do not sell or share your Personal Information, including any Sensitive Personal Information. We also do not sell or share and have no actual knowledge that we have sold or shared any Personal Information of anyone under 16 years of age.

(1) the purpose for which we use each category of “personal information” we collect; and (2) the categories of third parties to which we (a) disclose such personal information for a business purpose, (b) “share” personal information for “cross-context behavioral advertising,” and/or (c) “sell” such personal information.