Effective Date: 11 June 2020

Ecompliance.ltd respects the privacy and personal data of users, customers and any third parties. At ecompliance.ltd, we believe that the security of personal and other data is our top priority that we must adhere to. In this Privacy Policy we describe what data is being collected and how it is used in connection with the Services performed on the Website, including ID and identity verification, document verification as well as professional services (as defined in our Terms of Use). We also describe how we process and secure personal and anonymized data.

This Privacy Policy is the integral part of the Terms of Use of Ecompliance.ltd, having its legal address at Office Suite 24, Block 6, Water Gardens, Waterport Wharf, GX11 1AA, Gibraltar. For the purpose of this Privacy Policy we use "Ecompliance.ltd", "we" or "us" to refer to the owner and operator of the Website.

This Privacy Policy is the binding legal agreement between you, visitor of our Website and/or user of our Services as defined in the Terms of Use (the "Customer", "you"), and Ecompliance.ltd.

By accessing, browsing and using the Website and/or ordering and using the Services, the Customer irrevocably accepts and agrees to be bound by this Privacy Policy. If you do not agree to this Privacy Policy, any applicable laws and regulations, you shall not use or access this Website and the Services. Please read them carefully.

This Privacy Policy does not control or apply to the practices of third parties that we do not own, manage or control.

1. The Information That We Collect
   1. Ecompliance.ltd collects "personal data" of users and customers in connection with the Services (as defined in the Terms of Use). Personal data means information that refers to an identified or identifiable person. The examples of such information can be name, email, personal address, ID card image, etc.
   2. Ecompliance.ltd also collects "anonymized information" which does not relate to an identified or identifiable person as it is anonymous and is not personally identifiable information. This information is collected for Ecompliance.ltd.io's own purpose as described below.
   3. We verify identities and other information on behalf of and as instructed by our Customers under applicable data protection laws, including, without limitation, the EU General Data Protection Regulation. Our Customers can be individuals and legal entities who instruct us to carry out identity, documentation and other information verifications. Based on such verifications we may obtain certain personal and other information. We share the results of such verifications with the Customers that instructed us to do so. The Customer solely decides how to proceed with the information that was obtained and under its own rules and policies. We obtain verification information from our service providers, that provide professional services on ID and documentation verification in various countries. These service providers may check whether an individual is not in any sanctions lists or is not suspected in any illegal activities, including, without limitation, money laundering or fraud activities if the Customer instructed us to do so. We instruct the service providers to provide with the verification results as directed by our Customers.
   4. Ecompliance.ltd collects personal data in a number of ways depending on whether a user visits our Website for searching or browsing, whether the Customer shares its own personal data or whether the Customer orders the Services.
   5. When you visit our Website anonymously for the purpose of browsing or searching for information, the Website processes anonymized information. This anonymized information can be: type of browser and operating system you have used; IP (Internet Protocol) address of the device which has accessed it; date and time of your visit to the Website; the pages accessed and documents downloaded; your top-level domain name (for example .com, .cx, etc.); the address of your server; the previous website visited; the average duration of page view; the navigation behaviour and preferences of the user.
   6. The Customer may share its own personal data with us in the following ways:
      • when the Customer contacts us to order the Services or communicate with us with any enquiries, the Customer may share such information as name, email address;
      • when the Customer provides an information for identity verification;
      • when the Customer pays for the Services, the Customer may share its financial information such as debit or credit card details;
      • when the Customer subscribes to our newsletters;
      • when the Customer provides any other personal data to Ecompliance.ltd.
   7. When the Customer orders the Services, we may obtain ID card image or other document image, name, physical address, email address, telephone number, driver's license number and its image, passport number and passport image, utility bill, insurance card, date of birth, etc.
   8. By submitting any personal data, you confirm that you have the right to authorise us to process it on your behalf in accordance with this Privacy Policy.
2. Cookies
   1. Similar to other websites, we may use cookies and similar technologies. Cookies are used to obtain information about user behavior during the use of the Website and Services. A cookie is a a small text file with a unique identification number that identifies a user's browser. It is generated by a web page server, which is basically the computer that operates a web site. Cookies are not computer programs or codes, they are not used to transfer viruses. Modern versions of browsers allow users to reject or opt out of receiving cookies.
   2. The cookies on the Website may be of the following categories:
      • Strictly necessary cookies – these are strictly essential cookies that enable you to browse the Website and use its tools and features. With this type of cookies, you may log into your account on the Website and access other secure areas of the Website. Without them you may not be able to use our Website partially or in whole.
      • Functionality cookies – these cookies are used to enhance the Website and its functionality. These cookies remember your personal choices made when you browse and access the Website (like your language preference, location). The information these cookies collect may be anonymous and they cannot track your browsing activity on other websites.
      • Analytical cookies – these are not personally identifiable cookies. They allow users to navigate through the pages and while navigating, these cookies collect information about which pages you visit and how you use online services. This allows us to improve our services and your user experience with us. We may share this information with third parties for this purpose.
   3. We use cookies in order to identify user behavior on the Website, to allow users navigate through the Website pages, to remember user's preferences, to enable security features and to improve the Website and its tools.
   4. Though it is possible to delete or reject cookies, such deletion or rejection of cookies may prevent you to access or use certain features or areas of the Website.
3. The Use of Personal and Anonymized Data
   1. Ecompliance.ltd uses personal data only as instructed by the Customer that uses the Services, provided that we always comply with applicable laws.
   2. Ecompliance.ltd may use personal data to process other requests: to complete your transaction, to answer your requests, to send email responses, to send account confirmation by email, to create your user account.
   3. The anonymized information is used only for general purposes, such as technical improvements, statistical and marketing analysis.
4. Legal basis
   1. Ecompliance.ltd collects and processes personal data only if Ecompliance.ltd has lawful basis. Lawful basis includes:
      1. consent (where you have given consent);
      2. contractual obligations (when the processing is necessary to perform our obligations under a contract);
      3. legitimate interests;
      4. compliance with applicable law (when we follow applicable personal data law in order to be complied with).
   2. Where we rely on your consent to process personal data, you have the right to withdraw or decline your consent at any time and where we rely on legitimate interests, you have the right to object.
   3. The legitimate interests are:
      1. analysing and understanding user behaviour on the Website;
      2. providing with the Services ordered;
      3. processing billing and collecting fees;
      4. making improvements to the Website;
      5. enabling us to enhance, customise or modify the Services and communications;
      6. improving data security;
      7. determining whether marketing campaigns are effective.
   4. If you have any questions about the lawful basis upon which we collect and use your personal data, please contact us at info@eCompliance.ltd.
5. Minors
   1. Ecompliance.ltd does not knowingly collect personal information from anyone under 18 years of age. If we learn that we have collected the personal information of a child under 13, or equivalent minimum age depending on jurisdiction, we will take steps to delete the information as soon as possible.
6. Sharing your Personal Data
   1. Sharing your Personal Data
   2. Ecompliance.ltd may share your information with:
      1. service providers we work with to deliver the Services: in this case Ecompliance.ltd shares personal data only as directed by the Customer;
      2. legal and regulatory authorities, as required by applicable laws and regulations;
      3. analytical providers to conduct analytical research based on anonymized information;
      4. our employees;
      5. our auditors, lawyers, accountants, consultants and other professional advisors, where it is reasonably necessary for obtaining advice, professional services, or managing legal disputes.
   3. We will not disclose, sell, trade, or otherwise transfer your personal data to any third parties without your consent or unless otherwise stated in this Privacy Policy.
   4. This Privacy Policy does not apply to the practices of service providers and other third parties that we do not own or control, or individuals that we do not employ or manage.
7. Users' Rights in relation to its Personal Data
   1. You may access your personal data held by us to correct, update and remove inaccurate or incorrect data. You have the following rights:
      1. delete some or all personal data that we held about you;
      2. change or correct your personal data that we held about you;
      3. object to, or limit or restrict, use of your personal data;
      4. right to access and/or take your personal data: you can ask us for a copy of your personal information in machine readable form;
      5. access information we hold about you.
   2. If you want your personal data to be corrected, updated or removed, please contact us at info@eCompliance.ltd
8. Security of Personal Data
   1. Ecompliance.ltd uses certain technologies to protect personal data from any illegal use or access. Our employees, contractors and any business partners can access personal data on a need to know basis, and under a strict duties of maintaining confidentiality. We use encryption for sensitive information and we test our system on a regular basis to ensure we comply with industry practices and standards. While we strive to use commercially acceptable means to protect your personal data, no method of transmission over the Internet, or method of electronic storage, is completely secure, and we cannot guarantee absolute security of any data.
9. Data Transfer and Retention
   1. We retain your personal data primarily within the European Union and the European Economic Area.
   2. Countries where we process information may have laws which are different, and potentially not as protective, as the laws of your own country, though we will always comply with the applicable laws when we process any information.
   3. We retain your personal data for as long as we need it to fulfil the purposes for which we originally collect it or as needed to provide with the Services, except if required otherwise by law. If we retain personal data on behalf of the Customers, we immediately delete it once we completed the Service, unless otherwise required by applicable laws.
   4. In some cases we may determine the period of data retention based on the period we need to access the data for the provision of services, receiving payment, resolving customer support issues or for any other auditing or legal purposes.
   5. Retention periods may be changed from time to time based on regulatory requirements.
10. Merge of Company
    1. If Ecompliance.ltd merges with, or is acquired by, another company or organisation, or sells all or a portion of its assets, your personal data may be disclosed to our advisers and any prospective purchaser or any prospective purchaser's adviser, and may be among the assets transferred. However, personal data will always remain subject to this Privacy Policy.
11. Changes to the Privacy Policy
    1. We may need to update this Privacy Policy from time to time. As soon as the Privacy Policy is updated, Ecompliance.ltd will post an updated version of the Privacy Policy on the Website. The new Privacy Policy becomes effective from the moment it is posted or updated on the Website, unless otherwise indicated therein. We will send you an email notification to alert you about such changes.
12. Contact Us
    1. If you have any questions in relation to our Privacy Policy, please contact us at info@eCompliance.ltd