When you sign up for an account on the Freedx Platform, we will need to collect (and in some cases store) some or all of the following details about you:

• (a)Personal identification details such as name, residential addresses (current), date of birth, email address, telephone number(s), tax number (if applicable), ID document such as passport, driving licence or ID card, image or photo of you;
• (b)Corporate details such as legal name, registration details, tax number (if applicable), address, business description, and beneficial owner information;
• (c)Details about your transactions on the Freedx Platform, such as the name of the sender, the name of the recipient, the amount, currency preferences, and payment method;
• (d)Financial details such as credit/debit card numbers and bank account information, income/net assets/wealth verification statements;
• (e)Information required under the applicable laws;
• (f)Other details such as IP address and geolocation.

We will use this information for the purposes of processing your application. If your application is approved, we will also use this information to create and manage your Freedx account and provide the Services you have requested. If you have consented, we may also provide you with information about our products and services that may be of interest to you, from ourselves and third parties, and future announcements by email.

You will not be able to create a Freedx account or order Services from us without providing this information.

<div class="sub-heading">Additional Information</div>
<p>We may also collect additional information from you, including any information you provide through communications with our Customer Support team or when interacting with our chatbots.</p>

Your personal data will only be used by us or the parties we work with in order to provide you with the Services we are lawfully able to offer. The purposes for which we will use your personal data include:

• (a)Where it is necessary for the performance of the contract with you or to take steps to enter into it. For example, when we need to verify your identity, to provide you with Services, communicating with you, to provide you with updates on the status of your account, complaints handling, and dealing and notifying you of any changes to this statement.
• (b) It is necessary for our legitimate interests or that of a third party. This includes:
  • (i)to enhance and personalise your visitor experience and otherwise improve our Services;
  • (ii)to identify you when you contact us and to correspond and communicate with you;
  • (iii)for market research in order to continually improve the Services that we offer and deliver to you;
  • (iv)to verify the accuracy of data that we hold about you and create a better understanding of you as a client or visitor;
  • (v)creating a profile of you, which enables us to identify and personalise what products and services to offer to you for marketing purposes;
  • (vi)to administer our site, for website analysis and for internal operations, including troubleshooting, testing, statistical purposes;
  • (vii)for network and information security in order for us to take steps to protect your information against loss or damage, theft or unauthorised access;
  • (viii)for the detection and prevention of abuse, fraud, unauthorized use of the Services, violations of our terms or policies, or other harmful, illegal and criminal activities;
  • (ix)to protect our contractual or other legal rights and resolve disputes;
  • (x)for general administration including managing your queries and to send service messages to you.
• (c)It is necessary for compliance with a legal obligation. This includes, but is not limited to, when you exercise your legal rights under data protection law, to verify your identity and comply with anti-money laundering or sanctions laws/regulations, for the establishment and defence of our legal rights and for compliance with our legal and regulatory responsibilities, law enforcement, governmental, and other legal requests, court orders or for disclosure to tax authorities.
• (d)You have given us your consent to use your personal data in certain ways, including when you request that we disclose it to a third party and for direct marketing communications (by us and the third parties named when we asked for your consent).
• (e)In order to process your Freedx account creation we may need to perform Fraud and money laundering checks before and whilst we continue to provide Services to you. This may involve sharing your personal data with fraud prevention agencies who will also process your personal data, but only on the basis that we have a legitimate interest in preventing fraud and money laundering, and to verify identity, in order to protect our business and to comply with laws that apply to us. We, and fraud prevention agencies, may also enable law enforcement agencies to access and use your personal data to detect, investigate and prevent crime.

You have the right at any time to ask us, or the third parties we work with, to stop contacting you or passing your details to others for marketing purposes. Please contact us for further information.

We work with third parties to help us provide the Services, and for this purpose, we need to share certain information with these third parties if we believe that sharing your personal data is in accordance with, or required by, any contractual relationship with you and us, applicable laws, regulations, or legal process. We may share your personal data with the following third parties:

• (a)Freedx Affiliates: Your personal data that we collect, and process may be transferred between Freedx companies as a normal part of conducting business or offering Services to you.
• (b)Industry Partners and Government Authorities: We may share your personal data with regulators, courts, tax authorities, law enforcement, government agencies to (i) comply with our information sharing and reporting obligations under the Travel Rule, (ii) respond to court orders, law enforcement and regulatory requests as prescribed by the applicable laws and regulations, (iii) detect, investigate, prevent violations, abuse, fraud or other illegal activity or security or technical issues, (iv) protect the rights and safety of our clients, Freedx and Freedx Affiliates.
• (c)Third-Party Service Providers: We collaborate with third party-service providers who assist in providing our Services. The services of such third parties include, but are not limited to, identity verification, fraud prevention, payment processing, analytics, advertising, and promotions. Any personal data that we share with them is limited to the purpose of performing their contractual obligations and must be processed in accordance with our instructions and applicable data protection regulations.
• (d)Corporate Reorganization: In case we enter into transactions for the sale or acquisition of any business or assets, we may need to transfer and/or share client personal data to the prospective buyer or seller.

To facilitate our operations, Freedx may transfer your personal data to its Affiliates and third-party service providers throughout the world. These third parties are contractually obliged to protect the confidentiality and security of your personal data, in compliance with the applicable data protection regulations.

Freedx undertakes appropriate technical, organizational measures and contractual safeguards to ensure that such transfer complies with the applicable data protection regulations.

As part of the processing of your personal data, decisions may be made by automated means. This means we may automatically decide that you pose a fraud or money laundering risk if:

• (a)our processing reveals your behaviour to be consistent with that of known fraudsters or money launderers; or is inconsistent with your previous submissions; or
• (b)you appear to have deliberately hidden your true identity.

You have rights in relation to automated decision-making: if you want to know more, please contact us using the details in Section 14 below.

If we, or a fraud prevention agency, determine that you pose a fraud or money laundering risk, we may refuse to provide the Services you have requested, or we may stop providing existing Services to you.

A record of any fraud or money laundering risk will be retained by the fraud prevention agencies, and may result in others refusing to provide services, financing or employment to you. If you have any questions about this, please contact us using the details in Section 14 below.

Other than the automated processing set out above, we shall not carry out solely automated decision-making using your personal data.

When you contact us, we will need to collect personal data about you to verify your identity before we disclose any information to you for data security purposes. We will be unable to deal with your query unless you provide the information we request. We may also collect any other personal data you choose to provide to us when communicating with us. We will only use that personal data for the purposes of dealing with your enquiry.

We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal data for an unrelated purpose, we will usually notify you and we will explain the legal basis which allows us to do so.

We protect your data by using reasonable physical, technical, and administrative security measures to ensure information security, including encryption of the Freedx Platform communications; required two-factor authentication; periodic review of our personal data collection, storage, and processing practices; and restricted access to your personal data on a need-to-know basis for our employees and vendors who are subject to strict contractual confidentiality obligations.

Cookies are small text files that are placed on your device (e.g. computer, mobile device) when you visit a website and give permission for that site to recognise your device. Cookies store information about a user's visit, which may include the content viewed, language preference, time and duration of each visit to the website.

Cookies are widely used in order to make websites work more efficiently, such as letting you navigate between pages efficiently, remembering your preferences, as well as providing information to the website owner.

We may use cookies to enhance your experience on our website, identify users, remember user preferences, as well as to collect and analyze website usage data related to users and patterns.

Any changes we make to our policy will be made available on the Freedx Platform and, where appropriate, notified to you by e-mail. Please check for updates from time to time.

We will retain your personal data for as long as you continue to use our Services. Thereafter, we may retain your information for an additional period as is permitted or required under applicable laws to comply with our legal obligations, such as compliance with AML/KYC laws, financial regulatory obligations, information preservation requirements, and other purposes communicated to you.

Data protection laws provide you with the following rights:

• (a)Right to access: This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
• (b)Right to rectification: This enables you to have any incomplete or inaccurate information we hold about you corrected.
• (c)Right to erasure: This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have exercised your right to object to processing (see below). However, we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you.
• (d)Right to object or restrict: This enables you to object to the processing of your personal data where we are relying on a legitimate interest and there is something about your situation which makes you want to object to the processing on this ground. You also have the right to object where we are processing your personal data for direct marketing purposes.
• (e)Right to withdraw consent: This enables you to withdraw your consent at any time, to the extent that processing of your personal data is based on your consent. The lawfulness of our processing of your personal data before you withdraw your consent will not be affected by such withdrawal.
• (f)Right to portability: This enables you to request a copy of your personal data which you have provided to us, in a structured, commonly used and machine-readable format and to transfer it, or to require us to transfer it directly, to another controller.
• (g)Right to lodge a complaint: This enables you to lodge a complaint about our practices with respect to your personal data with the State Cybersecurity Agency of El Salvador or the data protection authority in the location in which you reside or believe a data breach has occurred.

You will not have to pay a fee to access your personal data (or to exercise any of the other rights above). However, we may charge a reasonable fee if your request for access is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances.

We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is another appropriate security measure to ensure that personal data is not disclosed to any person who has no right to receive it.

If you are unhappy about how your personal data has been used, please refer to our complaints procedure which is available by contacting us.

If you have any questions about this policy, you can contact us in the following ways:

We may change this Privacy Policy from time to time. Any changes to this Privacy Policy will be posted on our website. The date the Privacy Policy was last updated is identified at the top of this policy.