1.Introduction
This Privacy Notice sets out how personal information is collected, processed and disclosed in connection with the issue of Stablecoins.
As a result of a proposed or actual purchase of Stablecoins issued by the Issuer either made by you or a firm or entity with which you have a connection (the "Applicant"), your personal information and/or the personal information of other relevant individuals of the Applicant (such as directors, officers, employees or beneficial owners or persons connected to the foregoing) may be provided to the Issuer, the Administrator and/or any of their service providers and/or affiliates (where such relevant individuals and the Applicant shall together be referred to as the "Relevant Individual").
The Issuer will act as data controller in respect of its use of personal information provided by a Relevant Individual. In this Privacy Notice, "we" or "us" refers to the Issuer, its service providers and/or its affiliates (as applicable) and "you" refers to the Relevant Individual.
Service providers appointed by the Issuer may also process personal information relating to Relevant Individuals when conducting administrative and other activities relating to the Issuer and the issue of Stablecoins. Where they are required to do so in order to comply with their own legal and regulatory obligations, they will do so as data controllers in their own right.
This Privacy Notice sets out how the personal information of Relevant Individuals is collected, processed and disclosed in connection with the Applicant’s purchase of Stablecoins from the Issuer. Unless otherwise provided for in this Privacy Notice, terms and expressions defined elsewhere in this Information Memorandum shall have the same meaning where used in this Privacy Notice.
2.The personal information we process
We may collect various types of personal data about you, including:
- identification information (which may include your name, ID card and passport numbers, nationality, place and date of birth, gender, photograph and/or IP address and personal data relating to claims, court cases and convictions, politically exposed person (PEP) status, personal data available in the public domain and such other information as may be necessary for the Issuer and its service providers to perform their functions and comply with their CDD processes and discharge AML/CFT obligations);
- tax status information (which may include your tax residency, tax ID and/or your tax status);
- contact information (which may include postal address and e-mail address and your home and mobile telephone numbers);
- about your family relationships (which may include your marital status, the identity of your spouse and the number of children that you have);
- professional and employment information (which may include your level of education and professional qualifications, your employment, employer’s name and details of directorships and other offices which you may hold); and
- financial information, sources of wealth and your assets (which may include details of your shareholdings/beneficial interest in assets, your bank details and your credit history).
We may also collect and process personal data regarding people connected to you, either by way of professional (or other) association or by way of family relationship.
3.Where we obtain your personal information
We collect personal information from the following sources:
- personal information which data subjects provide to us or which is given to us by the Applicant, including but not limited to:
- information collected via the Issuer's website;
- such other forms and documents as we may request that are completed in relation to the administration/management of any purchase of Stablecoins from the Issuer;
- information gathered through client due diligence carried out as part of our compliance with regulatory requirements; or
- any personal information provided by way of correspondence with us by phone, e-mail or otherwise;
- personal information we receive from third party sources, such as:
- entities in which you or someone connected to you has an interest;
- your legal and/or financial advisors;
- other financial institutions who hold and process your personal information; and
- credit reference agencies and financial crime databases for the purposes of complying with our regulatory requirements; and
- personal information received in the course of dealing with advisors, regulators, official authorities and service providers by whom you are employed or engaged or for whom you act.
4.Why we collect your personal information
Lawful grounds for processing
We may hold and process your personal information on the following lawful grounds, namely where:
- the processing is necessary for our legitimate interests, provided your interests and fundamental rights do not override those interests;
- the processing is necessary to comply with our respective contractual duties to the Applicant including under the terms of the Issuer's website/this Information Memorandum and any supplemental agreements thereto;
- the processing is necessary to comply with our legal and regulatory obligations;
- (on rare occasions) where we have obtained consent to processing personal information for a specific purpose; and
- on rare occasions, where it is needed in the public interest.
Purposes of processing
Pursuant to paragraph 4.1 above, personal information may be processed for the following purposes set out below ("Purposes"):
- facilitating the administration/operation of the Issuer and the issue of the Stablecoins;
- communicating with data subjects as necessary in connection with the Applicant’s purchase/holding/redemption of Stablecoins;
- monitoring and recording telephone and electronic communications and transactions:
- for quality, business analysis, training and related purposes in order to improve service delivery; and
- for investigation and fraud prevention purposes, for crime detection, prevention, investigation and prosecution of any unlawful act (or omission to act);
- to comply with the listing, legal, regulatory, reporting and/or financial obligations of the Issuer or any legal or regulatory obligations of any service provider or functionary (or his/her employer) of the Issuer;
- disclosing your personal information (including your identity and interest in the Issuer) to any bank, financial institution or other third party lender providing any form of facility, loan, finance or other form of credit or guarantee to the Issuer;
- to enforce or defend the rights of the Issuer, or those of third parties who provide services to the Issuer;
- collecting, processing, transferring and storing customer due diligence, source of funds information and verification data under applicable anti-money laundering and terrorist financing laws and regulations; and
- liaising with or reporting to any relevant regulatory or taxation authorities.
5.Sharing personal information
We may share your personal information with our service providers, banks, financial institutions or other third party lenders, IT service providers, auditors and legal professionals as needed to fulfil the Purposes (noting that such service providers may share information between themselves where required, for example for client on-boarding processes). The group companies and third party service providers to whom your information may be transferred are based in the countries referred to in the Directory to the Information Memorandum.
Where we share your information with a third party, we require the recipients of that personal information to put in place adequate measures to protect it.
Where we transfer your personal information outside the European Economic Area, we will ensure that it is protected and transferred in a manner consistent with legal requirements applicable to the information. This can be done in a number of different ways, for instance:
- the country to which we send the personal information may be approved by the European Commission as providing adequate protection for personal data;
- by utilising a contract based on "model contractual clauses" approved by the European Commission; or
- where the recipient is in the US, it may belong to the EU-US Privacy Shield scheme.
In other circumstances, the law may permit us to otherwise transfer your personal information outside the EEA.
If you would like further information about the safeguards we have in place to protect your personal information, please contact the Administrator.
6.Retention of personal information
Your personal information will be retained by the Issuer and the persons referred to in paragraph 5 above for as long as required by the prevailing regulation:
- for the Purposes for which the personal information was collected;
- to establish or defend legal rights or obligations or to satisfy any reporting or accounting obligations; and/or
- as required by data protection laws and any other applicable laws or regulatory requirements.
7.Access to and control of personal information
You have the following rights (which are subject to certain conditions and exceptions) in respect of the personal information about you that we process:
- the right to access and port personal information;
- the right to rectify personal information;
- the right to restrict the use of personal information;
- the right to request that personal information is erased; and
- the right to object to processing of personal information.
You also have the right to lodge a complaint about the processing of your personal information either with us, with the Office of the Data Protection Commissioner in Jersey or the data protection authority in the EU member state of your usual residence or place of work.
Where we have relied on consent to process your personal information, you have the right to withdraw consent at any time.
If you wish to exercise any of the rights set out in this paragraph 7, please contact the Administrator.
8.Inaccurate or amended information
Please let us know as soon as possible if any of your personal information changes (including your correspondence details). Failure to provide accurate information or to update information when it changes may have a detrimental impact upon the Applicant’s purchase, transfer or redemption of Stablecoins. Failure to provide information where it is required for anti-money laundering or other legal requirements means that we may not be able to accept the Applicant as a Holder.
9.Questions
If you have any questions about this Privacy Notice or how we handle your personal information (e.g. our retention procedures or the security measures we have in place), or if you would like to make a complaint, please contact the Administrator.