Privacy policy

Overview and Scope

CONNECTRO PAYMENTS LIMITED (on our website to “we”, “our” or “us”) respects your privacy and protects your information. As a financial services provider we take data security extremely seriously and we make sure we have appropriate security measures in place to prevent your personal data from being accidentally lost and from unauthorized use and access. Please read this Privacy Policy carefully as it explains our practices regarding your personal data and how we will treat it.

This Privacy Policy explains how we collect, process, and safeguard your data in accordance with Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA), as well as the European Union’s General Data Protection Regulation (GDPR).

For applicable data protection legislation, the data controller is CONNECTRO PAYMENTS LIMITED.

If you have any questions or concerns regarding any part of our privacy practices, feel free to reach out to us using the contact details provided below:

CONNECTRO PAYMENTS LIMITED

Address: 373 - 901 3RD STREET WEST NORTH VANCOUVER BC V7P 3P9, CANADA

E-mail: data.privacy@connectro.com

Information we collect and process about you

1. We may collect and process the following personal data about you:
   1. Information you give us. You may give us information about you when you register with our website www.connectro.ca (our website) or by communicating with us by phone, email or otherwise. This also includes information you provide when you subscribe to our services, provide us with feedback, participate in surveys, and when you report a problem with our website. The information you give us may include your name, address, email address, phone number, date of birth, identity documents, username (or similar identifier), job title and company information. If you engage with us through social media then this may also include your social media contact details, such as your LinkedIn address or Twitter username ext.
   2. We gather information pertaining to your interactions with us, whether it's through phone conversations, emails, postal communication, in-person interactions, or any other means. Additionally, we accumulate engagement metrics data, encompassing details such as the manner, timing, and frequency of your interactions with us, as well as how you engage with communications from our end. Moreover, we capture data regarding the manner, timing, and frequency of your use of our products and services.
   3. Information we collect about you if you use our website or interact with us over the internet, including via social media. Each time you visit our website or interact with us we may automatically collect the following information: (a) technical information, including the Internet protocol (IP) address used to connect your device to the Internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform; (b) information about your visit, including the full Uniform Resource Locators (URL) clickstream to, through and from our website (including date and time); products you viewed or searched for; page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page and any phone number used to call our customer service number.
   4. Information we collect about you from publicly available sources. This may include information available from social media (depending on your settings and the applicable privacy policies), including social media engagement metrics such as numbers of connections, followers and clicks, and information from company registers.
   5. Information we receive from other sources. We may receive further information about you if you use any of the services we provide. We work closely with third parties (including, for example, business partners, service providers, identity verification providers) and may receive information about you from them. We may combine information we receive from these other sources with information you give to us and information we collect about you.
   6. We may monitor or record telephone conversations or other communications between you and us and keep recordings or transcripts of them and, if you contact us, we may keep a record or copy of that correspondence.
   7. Furthermore, we gather, employ, and share aggregated data, including statistical or demographic data. such aggregated data may stem from your personal information; however, it is not categorized as personal data in alignment with the Data Protection Legislation. This classification holds because it lacks the capability to directly or indirectly establish your identity. In scenarios where we amalgamate aggregated data with your personal data in a manner that allows identification, we handle the amalgamated data as personal data. We proceed to utilize and process this combined data in compliance with the stipulations outlined within this Privacy Policy.
2. Cookies
   1. We and our service providers collect information about your use of our website from cookies.
3. Purposes and legal basis for using your personal data
   1. Where you have requested that we provide a specific product or service to you, or you otherwise make use of those products or services, we will process your personal data in order to perform our contract with you and provide that product or service.
   2. We also use the personal data we hold about you to pursue our legitimate interests in providing and marketing our products and services to you, improving our website, services and interactions with you and other users of our products and services in the following ways:

      - administer your account and relationship with us and to communicate with you by telephone, mail, email, text (SMS) message, instant messaging or other electronic means;

      - verify your identity as part of our identity authentication process and to prevent, detect and prosecute fraud and crime and comply with legal or regulatory requirements;

      - provide you with information about the products and services that you request from us;

      - provide you with information about other products and services we offer that are similar to those that you have already purchased or enquired about;

      - provide you with information about products or services we feel may interest you or be best for you;

      - your data may be shared with product or service providers to validate if you are an existing customer (which may affect whether you can be accepted for one of their products) or for fraud prevention purposes. The product or service provider does not have permission to use these data for any other purpose including marketing.

      - notify you about changes to our services;

      - ensure that content from our website is presented in the most effective manner for you and your device;

      - aggregate it on an anonymous basis with other data for data analytical and reporting purposes;

      - to administer our website and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;

      - to build up a picture of your interests so that you don’t miss information relevant to you when you visit our website;

      - to improve the service we offer you and to try and ensure that you get the best from our website in the short term, for example by providing you with relevant search results;

      - to improve the service we offer you and to try and ensure that you get the best from our website over the longer term, for example by understanding how you and other users interact with our website

      - to allow you to participate in interactive features of our service, when you choose to do so;

      - as part of our efforts to keep our website safe and secure;

      - to measure or understand the effectiveness of advertising we serve to you and others, and to deliver relevant advertising to you;

      - to make suggestions and recommendations (both through the website and other channels, such as email) to you and others about products or services that we think may interest you or them based on your and their usage patterns both on our website and in relation to our communications with you and them on other channels (such as email);

      - for training and quality purposes;

      - to check any instructions you give to us and for the purposes of investigating any complaint you may make, or as evidence in any dispute or anticipated disputes between you and us.

   3. In some cases we may also use the personal data we hold about you to comply with our legal obligations, or enter into or perform a contract with you.
   4. Where we have your consent, we may also send you direct marketing communications (for example, by email). You can withdraw this consent at any time as described in section 5 below.
4. Whom your data can be disclosed to
   1. Disclosure of your data to others may be necessary to ensure the smooth provision to you of the products, services and information you request. Your data may be disclosed to the other entities as described below.
   2. We may share your personal information with any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries.
   3. We may share your information with selected third parties including:

      - Fraud prevention agencies, to prevent crime and trace those responsible;

      - Identity verification providers, to comply with legal or regulatory requirements;

      - Business partners, suppliers and sub-contractors for the performance of any contract we enter into with you;

      - Analytics and search engine providers that assist us in the improvement and optimization of our website;

      - IT and software providers who supply us with our IT infrastructure for the provision of our services and administering our business (including our internal and external communications) and who also help us manage our customer and contact databases, customer relationships and marketing.

   4. We may disclose your personal information to third parties if:

      - we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets;

   5. We have processes and systems that protect our customers and ourselves against fraud and other crime. The information associated with customers can play a pivotal role in thwarting criminal activities and tracking down those responsible. To this end, we may collaborate with fraud prevention agencies, necessitating the sharing of your personal information. In instances where fabricated or incorrect information is furnished, leading to the identification of fraud, the particulars of such fraudulent activities will be relayed to these agencies. Furthermore, law enforcement entities may access and utilize this data. Moreover, other organizations might also gain access to and employ this information with the aim of preventing fraud and money laundering. This could encompass tasks such as scrutinizing details within applications for financial services, or assessing particulars of job applicants and employees.
   6. We and other organizations may access and use the information recorded by fraud prevention agencies from other countries.
   7. We review all our relationships with third parties carefully so that we can be sure as possible that their practices match our own commitments to you relating to privacy and security. We also comply with the Data Protection Legislation in our dealings with these third parties to ensure that your information is appropriately protected.
5. Direct marketing and how you can change your preference
   1. Where we have your consent we may send direct marketing communications to you, including by email, telephone or SMS or mail.
   2. Whenever you receive direct marketing from us you will be told how you can unsubscribe so that you no longer receive it. When we communicate with you via email you will also be given the opportunity to set or amend any preferences that you have indicated to us.
6. Where we store and transfer your data
   1. Where we store your information ourselves. While most of our data processing takes place within Canada and the European Economic Area (EEA), there may be instances where we need to transfer your information to countries outside of these regions. In such cases, we ensure that any international transfers of your personal data are carried out in full compliance with relevant data protection laws. This includes implementing necessary safeguards and contractual protections to maintain the security and privacy of your data.
   2. Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our website; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorized access, loss or damage.
7. How long we keep your information for
   1. How long we keep your information will depend on the purpose for which we use it and so may vary. We will only retain your information for as long as is necessary for the purposes set out in this Privacy Policy and as is necessary to comply with our legal obligations. We do not keep more information than we need for the particular purpose.
   2. Where we have provided you with a product or service we will keep an archived record of your personal data for a period of up to 6 years after termination (unless a longer period is prescribed by law) for the purposes of responding to legal disputes and legal or regulatory enquiries or investigations only, but will not use this data for any other purpose.
   3. In order to ensure that we provide reliable and effective products and services, and to comply with our regulatory obligations, we regularly make back-up copies of our data. If we have provided any products or services to you then this will include your personal data. Where we delete your personal data from our systems, for whatever reason, then a copy may be retained in our data back-ups for a period of up to 90 days afterwards. These are kept securely and only accessed in order to delete old versions or in the event of an emergency which means we have to utilize a back-up copy to reinstate data on our active systems. Where we have to do this we will work to ensure as soon as we reasonably can that the copy of the data that has been used to reinstate data on our active systems is updated to take account of any previous amendments and deletions regarding your personal data.
   4. If you ask us to stop sending direct marketing communications to you, we will keep the minimum amount of information necessary (such as your name and email address) to ensure that we are able to adhere to your request. We also routinely seek to minimize the amount of personal data we hold where any marketing contact is deemed inactive. We deem a contact to be inactive if we have not been able to identify any engagement (e.g. through opening an email or visiting our website) for a period of 12 months or if an email is not delivered due to a hard bounce. In such circumstances we will anonymize all relevant data for aggregation purposes, with the exception of an email address.
8. Third party websites
   1. Our website may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
9. Your rights
   1. Under the Data Protection Legislation, you have certain rights in respect of the personal data we hold about you. These may include rights to: request a copy of the personal data that we hold, request that we correct personal data if it is inaccurate, request that we erase or block your personal data, and to object to our processing of your personal data. These rights are limited in some situations. For example, if we have a legal requirement or a compelling legitimate ground we may continue to process your data even where you request its deletion.
   2. If you would like to exercise any of these rights, please contact us using the details in the Contact section below.
   3. You also have the right to make a complaint if you feel your personal data has been mishandled. We would encourage you to contact us in the first instance but you are also entitled to complain directly to the local data protection authority.
10. Changes to our privacy policy
    1. Any changes we may make to our Privacy Policy in the future will be posted on this page and, where we consider it appropriate, notified to you by email. Please check back frequently to see any updates or changes to our Privacy Policy.