Start a payment

Vavita / Privacy policy

Privacy policy

Last Updated: 02/09/2024

1. Introduction

Vavita, a trading name of Istimar Tech Limited ("we", "us", "our"), is dedicated to protecting your personal data and ensuring transparency in how we handle it. This privacy policy explains our practices concerning the collection, use, processing, and sharing of your personal information when you use our cross-border remittance services. Our services are intended for individuals aged 18 and over. By using our services, you agree to the terms of this policy.

2. Data We Collect

We may collect various types of data to provide and improve our services, depending on how you interact with us, including:

  • Personal Information: Name, contact details, date of birth, nationality, and other identifying information
  • Financial Information: Bank account details, payment history, and transaction data
  • Identification Data: Government-issued ID numbers and scans, passport copies, address history and utility bills for verification
  • Technical Data: IP addresses, device identifiers, browser type, operating system, log files, and other information such as how you interact with our products and emails, etc
  • Usage Data: Details of transactions, pages visited, and interactions with our website and app
  • Biometric Data: Facial recognition data and other biometric identifiers for secure verification (where applicable)
  • Communication Records: Emails, chat messages, and customer service call recordings
  • Marketing Preferences: Information about your preferences for receiving marketing communications

3. How We Collect Data

  • Directly from You: When you register, make transactions, or contact customer support
  • Automatically: Through cookies and tracking technologies when you visit our website or use our app
  • From Third Parties: Such as banks, payment processors, and identity verification services

4. Purpose of Data Processing

We process your personal data for the following purposes:

  • Service Delivery: To execute transactions, manage your account, and provide customer support
  • Identity Verification: To comply with KYC and AML regulations
  • Security and Fraud Prevention: To monitor and prevent fraudulent activities and ensure the security of our services
  • Legal Compliance: To meet our legal obligations under financial and data protection laws
  • Improvement of Services: To analyse usage patterns and enhance our service offerings.
  • Marketing and Communications: To send you information about our services

5. Legal Basis for Processing

We process your personal data under several legal bases:

  • Consent: For marketing communications and processing non-essential data
  • Contractual Necessity: To fulfil our obligations in providing services to you
  • Legal Obligations: To comply with laws and regulations, including AML and KYC requirements
  • Legitimate Interests: For purposes such as improving our services, fraud prevention, and security

6. Data Sharing and Disclosure

We may share your personal data with:

  • Service Providers: Such as payment processors, cloud storage providers, KYC and AML service as well as identity verification services
  • Regulatory Authorities: As required by law, including disclosures for compliance with financial regulations
  • Business Partners: Who assist in providing our services, under strict confidentiality agreements

7. Data Security

We take data security seriously and employ various measures to protect your information, including:

  • Encryption: We use encryption during data transmission and at rest
  • Access Controls: Only authorized personnel have access to your data, based on a need-to-know basis
  • Regular Audits: Our security systems and practices are regularly audited to ensure compliance with industry standards
  • Security Protocols: We employ advanced threat detection and response systems to protect against unauthorized access and data breaches

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy and to comply with legal, regulatory, and operational requirements. Specific retention periods may vary depending on the nature of the data and the legal requirements applicable to our services.

9. Your Rights

Your rights regarding your personal data will depend on where you are based when you access the service. You may, for example, have the following rights:

  • Right to Access: You can request access to the personal data we hold about you
  • Right to Rectification: You can request corrections to any inaccurate or incomplete data
  • Right to Erasure: You can request deletion of your data, subject to legal retention requirements
  • Right to Object: You can object to the processing of your data based on our legitimate interests
  • Right to Restrict Processing: You can request a restriction on processing under certain conditions
  • Right to Data Portability: You can request the transfer of your data to another service provider in a structured, commonly used, and machine-readable format
  • Right to Withdraw Consent: Where we rely on your consent to process your data, you can withdraw it at any timeTo exercise your rights or ask any questions, please contact us at team@vavita.com. We will respond to your request within the legal time limits.

10. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website, analyse usage patterns, and deliver personalized content. You can manage your cookie preferences through your browser settings or through our website. For more detailed information, please refer to our Cookie Policy.

11. Automated Decision-Making and Profiling

We may use automated decision-making processes to assess your application, verify your identity, and detect fraud. These processes are designed to protect both you and us from security threats and to ensure compliance with regulatory requirements. If you are affected by an automated decision, you have the right to request a review of the decision by a human.

12. International Data Transfers

As a global business, we may transfer your personal data to countries outside the UK or EEA. When we do so, we ensure that appropriate safeguards are in place, such as standard contractual clauses, to protect your data in accordance with this policy and applicable law.

13. Data Retention and Deletion

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, or reporting requirements.

14. Changes to This Privacy Policy

We may update this policy periodically to reflect changes in our practices, legal requirements, or operational needs. We encourage you to review this policy regularly to stay informed about how we are protecting your data.

15. Contact Information

If you have any questions or concerns about this privacy policy or our data protection practices, please contact us at team@vavita.com.

16. Complaints

If you believe that we have not addressed your data protection concerns adequately, you may have the right to lodge a complaint with your local data protection authority, depending on where you are based.