Privacy Policy

1.1 Overview

This Privacy Policy explains how LapinoPay ("we," "us," "our," or "Company") collects, uses, discloses, and protects your personal data when you access or use our payment gateway platform, website, mobile application, or communicate with us in any manner. LapinoPay operates as a payment gateway that facilitates secure digital financial transactions for individuals and businesses, including crypto-to-fiat conversions, digital wallet integrations, and multi-currency payment processing. We are committed to protecting your privacy and ensuring transparency in how your information is handled in accordance with applicable data protection laws, GDPR where applicable, and international standards and industry best practices.

1.2 Our Commitment

At LapinoPay, we recognize that privacy is fundamental to building trust with our customers. We are dedicated to maintaining the highest standards of data protection and privacy compliance. This policy reflects our commitment to transparency, accountability, and respect for your privacy rights. We understand that financial services require the highest level of trust, and we work continuously to earn and maintain that trust through responsible data handling practices.

1.3 Scope of This Policy

This Privacy Policy applies to all personal data processing activities conducted by LapinoPay, including our payment gateway platform and website, mobile applications for digital financial transactions, payment processing services including crypto-to-fiat conversions and multi-currency transactions, digital wallet integrations and third-party payment method connections, customer support interactions and KYC/AML identity verification procedures, marketing and promotional activities, compliance and regulatory reporting, and business operations and administrative functions. The policy covers all interactions between you and LapinoPay, regardless of the channel or platform used, and includes data processing by our third-party partners and service providers as described in our Terms of Use.

1.4 Acceptance of Terms

By using our services, creating an account, or otherwise interacting with LapinoPay, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with any part of this policy, please do not use our services. Your continued use of our services following any modifications to this policy constitutes acceptance of those changes.

1.5 Policy Disclaimer

This Privacy Policy is a transparency notice describing our data practices. It does not constitute legal advice. Your rights may vary by jurisdiction. Where our Terms of Use provide for account termination, retention of data for legal purposes, or waiver of certain claims (e.g., Section 2 on account ban and zero tolerance), those terms prevail. We may modify this policy at any time; material changes will be communicated as required by law.

For the purposes of this Privacy Policy, "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to names, identification numbers, location data, online identifiers, and factors specific to physical, physiological, genetic, mental, economic, cultural, or social identity. "Processing" refers to any operation performed on personal data, whether automated or manual, including collection, recording, organization, structuring, storage, adaptation, retrieval, consultation, use, disclosure, dissemination, restriction, erasure, or destruction.

"Data Subject" refers to the individual to whom personal data relates, while "Data Controller" means LapinoPay, as the entity that determines the purposes and means of processing personal data. "Data Processor" refers to any person or entity that processes personal data on behalf of LapinoPay.

"Services" encompasses all products, services, features, and functionalities offered by LapinoPay through any channel or platform, and "User" or "Customer" refers to any individual who uses or accesses our services, visits our website, or otherwise interacts with LapinoPay.

3.1 Personal Information You Provide

We collect personal data that you voluntarily provide to us when you register for an account, use our payment gateway services, complete identity verification procedures, or communicate with us. This includes your full legal name and any aliases, date and place of birth, nationality and country of residence, gender and marital status, contact information such as email address, phone number, and mailing address, emergency contact details, and language preferences.

For KYC/AML compliance as outlined in our Terms of Use, we collect identity verification documents including government-issued identification such as passport, national ID card, or driver's license, proof of address documents like utility bills, bank statements, or rental agreements, source of funds documentation to verify the legitimacy of transactions, professional licenses or certifications where applicable, photographs for identity verification purposes, and biometric data where legally permitted and technically implemented.

LapinoPay does not directly collect or store sensitive financial information such as credit card numbers or payment card details, bank account numbers or routing information, or full financial account credentials. This sensitive financial data is collected and securely processed by our certified payment service providers and banking partners in compliance with PCI DSS and other relevant security standards. We receive only transaction confirmations, reference numbers, and necessary processing information to complete your transactions.

The financial information we do collect includes digital wallet addresses for cryptocurrency transactions when you choose to provide them, transaction history and reference numbers, transaction amounts and currencies, general source of funds documentation required for AML compliance, and tax identification numbers where required by law. Additionally, we may collect professional and business information including employment status and employer details, business registration documents, professional qualifications and certifications, industry classification and business purpose, and estimated transaction volumes and frequencies across our various payment processing services.

3.2 Information Collected Automatically

When you use our services, we automatically collect certain technical and usage information. This includes IP addresses and network information, browser type, version, and settings, operating system and version, screen resolution and device specifications, connection type and network provider, app version and usage statistics, and referring website or application.

LapinoPay does not collect or store sensitive device identifiers such as IMEI numbers, device ID or unique device identifiers, or advertising IDs. We focus on privacy-respecting analytics that prioritize user privacy while providing the technical information necessary to deliver our services effectively.

We also collect behavioral data including pages visited and features used, time spent on different sections, click patterns and navigation paths, search queries and preferences within our platform, frequency and duration of service usage, error logs and performance data, and geolocation information only when explicitly permitted and necessary for service delivery. Additionally, we collect subscription-specific data including subscription plan details and billing information, usage patterns and feature access logs, renewal dates and payment history, customer support interactions related to subscription services, and preferences for subscription features and notifications.

3.3 Information from Third Parties

We may receive limited information about you from third-party sources including identity verification services for KYC compliance, fraud prevention services for risk assessment data only, credit reporting agencies where legally permitted, regulatory compliance platforms for AML screening, and public databases and government sources for compliance verification.

Our payment service providers may share transaction status information, fraud prevention data, and processing confirmations with us, but sensitive payment credentials remain with these certified providers and are not transmitted to or stored by LapinoPay. As outlined in our Terms of Use, by using services enabled through LapinoPay, you consent to the processing of your data and transactions by such external providers. This information is combined with data we collect directly from you to provide better services and ensure compliance with regulatory requirements.

4.1 Direct Collection

We collect information directly from you through various touchpoints including our website registration forms, mobile application interfaces, customer service interactions via phone, email, or chat, in-person meetings at our offices or events, surveys and feedback forms, promotional campaigns and contests, and partnership enrollment processes. Each interaction provides us with different types of information necessary to deliver our services effectively and maintain regulatory compliance.

4.2 Automatic Collection Technologies

Our systems automatically collect information through cookies and similar tracking technologies on our website and mobile applications, web analytics tools to understand user behavior and improve services, server logs that record technical information about your visits, mobile analytics to understand app usage patterns without collecting device IDs, session data to maintain service functionality, and API monitoring to ensure service quality and security. We use privacy-respecting analytics that focus on aggregate usage patterns rather than individual device tracking, and we do not use invasive tracking technologies that compromise user privacy.

4.3 Third-Party Integration

We collect information through integrations with payment processors for transaction status and confirmation data only, banking partners for account verification and transaction processing confirmations, identity verification services for KYC compliance data, fraud detection systems for risk assessment information, and regulatory compliance platforms for AML screening results. Sensitive financial credentials and payment details are processed directly by our certified partners and are not transmitted to or stored in LapinoPay's systems. We receive only the information necessary to complete transactions and maintain compliance records.

These integrations are essential for providing secure, compliant payment gateway services including crypto-to-fiat conversions, multi-currency transactions, and comprehensive financial transaction processing, and are governed by strict data protection agreements with our partners as referenced in our Terms of Use.

5.1 Primary Service Delivery

LapinoPay uses your personal data primarily to operate, maintain, and improve our payment gateway services and subscription management. This includes processing your financial transactions accurately and securely across multiple currencies and payment methods, facilitating crypto-to-fiat conversions and digital wallet integrations as described in our Terms of Use, verifying your identity to prevent fraud and ensure compliance with KYC/AML requirements, maintaining your account and providing customer support, executing transfers and payments according to your instructions, generating transaction records and statements for your reference, managing your subscription services including billing, renewal, and access control, and providing subscription-related customer support and account management. We also use your data to detect and prevent money laundering, terrorist financing, sanctions evasion, and other prohibited activities as outlined in our acceptable use policies.

We use your information to customize and personalize your experience with our services, including tailoring our interface to your preferences, providing relevant product recommendations, sending important service notifications and updates, and offering customer support in your preferred language. Your data also helps us develop new features and services that better meet customer needs and expectations.

5.2 Compliance and Legal Obligations

As a payment gateway provider, we are subject to extensive regulatory requirements that necessitate the use of your personal data. We use your information to comply with anti-money laundering laws and regulations, conduct enhanced due diligence on high-risk customers and transactions, monitor for suspicious activities including those prohibited in our Terms of Use such as terrorist financing and sanctions evasion, report suspicious activities to relevant authorities and cooperate fully with investigations, maintain records as required by law, respond to lawful requests from government agencies and law enforcement, and ensure compliance with sanctions and embargo restrictions across all supported currencies and jurisdictions.

We also use your data to fulfill tax reporting obligations, maintain audit trails for regulatory examinations, conduct periodic reviews of customer accounts and transactions, and implement risk management procedures to protect both you and our business from financial crimes and other threats.

5.3 Risk Management and Fraud Prevention

Your information is crucial for our risk management and fraud prevention efforts. We analyze transaction patterns to identify unusual or suspicious activity, monitor accounts for signs of unauthorized access or use, implement security measures to protect your data and funds, assess creditworthiness and transaction limits where applicable, and maintain databases of known fraudulent activities and entities to protect all customers. We use advanced analytics and machine learning technologies to detect patterns that might indicate fraudulent activity, while ensuring that legitimate transactions are processed smoothly and efficiently. This ongoing monitoring helps protect your account and contributes to the overall security of our platform.

6.1 Contractual Necessity

Much of our data processing is necessary for the performance of our contract with you or to take steps at your request prior to entering into a contract. This includes processing your identity and financial information to open and maintain your account, executing transactions and transfers as you request, providing customer support and resolving issues, and delivering the financial services you have requested.

6.2 Legal Compliance

We process your personal data to comply with legal obligations to which we are subject as a financial services provider. This includes anti-money laundering and counter-terrorism financing laws, know-your-customer and customer due diligence requirements, tax reporting and withholding obligations, sanctions and embargo compliance, and regulatory reporting requirements imposed by applicable financial authorities.

6.3 Legitimate Interests

Where not covered by contractual necessity or legal compliance, we may process your data based on our legitimate interests or those of third parties, provided these interests are not overridden by your privacy rights. These legitimate interests include preventing fraud and financial crime, improving our services and developing new products, conducting market research and analytics, maintaining the security and integrity of our systems, and managing our business operations efficiently.

6.4 Consent

In certain circumstances, we may seek your explicit consent for specific data processing activities, such as marketing communications, certain types of profiling or analytics, sharing data with specific third parties for non-essential purposes, or collecting sensitive personal data where not otherwise legally justified. Where we rely on consent, you have the right to withdraw it at any time.

7.1 Service Providers and Business Partners

We do not sell or rent your personal data to third parties. However, we may share your data with trusted service providers and business partners who assist us in delivering our payment gateway services. These include payment processors who handle transaction processing across multiple currencies, cryptocurrency exchanges and blockchain service providers that facilitate crypto-to-fiat conversions, digital wallet service providers that enable wallet integrations, identity verification services that help us complete KYC procedures, compliance and monitoring services that assist with AML obligations, banking partners who support traditional payment methods, technology providers who maintain our systems and infrastructure, and customer service providers who help us support your needs. As stated in our Terms of Use, our services rely in part on third-party platforms, APIs, and compliance partners, and by using services enabled through LapinoPay, you consent to the processing of your data and transactions by such external providers.

All third parties who receive your data are bound by strict contractual obligations to protect your information and use it only for the specific purposes we have authorized. We conduct regular audits and assessments of these partners to ensure they maintain appropriate security and privacy standards.

7.2 Legal and Regulatory Requirements

We may disclose your information where required by law, regulation, or court order, particularly in cases involving money laundering, terrorist financing, or other activities prohibited under our Terms of Use. This includes responding to subpoenas, court orders, and other legal processes, cooperating with law enforcement investigations, reporting suspicious activities to financial intelligence units as required by AML regulations, complying with tax reporting requirements, responding to requests from regulatory authorities, and assisting with investigations related to sanctions evasion or other financial crimes. As stated in our Terms of Use, we reserve the right to report any suspicious or unlawful activity to relevant authorities and to cooperate fully with investigations. We will notify you of such disclosures where legally permitted and practically feasible.

7.3 Business Transfers

In the event of a merger, acquisition, sale of assets, or other business transfer, your personal data may be transferred to the acquiring entity. We will provide notice of such transfers and ensure that the receiving party agrees to handle your data in accordance with this Privacy Policy or provide you with choices regarding the transfer.

7.4 Protection of Rights and Safety

We may disclose your information when we believe it is necessary to protect our rights, property, or safety, or the rights, property, or safety of others. This includes investigating and preventing fraud, protecting against security threats, enforcing our terms of service, and responding to emergencies that threaten life or safety.

8.1 Retention Principles

LapinoPay retains your personal information for as long as necessary to fulfill the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements related to our payment gateway services. Our retention practices are based on the nature of the information, the purposes for which it is processed, applicable legal requirements for financial service providers, and our business needs. In accordance with our Terms of Use and applicable regulations, we may need to retain certain transaction and identity verification data for extended periods to comply with AML and financial reporting obligations.

8.2 Specific Retention Periods

In accordance with applicable financial regulations and international banking standards, we typically retain customer identification and account information for a minimum of ten years after account closure. Transaction records, including cryptocurrency conversion records and multi-currency payment data, are maintained for at least seven years to comply with financial reporting requirements. KYC/AML documentation and identity verification records are retained as required by applicable regulations, while correspondence and customer communications are retained for five years unless you request earlier deletion. Marketing preferences and communication records are kept for three years unless you request earlier deletion, subject to any legal retention requirements.

8.3 Secure Disposal

When personal data reaches the end of its retention period, we securely delete or anonymize it using industry-standard methods. This includes overwriting digital storage media, physically destroying paper records, and ensuring that any backup copies are similarly treated. We maintain detailed records of data disposal activities for audit purposes.

9.1 Access and Portability Rights

You have the right to access your personal data held by us and receive information about how it is processed. This includes obtaining copies of your data in a commonly used, machine-readable format and, where technically feasible, having your data transmitted directly to another service provider. You can request access to your data by contacting our Data Protection Officer or customer service team.

9.2 Correction and Completion Rights

You have the right to have inaccurate personal data corrected and incomplete data completed. If you notice any errors in your information or if your circumstances change, please notify us promptly so we can update your records. We will verify any requested changes and implement them within a reasonable timeframe.

9.3 Deletion and Restriction Rights

Subject to legal and regulatory constraints applicable to payment gateway providers, you may have the right to request deletion or restriction of your personal data. However, we are required to retain certain information for compliance purposes, including: (a) data related to completed transactions and regulatory reporting; (b) KYC/AML verification data (see our KYC Policy for retention periods); (c) data necessary for legal claims, investigations, or defense; and (d) data of users whose accounts have been banned or terminated for fraud, illegal activity, or chargebacks (per our Terms of Use Section 2). In such cases, we will not honor deletion requests. We will explain any limitations and restrict processing where legally permissible.

9.4 Objection Rights

You have the right to object to certain types of data processing, including processing for direct marketing purposes and processing based on legitimate interests. You can exercise these rights by adjusting your account settings, contacting customer service, or using opt-out mechanisms provided in our communications.

10.1 Technical Safeguards

We implement comprehensive technical measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction, with particular attention to the security risks associated with digital payments and cryptocurrency transactions as noted in our Terms of Use. These include end-to-end encryption of sensitive data both in transit and at rest, secure socket layer protocols for all web communications, tokenization of payment card and financial data, multi-factor authentication for account access, secure storage of cryptocurrency wallet information, regular security updates and patches to our systems, intrusion detection and prevention systems, and continuous monitoring of our networks and payment processing systems for security threats and potential vulnerabilities.

10.2 Organizational Safeguards

Our organizational security measures include strict access controls limiting employee access to personal data on a need-to-know basis, comprehensive security training for all staff members, background checks for employees with access to sensitive data, incident response procedures for security breaches, regular security audits and assessments, and clear policies and procedures governing data handling and protection.

10.3 Physical Security

Our facilities are protected by appropriate physical security measures including secured premises with controlled access, surveillance systems and security personnel, environmental controls to protect against natural disasters, secure storage for physical documents and backup media, and restricted access areas for sensitive operations and data processing equipment.

11.1 Transfer Mechanisms

Where we transfer personal data to third countries, we ensure that appropriate safeguards are in place to protect your information in accordance with applicable data protection laws. These safeguards may include adequacy decisions by relevant authorities, standard contractual clauses approved by data protection authorities, binding corporate rules for intra-group transfers, and certification schemes that demonstrate adequate protection levels.

11.2 Countries and Regions

We may transfer your data to countries including those within the European Union for compliance and regulatory services, the United States for technology infrastructure and support services, and other countries where our service providers, partners, or regulatory authorities are located. We maintain a record of all international transfers and the safeguards applied to each.

11.3 Your Rights Regarding Transfers

You have the right to obtain information about international transfers of your data, including the countries involved and the safeguards applied. If you have concerns about international transfers of your data, you may contact our Data Protection Officer to discuss available options and protections.

12.1 Types of Cookies Used

Our website and mobile applications use various types of cookies and similar tracking technologies to enhance your experience and improve our services. Essential cookies are necessary for basic website functionality and cannot be disabled, while functional cookies remember your preferences and settings to provide a personalized experience. Analytics cookies help us understand how visitors use our website and identify areas for improvement, and marketing cookies may be used to deliver relevant advertisements and measure campaign effectiveness.

12.2 Cookie Management

You can manage your cookie preferences through your browser settings or our cookie management tools where available. However, please note that disabling certain cookies may affect the functionality of our website and services. We provide clear information about the cookies we use and their purposes, and we respect your choices regarding non-essential cookies.

12.3 Third-Party Tracking

Some of our web pages may include content from third-party services such as social media platforms, analytics providers, or advertising networks. These third parties may use their own cookies and tracking technologies, which are governed by their respective privacy policies. We encourage you to review the privacy policies of any third-party services you interact with through our website.

13.1 Integration Partners

LapinoPay integrates with various third-party services to provide comprehensive payment gateway solutions as described in our Terms of Use. These partners include banking institutions for account connectivity and traditional payment processing, payment processors for card and electronic payment services, cryptocurrency exchanges for crypto-to-fiat conversion services, blockchain service providers for cryptocurrency transaction processing, digital wallet providers for wallet integration functionality, credit agencies for creditworthiness assessment, identity verification services for KYC compliance, and regulatory technology providers for AML monitoring and reporting. Our Terms of Use specify that these third parties may impose additional terms and require your agreement as a condition to use certain features.

13.2 Data Sharing Agreements

All third-party integrations are governed by comprehensive data sharing agreements that specify the purposes for which data may be used, the security measures that must be implemented, the retention periods for shared data, and the procedures for handling data breaches or security incidents. We regularly review and update these agreements to ensure they meet current standards and regulatory requirements.

13.3 Your Control Over Third-Party Access

Where possible, we provide you with control over third-party access to your data. This may include options to connect or disconnect specific services, granular permissions for different types of data sharing, and transparency about which third parties have access to your information. You can review and manage these settings through your account dashboard or by contacting customer service.

14.1 Age Restrictions

LapinoPay's services are intended for individuals who are at least 18 years of age or the age of majority in their jurisdiction, whichever is higher. We do not knowingly collect, use, or disclose personal information from children under this age threshold. If you are under the required age, please do not use our services or provide any personal information to us.

14.2 Parental Consent

In jurisdictions where we may provide services to minors with parental consent, we implement additional safeguards to protect children's privacy. This includes obtaining verifiable parental consent before collecting any personal information, providing parents with the ability to review and delete their child's information, and limiting the collection and use of children's data to what is necessary for the service.

14.3 Discovery of Child Information

If we discover that we have collected personal information from a child without appropriate consent, we will take immediate steps to delete that information from our systems. Parents or guardians who believe we may have collected information from their child should contact us immediately so we can address the situation promptly.

15.1 Applicable Regulations

As a payment gateway provider, LapinoPay complies with all applicable laws and regulations regarding data protection and financial services. This includes data protection laws, banking and financial regulations, anti-money laundering laws and implementing regulations, consumer protection requirements specific to financial services, and regulations governing digital payments and cryptocurrency transactions where applicable. Our Terms of Use specify that these terms are governed by and construed in accordance with applicable laws.

15.2 International Standards

We also adhere to relevant international standards and best practices, including GDPR where applicable to our operations and customer base, guidelines from the Basel Committee on Banking Supervision, recommendations from the Financial Action Task Force on anti-money laundering and counter-terrorism financing, data protection principles from international frameworks, and industry standards for cryptocurrency and digital payment security where our services involve such transactions.

15.3 Regulatory Reporting

We regularly report to relevant regulatory authorities as required by law, including suspicious transaction reports to financial intelligence units for activities that may involve money laundering, terrorist financing, or other prohibited activities as outlined in our Terms of Use, regulatory capital and liquidity reports to banking supervisors, customer complaint statistics to consumer protection agencies, transaction volume and processing reports related to our payment gateway services, and data breach notifications to data protection authorities where required. We maintain comprehensive records of all regulatory communications and compliance activities.

16.1 Detection and Assessment

LapinoPay maintains comprehensive incident response procedures to detect, assess, and respond to potential data breaches. Our security monitoring systems continuously scan for unusual activity, and our staff are trained to recognize and report potential security incidents. When a potential breach is detected, we immediately assess the scope, severity, and potential impact on affected individuals.

16.2 Containment and Investigation

Upon discovery of a data breach, we take immediate steps to contain the incident and prevent further unauthorized access or disclosure. This includes isolating affected systems, preserving evidence for investigation, engaging forensic experts where necessary, and conducting a thorough investigation to determine the cause and extent of the breach.

16.3 Notification Procedures

We will notify affected individuals and relevant authorities of data breaches in accordance with applicable legal requirements. This includes providing clear information about what happened, what information was involved, what we are doing to address the incident, and what steps you can take to protect yourself. We maintain detailed records of all data breaches and our response actions for regulatory reporting purposes.

17.1 Modification Process

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable laws. When we make material changes to this policy, we will provide prominent notice through our website, email, or other communication channels. Non-material changes may be communicated through updates to the policy document with revised effective dates.

17.2 Notice Period

For significant changes that may affect your rights or how we process your data, we will provide at least 30 days' advance notice before the changes take effect. This gives you time to review the updated policy and make informed decisions about your continued use of our services.

17.3 Continued Use

Your continued use of our services after the effective date of any policy updates constitutes your acceptance of the revised terms. If you do not agree with the updated policy, you may discontinue using our services and request deletion of your account and data, subject to legal retention requirements.

18.1 Internal Resolution Process

If you have concerns or complaints about our privacy practices, we encourage you to contact us first so we can attempt to resolve the issue directly. Our customer service team is trained to handle privacy-related inquiries and will work with our Data Protection Officer to investigate and respond to your concerns promptly and thoroughly.

18.2 Regulatory Complaints

If you are not satisfied with our response to your privacy concerns, you have the right to file a complaint with relevant data protection or supervisory authorities in your jurisdiction.

18.3 Alternative Dispute Resolution

We may also offer alternative dispute resolution mechanisms, including mediation or arbitration services, for privacy-related disputes. These processes can provide a faster and more cost-effective way to resolve disagreements while maintaining the confidentiality of sensitive information.

19.1 General Inquiries

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us using the following information. You may reach us by email at [email protected].

19.2 Data Protection Officer

Our Data Protection Officer oversees compliance with privacy laws and addresses privacy-related concerns. You can contact our Data Protection Officer by email at [email protected]. We strive to respond to data protection inquiries within a reasonable timeframe.

19.3 Response Timeline

We strive to respond to all privacy-related inquiries within five business days. Complex requests may require additional time, and we will keep you informed of our progress and expected resolution timeline.

21.1 Appendix A: Categories of Personal Data

This appendix provides a comprehensive list of the categories of personal data we may collect and process, organized by type and purpose, to help you understand the full scope of our data processing activities.

21.2 Appendix B: Legal Bases Reference

This appendix details the specific legal bases we rely on for different types of data processing, including references to relevant laws and regulations that authorize or require such processing.

21.3 Appendix C: Third-Party Partners

This appendix lists the categories of third-party partners we work with, the types of data we may share with each category, and the purposes for such sharing arrangements.

21.4 Appendix D: Data Subject Rights Procedures

This appendix provides detailed procedures for exercising your data subject rights, including required forms, verification processes, and expected timelines for different types of requests.

21.5 Appendix E: Transaction Flow and Crypto Purchase Details

This appendix provides detailed information about the transaction flow, including step-by-step breakdowns of the crypto purchase process, data handling at each stage, and the complete transparency measures in place for users to track their transactions from fiat payment to service delivery.