Privacy & Cookie Policy

Last Updated: February 2024

This Privacy and Cookies Policy (“Policy”) govern the access to and use of all parts of the platform and services branded as 2access.io (“2access”, “we”, “our”, “us”) and refers to the domain https://2access.io/ (hereinafter referred as the “Platform”) and all documents, data, materials or other information made available on the Platform.

This Policy applies to all visitors and/or users (“User”, “you”, “your”). Please read this Policy along with our Terms and Conditions carefully, and note that by using 2access, you are consenting to the collection, storage, processing, and transfer of your personal information in accordance with this Policy.

1. DEFINITION

   1. “Account” means the account created on 2access Platform.

   2. “Partner Website” refers to the website with whom we collaborate, where you can utilize your 2access Account credentials to access their services.

   3. “Personal data” refers to any information that relates directly or indirectly to a natural person whether living or deceased, who is identified or identifiable from that information, or from that and other information in the possession of a data User, including any sensitive Personal data and expression of opinion about the User;

This Policy may be made available in several languages for educational purposes only. In case of any inconsistency between the English version and a translated version, the English version prevails.

1. PURPOSE OF THIS POLICY

   1. We at 2access know and understand how important it is for you to understand how we collect, store, process, share, and use your Personal data. We respect and protect the privacy of our users’ Personal data in our Platform.

   2. The purpose of this Policy is to describe how 2access collects, processes, and manages users’ Personal data through the Platform, which is developed to offer 2access services.

2. ACCEPTANCE

   1. By accessing and using our Platform, you are consenting and accepting the terms of this Policy. If you do not agree or consent to the details we require with any aspect of this Policy, you shall at any time withdraw your consent and discontinue access or use of our services.

3. USER LOGIN CREDENTIAL INFORMATION

   1. Partner Websites' Privacy Policy: Users understand and acknowledge that when they choose to access specific services provided by Partner Websites through the Platform, they shall be subject to the individual privacy policy of each respective Third-Party Partner Website. The privacy practices, data collection, processing, and usage of information by the Third-Party Partner Websites are governed solely by their own privacy policies. 2access does not have any discretion or control over the privacy practices of the Third-Party Partner Websites.

   2. User Information Usage: Users grant 2access permission to use their personal information as required to create and maintain an account on the Platform. This information may include but is not limited to name, email address, contact details, and other relevant information required for account registration and management. For more information please refer to clause 5.

   3. Login Credentials for Access: Users acknowledge that 2access will use the provided personal information to generate login credentials (such as username and password) for accessing the Platform. These login credentials will enable Users to access the various services provided by Third-Party Partner Websites through the Platform.

4. PERSONAL INFORMATION THAT WE COLLECT FROM USERS

   1. Your Personal data is collected and stored with us in order to provide, develop, and enhance our products and services including technical infrastructure, security, compliance, fraud prevention, and customer support. We are committed to exercising due diligence when dealing with every User and in the course of conducting business, we ensure that it is able to comply with all the applicable Laws and regulations.

   2. The Personal data we collect from our Users are:

      1. Users - Individual

         1. Full name

         2. Date of birth

         3. Email address

         4. Gender

         5. Residence address

         6. Nationality

         7. Zip Code

         8. Telephone number

         9. Passport or National ID number

         10. Telephone number

         11. Credit card details

         12. Source of wealth

         13. Occupation

         14. Bank account details, including institution name, branch, account name, bank identifier

         15. Bank account number or IBAN

      2. Browser Information

         1. IP Address

         2. Login information

         3. Browser type and version

         4. Time zone setting

         5. Platform

         6. Operating system

         7. Transaction history

         8. Pages accessed and links clicked

5. HOW USERS PERSONAL DATA IS USED

   1. To communicate with the User

   2. To comply with legal and regulatory compliance

   3. To detect and prevent fraud and credit risks

   4. To provide, troubleshoot, and improve 2access services

   5. To enforce our terms in our Terms of Use

   6. To provide customer services

   7. To ensure quality control

   8. To ensure network and information security

   9. To enhance and personalize User experience

   10. To engage in marketing activities

   11. For transaction services

   12. Purposes for which we seek User’s consent

6. DATA TRANSFER

   1. We may share your Personal data with selected third parties, including partners, business suppliers, distributors, and subcontractors, when it is necessary for the delivery of our services, or when there is a legal basis to do so. The aforementioned third parties only collect, use, and disclose your information in the ways indicated by us in order to provide adequate services.

   2. We further ensure that we comply with the applicable data protection legal norms and we shall only share information in the following circumstances:

      1. With applicable regulatory bodies.

      2. With third-party partner KYC/AML service providers of 2access to identity verification services in the User onboarding process.

      3. With service providers under contracts to operate the business. For instance:

         1. Cloud storage

         2. Network Infrastructure

         3. Security

         4. Customer Support

         5. Marketing

         6. Data Analytics

      4. We transfer only the minimum amount of data necessary for a particular outsourced service provider(s) (if applicable) and we only cooperate with the outsourced service providers who can provide and ensure adequate level of Personal data protection.

   3. 2access ensures that the service providers and affiliates/ business partners who process personal information acknowledge the confidentiality of this information and protect the User’s right to privacy by complying with all applicable privacy and data protection laws.

   4. Each Partner Website may have its own data transfer clauses, terms of use, and privacy policies governing how your information is handled, processed, and shared. By using our Platform to access the services of Third-Partner Partner Websites, you acknowledge and agree to adhere to the data transfer clauses and privacy policies of those Third-Partner Partner Websites.

7. PROTECTION AND STORAGE OF PERSONAL DATA

   1. 2access maintains physical, technical, administrative, and procedural safeguards in connection with the collection, storage, and disclosure of the User’s Personal data. We use firewall barriers, encryption techniques, and authentication procedures to maintain the security of User’s online sessions.

   2. Furthermore, 2access does not ensure the security or privacy of data transmitted via email, phone, or SMS, till such data reaches the domain of our network since we have no access to protect such data.

8. DATA RETENTION

   1. 2access is obligated to retain either the original or an accurate copy of all data and information received from its Users in an easily accessible format for a period of five (5) years subsequent to the termination of your association with our Services, initiated at your request. It's important to be aware that the Personal data furnished by you will be maintained by us until such time as you make a request for the termination of our association.

   2. We shall take reasonable measures to ensure that all Personal data is destroyed or permanently deleted if it is no longer required for the purpose of providing our services for which it was processed and in certain circumstances, if required by law, the 2access may not destroy any relevant records or Personal data even though the prescribed period for retention shall have elapsed.

   3. Furthermore, information or data collected via technical means such as cookies, web page counters, and other analytics tools is kept for a period of up to one year from the expiry of the Cookie policy.

9. EUROPEAN DATA PROTECTION RIGHTS

   1. 2access is obliged and bound by the General Data Protection Regulation (GDPR), which is drafted and passed by the European Union to regulate and protect the data of EU citizens.

   2. According to the GDPR, 2access provides privacy notices:

      1. In a concise, transparent, intelligible, and easily accessible form.

      2. Written in clear and plain language.

      3. Delivered in a timely manner.

      4. Provided free of charge.

   3. If the Users are located in the European Economic Area (EEA), you will have the rights as described below.

      1. You may request access to and receive information about the Personal data we maintain about you, update and correct inaccuracies in your Personal data, restrict or object to the processing of your Personal data, have the information anonymized or deleted, as appropriate, or exercise your right to data portability to easily transfer your Personal data to another company.

      2. You may withdraw any consent you previously provided to us regarding the processing of your Personal data, at any time and free of charge. We will apply your preferences going forward and this will not affect the lawfulness of the processing before you withdraw your consent.

      3. If you are located in the EEA, we will comply with applicable GDPR law when transferring your Personal data outside of the EEA.

10. YOUR RIGHTS PROTECTED UNDER THE GDPR

    1. Under certain circumstances, you have rights under data protection laws in relation to your Personal data which are set out in more detail below

       1. Request access: This enables you to receive copies of your Personal data. We hold about you and to check that we are lawfully processing it. This is also commonly known as a "data subject access request". This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.

       2. Request erasure: This enables you to request us to delete or remove Personal data where there is no good reason for us to continue to process it. Nonetheless, there may be circumstances where we may be legally entitled to retain your Personal data in accordance with the terms of this Policy.

       3. Request to Restrict Processing: This enables you to object to the processing of your Personal data, which is processed based on our legitimate interests. In the event of such an objection, we will no longer process your Personal data, unless we demonstrate compelling legitimate grounds for the processing which override the interests, rights, and freedoms of the data subject or for the establishment, exercise, or defense of legal claims. Be aware that restricting your data processing, can lead to limited access to our Platform.

       4. Request to Object Processing: You have the right to object to the processing of your Personal data where we are relying on a legitimate interest (or those of a third party partner) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your Personal data for direct marketing purposes.

       5. Request to transfer: Under your request, we will provide you your Personal Data in a structured, commonly used, machine-readable format. This right only applies to automated information that you initially provided consent for us to use or where we used the information to perform a contract with you.

       6. Right to data rectification: This gives you the authority to request the correction of your Personal Data that we process or hold. This right ensures that personal data is accurate, up-to-date, and complete. If you discover that your Personal Data is incorrect, incomplete, or outdated, you can exercise this right by submitting a formal request to us. We are then obligated to rectify the erroneous data without undue delay, considering the purposes of the processing. This right supports the accuracy and fairness of data processing and contributes to the overall integrity and reliability of the Personal Data collected and processed by us.

11. COOKIES POLICY

    1. Cookies are small text files that are placed on your device like a computer, mobile, or any other device by a Platform, containing details of your browsing history (“Cookies”). Whenever you visit our Platform, the Platform sends Cookies to the device you are using to access our Platform, and your device automatically stores the Cookies in a file located within your Platform browser allowing us to recognize your device upon future access.

    2. We use the following Cookies to operate our Platform, such as:

       1. Session Cookies are temporary and expire once you close your browser. It stores information for the time, or session when you are on our Platform.

       2. Persistent Cookies encompass all Cookies that remain on your hard drive until you erase them or your browser does it. It depends on the Cookie’s expiration date. All persistent cookies have an expiration date written into their code, but their duration can vary.

       3. First-party-cookies are put on your device directly by the Platform you are visiting.

       4. Third-party-cookies are placed on your device, not by our Platform, but by a third party like an advertiser or an analytic system. Generally, Third-Party Cookies consist of tracking Cookies used to identify online behavior, understand interests, and then customize advertising for the User on other Platforms. Any information obtained from Third-Party Partners Cookies is processed by the respective Collaborative Partners.

       5. Google Analytics Cookies to measure our User’s interactions with the content on our Platform. These Cookies collect information about your interactions with our Platform, such as unique visits, repeat visits, session duration, and Platform activity.

       6. Facebook Pixel processes information about a User’s activity on our Platform, such as the Platform visited, Facebook identity, browser data, and more. The information processed from Facebook pixel is used to serve ads based on your interests through Facebook, as well as to measure cross-device conversions and User interactions on our Platform.

       7. Essential Cookies are known as strictly necessary Cookies for you to browse our Platform and use its features, such as accessing secure areas of our Platfrom. These Cookies are generally First-Party Session Cookies. These Cookies do not require consent from you. Essential Cookies helps to make our Platform easy to use by providing basic functions such as page navigation, language selections, authorization, and filling in forms. Our Platform will not function without these Cookies and they cannot be disabled. These Cookies do not reveal the User’s identity or collect information. They are stored on the User’s device until the browser is closed.

       8. Functionality Cookies allow our Platform to remember choices you have made in the past like what language you prefer, what region you would like, or what username and password are so you can automatically log in. We use Cookies for navigation and to facilitate your access to and use of this site. These Cookies are necessary for the transmission of communications on the network or to supply services whatever requested by you. Further, they help us to know which pages are the most and least popular and see how visitors move around the Platform.

       9. Performance Cookies collect information about how you use our Platform, like which page you visited and which link you clicked on. None of this type of information can be used to identify you. The sole purpose of performance cookies is to improve our Platform functions. Analytics may collect information through log data, such as; (i) IP address, (ii) Type of browser and device, (iii) Operating system, (iv) Name of the Internet Service Provider, (v) Country information, (vi) Date and time of visit, (vii) Web page origin and exit; and/or

       10. Marketing Cookies track your online activity to help advertisers deliver more relevant advertising or to limit how many times you see an advertisement. These Cookies can share information with other organizations or advertisers. These cookies may be set through the Platform by our advertising partners. If you do not allow these cookies, you will experience less targeted advertising. These cookies are set on your device for up to two (2) years or deleted if you erase your browser cookie data.

    3. You reserve the right to decide whether to accept or reject Cookies from our Platform. You can exercise your Cookie rights by setting your preferences in the Cookie Consent Manager. However, you will not be able to reject the Essential Cookies and still access the Platform, as they are strictly necessary to provide you with our Services. In the event you choose to reject certain Cookies, you may still use our Platform though your access to some functionality and areas of our Platform may be restricted. You may also set or amend your web browser controls to accept or refuse Cookies.

12. MODIFICATIONS

    1. We reserve the right, at our sole discretion, to modify, amend, supplement, or replace this Policy at any time and such update details shall be indicated at the top of this page.

    2. Our Platform Policies and Terms may be revised or updated periodically to meet the necessary requirements and standards. We encourage You to regularly visit our Platform to stay informed about any changes to these Policies and the Terms.

    3. Your continued access to the Platform means that you agree to the updated content and to abide by the updated Policy.

13. CONTACT INFORMATION

    1. In the event of any comments, questions, inquiries, or complaints regarding this Policy, the User has the right to submit questions and/or concerns at [e-mail]