Your registration on and use of our Services; 

Your purchases;

Requests or questions you submit to us via online forms, email, or otherwise;

When you sign up for our newsletter or to receive other information, including promotions;

Participation in surveys or contests.

Contact, registration, and eligibility information such as your full name, email address, login information (password and username or email), address, phone number, online screen name, and date of birth;

Identity verification information to engage in certain features on the Services such as financial transactions over a certain threshold. Our service provider, Onfido, will collect a photo of your identity document (i.e., government issued id) and uploaded selfie and compare facial scan data from those in order to verify your identity. Cartamundi does not have access to this facial scan data. Please review the Onfido Privacy Policy for further information.

Transactional information such as order details, billing address, shipping address, and payment information, including payment card, payment services like PayPal or cryptocurrency wallet information (Please note, payment information is processed by third party payment processors);

Inquiries and Feedback including comments and questions you submit through customer service interactions with us (via email, phone, or online chat) or through surveys;

User Generated Content: certain parts of the Services may enable you to post comments, photos or other content, that, depending on where you post them, may be publicly viewable.

Any other information you directly provide to us in connection with your use of the Services.

Device information and related identifiers: including your IP address, browser type, browser language, operating system, device identifiers, operating system, the state or country from which you accessed the Services, and software and hardware attributes. From your IP address, we may be able to infer your general location (e.g., city/state or postal code).

Usage Information: including referring and exit pages and URLs, platform type, the number of clicks, files you download, domain names, landing pages, pages viewed and the order of those pages, the amount of time spent on particular pages, the date and time you used the Services, error logs, language preferences, and other similar information. 

Location Information: When you use the Services, we and our service providers collect general location information from your computer or mobile device. “General” location information means information about the city and state in which your device is located based on its IP address. We may also obtain general location when you input your zip code or use location features on the Services, such as to find nearby merchants. This information allows us to give you access to content that varies based on your general location. If we collect precise GPS location information through your device, we will ask your permission first. You can disable sharing precise geolocation information in your device settings.

Data from public sources (e.g. demographic data).

Business partners, marketers, consumer data resellers, researchers and analysts that provide us with demographic data and statistical information about users in certain jurisdictions.

Fraud prevention and detection vendors that provide us with personal data from available sources - such as social media networks - for identity verification: e.g. name, surname, age, gender, email and home address, cookies, social networking data, internet user-generated data and IP address.

Provide our Services, including when you register for such Services; 

Contact you about the Services, including for important policy changes and updates about your purchases. Where local law requires, we will obtain your consent before sending marketing or other communications;

Respond to your requests related to your transactions.

Secure our Services, prevent misuse, and resolve technical issues;

Respond to your requests for information and provide you with more effective and efficient customer service, including through our interactive chat functions.

In accordance with applicable legal requirements, contact you regarding the Services, as well as surveys, promotions, special events, and other subjects that we think may be of interest to you;

Better understand your interests and improve our Services;

Conduct internal business operations in support of our Services, such as auditing, preventing /fighting against fraud, invoicing and accounting, sales and marketing, analytics, and research and development;

Establish, exercise, or defend our legal rights.

Comply with any procedures, laws, and regulations which apply to us;

To conduct identity verification through our identity verification service provider;

Retain and use your information in connection with potential legal claims when necessary and for compliance, regulatory, and auditing purposes.

Enable you to participate in surveys and contests;

Send you marketing and other commercial communications and use non-strictly necessary cookies as detailed in the section on cookies and similar technologies below, where local law requires such consent (please note these requirements vary by jurisdiction and not all jurisdictions require consent for such uses).

Essential cookies  Essential cookies are necessary for purely technical reasons in order to use our Services. Given the technical necessity, only an information obligation applies, and these cookies are placed as soon as you access our Services (contrary to the optional cookies, for which your consent is required). You may nevertheless disable essential cookies by changing your browser settings, but this may affect the functionality of our Services.

Service Providers. We provide access to or disclose your information with selected third parties who perform services on our behalf. They provide a variety of services to us, including data hosting and storage, identity verification, customer service, security, fraud prevention, and legal services.

Affiliates and Subsidiaries. We disclose your information with current or future affiliates and subsidiaries in the Cartamundi family of companies for the purposes described in this Privacy Policy.

Third Party Partners to Provide Co-Branded or Jointly Offered Products and Services. Some of our Services may from time-to-time partner with another entity to offer services, products, events and promotions on a co-branded or cross-promotional basis. The information you provide in connection with such Services may be collected directly by, or disclosed to the third party, as well as with any participating sponsors or advertisers of such Services. These third parties will use your information in accordance with their own privacy policy.

Protection of Cartamundi and Others. We may disclose the information we collect and maintain about you if required to do so by law or in a good faith belief that such disclosure is reasonably necessary to: (a) comply with legal process (e.g. a subpoena or court order) or regulatory obligations; (b) enforce any contracts with you, if relevant; (c) respond to claims that any content violates the rights of third parties; (d) respond to your requests for customer service; (e) investigate, prevent or take action related to suspicious or actual illegal activities, or to cooperate with public agencies; and/or (f) protect the rights, property or personal safety of Cartamundi, its agents and affiliates, its users and/or the public.  In these cases, your information may be shared with third parties, such as government entities, third parties as directed by law or process or necessary for such purposes, entities responsible for investigation, and information technology or information security companies.

Third Parties that Provide Advertising Services. As described above, third parties such as Google may collect or receive certain information about you and/or your use of the Services to provide ads (including personalized ads) or to measure and analyze ad performance.

Business Transfers. We may buy, merge, or partner with other companies. In such transactions (including in contemplation of such transactions), user information may be among the transferred assets. If a portion or all of our assets are sold or transferred to a third party, customer information (including your email address) would likely be one of the transferred business assets.

With your consent. We may share your information to recipients based on your direction or consent.

provide access to and/or a copy of certain information we hold about you

update information which is out of date or incorrect

delete certain information which we are holding about you

restrict the way that we process and disclose certain of your information

object to the processing of your information when such processing is based on the pursuit of our legitimate interests

revoke your consent for the processing of your information

device information and identifiers, such as IP address, and unique advertising identifiers and cookies; connection and usage information, such as browsing history or app usage, geolocation information, such as city; and inference data.

any of the above categories of information we collect with: our affiliates; business partners to provide you with services that you request; service providers; other parties, including government entities, when required by law or to protect our users and services; social media services pursuant to that service and your settings; and with your consent or in connection with a corporate transaction;

commercial information and financial data, including your payment information, with payment processors; and

device information and identifiers and internet or other network or device activity with entities that provide content, advertising, and functionality.

device information and identifiers, such as IP address, and unique advertising identifiers and cookies; connection and usage information, such as browsing history or app usage, geolocation information, such as city; and inference data.

Confirmation of the existence of data processing: You may request confirmation regarding the existence of processing of your personal data.

Right to access your data: You may request a copy of the processed data, which will be made available in a readable and electronic format.

Data alteration or correction: You may request updates, alterations or corrections of your data in certain cases, especially if such data is incorrect or outdated.

Exclusion, blockage and/or anonymization of data: You may request the exclusion of your data from our platforms and our repositories without the need to provide any justification, as well as request the exclusion, blockage and/or anonymization of said personal data. Please note that this measure may result in you not being able to use the Services or full functionalities of the Services.

Information on data sharing: You may request information about public and/or private entities with which we have shared your personal data.

Information on consent: You may request information on the possibility of not providing consent in specific situations and on the consequences of the non-provision of said consent.

Revocation of consent: In cases where you have given consent to us for the processing of your personal data, you may, at any time, revoke such consent.

Right to be informed: Data subjects have the right to be informed about the collection and use of their personal data.

Right to access: Data subjects have the right to view and request copies of their personal data.

Right to rectification: Data subjects have the right to request inaccurate or outdated personal information be updated or corrected.

Right to be forgotten/Right to erasure: Data subjects have the right to request their personal data be deleted. Note that this is not an absolute right and may be subject to exemptions based on certain laws.

Right to data portability: Data subjects have the right to ask for their data to be transferred to another controller or provided to them. The data must be provided in a machine-readable electronic format.

Right to restrict processing: Data subjects have the right to request the restriction or suppression of their personal data.

Right to withdraw consent: Data subjects have the right to withdraw previously given consent to process their personal data.

Right to object: Data subjects have the right to object to the processing of their personal data (with some restrictions).

Right to object to automated processing: Data subjects have the right to object to decisions being made with their data solely based on automated decision making or profiling.

Notification obligation regarding rectification or erasure of personal data or restriction of processing: The controller shall communicate any rectification or erasure of personal data or restriction of processing carried out in accordance with the UK Data Protection Act and GDPR to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort. The controller shall inform the data subject about those recipients if the data subject requests it.

Request the right to obtain human intervention on our part and the right to express your point of view and to contest the decision. To exercise this right, please send an email to privacy@cartamundi.com with “Automated decision” as title of your request, and

Request to obtain meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing. To exercise this right please contact us at privacy@cartamundi.com.