Last updated: October 05:02, 2022
This Privacy Policy describes Xtok policies and procedures on the collection, use and disclosure of Your information when You use the Service and tells You about Your privacy rights and how the law protects You.
We use Your Personal data to provide and improve the Service. By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy.
The words of which the initial letter is capitalized have meanings defined under the following conditions.
The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.
For the purposes of this Privacy Policy:
Under GDPR (General Data Protection Regulation), You can be referred to as the Data Subject or as the User as you are the individual using the Service.
For the purpose of the GDPR, the Company is the Data Controller.
For the purpose of the GDPR, Service Providers are considered Data Processors.
For the purposes of the GDPR, Personal Data means any information relating to You such as a name, an identification number, location data, online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity.
For the purposes of the CCPA, Personal Data means any information that identifies, relates to, describes or is capable of being associated with, or could reasonably be linked, directly or indirectly, with You.
For the purposes of the Personal Data Protection Act (Republic of Singapore), further referred as the “PDPA”, Personal Data means data, whether true or not, about an individual who can be identified from that data; or from that data and other information to which the organisation has or is likely to have access.
For the purposes of The Personal Data Protection Bill, 2018 (Republic of India), Personal Data means data about or relating to a natural person who is directly or indirectly identifiable, having regard to any characteristic, trait, attribute or any other feature of the identity of such natural person, or any combination of such features, or any combination of such features with any other information.
While using Our Service, We may ask You to provide Us with certain personally identifiable information that can be used to contact or identify You. Personally identifiable information may include, but is not limited to:
Usage Data is collected automatically when using the Service.
Usage Data may include information such as Your Device's Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that You visit, the time and date of Your visit, the time spent on those pages, unique device identifiers and other diagnostic data.
When You access the Service by or through a mobile device, We may collect certain information automatically, including, but not limited to, the type of mobile device You use, Your mobile device unique ID, the IP address of Your mobile device, Your mobile operating system, the type of mobile Internet browser You use, unique device identifiers and other diagnostic data.
We may also collect information that Your browser sends whenever You visit our Service or when You access the Service by or through a mobile device.
The Company allows You to create an account and log in to use the Service through the following Third-party Social Media Services:
If You decide to register through or otherwise grant us access to a Third-Party Social Media Service, We may collect Personal data that is already associated with Your Third-Party Social Media Service's account, such as Your name, Your email address, Your activities or Your contact list associated with that account.
You may also have the option of sharing additional information with the Company through Your Third-Party Social Media Service's account. If You choose to provide such information and Personal Data, during registration or otherwise, You are giving the Company permission to use, share, and store it in a manner consistent with this Privacy Policy.
While using Our Application, in order to provide features of Our Application, We may collect, with your prior permission:
We use this information to provide features of Our Service, to improve and customize Our Service. The information may be uploaded to the Company's servers and/or a Service Provider's server or it be simply stored on Your device.
You can enable or disable access to this information at any time, through Your Device settings.
The Company may use Personal Data for the following purposes:
We may share your personal information in the following situations:
The Company will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use Your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.
The Company will also retain Usage Data for internal analysis purposes. Usage Data retained for 3 (three) years after User's Account was removed, except when this data is used to strengthen the security or to improve the functionality of Our Service, or We are legally obligated to retain this data for longer time periods.
Personal Data that We processes for any purpose or purposes shall not be kept for longer than is necessary for that purpose or those purposes.
We will retain and delete your Personal Data as follows:
(i) Usage data will be retained indefinitely for the purpose of monitoring the historical performance of the Online Recourse.
(ii) Account data will be retained for a further 3 (three) years after you delete an Account, after which it will be deleted unless required for auditing or legal reasons.
In some cases it is not possible for Us to specify in advance the periods for which your Personal Data will be retained. In such cases, We will determine the period of retention based on the period the We needs to access the data for the provision of services, receiving payment, or other issues or any other auditing or legal reasons.
User’s principal rights under data protection law are:
(a) The right to access.
This enables you to receive a copy of the Personal Data we hold about you;
(b) The right to rectification/correction.
This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us;
(c) The right to erasure.
This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it;
(d) The right to restrict or object to processing
This enables you to initiate the suspending of the processing of your Personal Data;
(e) The right to data portability.
We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format;
(f) The right to complain to a supervisory authority; and
(g) The right to withdraw consent.
However, this will not affect the lawfulness of any processing carried out before you withdraw your consent.
If you have any concerns as to how your Personal Data is processed or you would like to exercise any right above you can contact us via email [email protected]
Your information, including Personal Data, is processed at the Company's operating offices and in any other places where the parties involved in the processing are located. It means that this information may be transferred to — and maintained on — computers located outside of Your state, province, country or other governmental jurisdiction where the data protection laws may differ than those from Your jurisdiction.
Your consent to this Privacy Policy followed by Your submission of such information represents Your agreement to that transfer.
The Company will take all steps reasonably necessary to ensure that Your data is treated securely and in accordance with this Privacy Policy and no transfer of Your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of Your data and other personal information.
If the Company is involved in a merger, acquisition or asset sale, Your Personal Data may be transferred. We will provide notice before Your Personal Data is transferred and becomes subject to a different Privacy Policy.
Under certain circumstances, the Company may be required to disclose Your Personal Data if required to do so by applicable law or in response to valid requests by public authorities (e.g. a court or a government agency).
The Company may disclose Your Personal Data in the good faith belief that such action is necessary to:
The security of Your Personal Data is important to Us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While We strive to use commercially acceptable means to protect Your Personal Data, We cannot guarantee its absolute security.
Service Providers have access to Your Personal Data only to perform their tasks on Our behalf and are obligated not to disclose or use it for any other purpose.