This Policy provides details of what information we collect from You, what We do with it, who We share it with and Your rights in relation to it.
Version of: June 2019
The APP offers an interface for access to a platform (the Platform) operated by Nextchange Limited (Nextchange). In relation to Users’ personal information processed by Us, Nextchange is the formal data controller. We process Users’ personal information in the capacity of data processor pursuant to a data processing agreement between Us and Nextchange.
Data controller is a person which determines the purposes and means of the processing of personal information.
Data processor is a person which processes personal information on behalf of the controller. Therefore, We process Your information by using such means and for such purposes as determined by Nextchange.
The information about You which We and Nextchange collect may include:
This information may come from:
We and Nextchange rely on one of the following legal bases to process Your personal information:
We have set out below how We use Your information and the relevant legal basis for using it:
Notably some of the above use cases may well base on Our (or Nextchange’s) legitimate interest, but We appreciate Your consent for these. Using Your personal information will help Us and Nextchange to:
Based on Your consent:
Since the APP will allow You to interact with a considerable amount of information, some of which will be Your information (such as information regarding Your user account with the Platform, balances on Your wallet etc.), or information derived from the processing of Your information (such as Your last visit time and device details etc.), Nextchange will share Your information with Us, to the extent We need such information in order to allow You to enjoy the APP’s features. In addition, We and Nextchange will share Your information with third-party service providers for mandatory “know your customer”, anti-money laundering and combating terrorism financing requirements. Currently such services are provided by ONFIDO LTD (3 Finsbury Avenue, 5th Floor, London, England, EC2M 2PA, United Kingdom). Furthermore, Nextchange or We may share Your information with the following third parties so that Your information can be processed for the purposes described above:
We will not disclose Your information to other users unless it is necessary to enforce a trade between You and such other users.
If You give us false or inaccurate information or if We suspect or identify fraud, We may record this and pass on such information to external legal counsel, fraud prevention agencies and other organisations engaged in crime and fraud prevention including law enforcement agencies. We, Nextchange and other organisations may access and use this information to prevent fraud, money laundering or other criminal activity. If You are considered to be a source of money laundering or terrorism financing risk, or source for another crime Your information may be held for a continuous period of time (which may vary from country to country). It may also result in Us, Nextchange and others refusing to provide You services and entering into any other type of legal arrangements with You.
You should appreciate that Nextchange acts as a data controller (see Section 1 above for explanation as to what “data controller” is) in relation to Your personal information. Nextchange is located in the Cayman Islands, a country which is outside of European Union (EU). Information protection laws in non-EU countries may be less strict than those that apply in EU countries (which are generally referred to as GDPR). Although Cayman Islands revised its data protection laws to make them similar to those that apply in EU countries, as of now no decision has been made that would signify that Cayman Islands’ data protection laws provide adequate protection to personal information of users.
We will strive to keep Your information as short as possible after the termination of Your User account with the Platform. For Your information, various regulatory requirements will require Us and/or Nextchange to store Your information for a term of five (5) or even more years. Circumstances may require that We or Nextchange retain Your information after expiry of the term in the preceding paragraph. Examples of such circumstances are an ongoing regulatory investigation against You or a legal claim.
If We, Nextchange or a third party to whom Your information has been provided pursuant to this Policy or otherwise in accordance with applicable law, determine that You are the source of money laundering or terrorism financing risk or otherwise pose risk of a criminal activity, We and Nextchange may refuse to provide You with the services or make any other legal arrangements with You. A record of any of above risks may be retained Us, Nextchange or other third parties to whom Your information has been provided pursuant to this Policy or otherwise in accordance with applicable law
As noted above, Nextchange is a data controller (see Section 1 above for explanation as to what “data controller” is) and is therefore in charge for determining the purposes and means of the processing of personal information. Hence, despite this Policy provides contact details for both Nextchange and Us, it is always useful to get in touch with Nextchange first, because it is Nextchange’s legal obligation to direct Our use of Your personal information and to make sure that We process Your personal information in accordance with applicable legislation.
We and Nextchange are required to provide You with a copy of Your information unless providing some or all of such information would adversely affect the rights and freedoms of others or the law allows Us or Nextchange not to comply with Your request. You can access Your personal information by emailing Nextchange, at [email protected]. We and Nextchange will strive to provide You with Your information within thirty (30) days of Your request.
We and Nextchange must provide you with certain information at the time We and Nextchange collect Your personal information, including how We and Nextchange use it and the legal basis for doing so, who We and Nextchange share it with, how long such information is intended to be retained, where We and Nextchange obtained the information from and Your rights in relation to it. This information is provided to You in this Policy (subject to any updates We and Nextchange may share with You from time to time).
You have the right to request that We and/or Nextchange correct any information which You believe to be inaccurate. We and Nextchange will update Your information as soon as possible, but We or Nextchange may request that You provide supporting evidence before Your information is updated (e.g., a new proof or residence).
You have the right to request that information about You is deleted if:
You have the right to request that information about You is deleted if:
You can ask Us or Nextchange to notify everyone to whom We and Nextchange given Your personal information whenever We or Nextchange amend, delete or agree to restrict using it.
When We or Nextchange use Your information on the basis of Your consent or because it is needed to perform contractual obligations to You, You can ask Us or Nextchange to give You Your personal information in a structured, commonly used and machine-readable format or have it transmitted to another data controller.
We or Nextchange may use Your personal information to further our legitimate interests; e.g., Your information may help Us or Nextchange to improve our marketing communications and We and Nextchange have a legitimate interest in doing so. At the same time, it does not prejudice any of Your rights. However, We and Nextchange will always give you a right to object whenever Your personal information is being used for Our or Nextchange’s legitimate interests.
If You decide to stop receiving Nextchange’s or Our marketing messages, You can send Nextchange and/or Us an email at: [email protected]
If you have any further queries about handling of Your personal information by Us and Nextchange, or if You are unsatisfied with how We or Nextchange handles it, You can contact us: [email protected]
Nextchange’s supervisory authority in terms of information protection is the Cayman Islands Information Commissioner's Office. You may contact the authority using following details (please check the below website for any updates):
PO Box 1375, Grand Cayman KY1-1108 CAYMAN ISLANDS
Our supervisory authority in terms of information protection is the UK Information Commissioner’s Office (ICO) www.ico.org.uk. You may contact the authority at https://ico.org.uk/concerns if You wish to discuss with them any instance where You feel we may not be adhering to the terms within this Policy or to raise a complaint.
You do not have to provide Us or Nextchange with Your personal information. However, the law requires Us and Nextchange to obtain Your information in order to be in position to provide You with Platform’s services (the reference is made to anti-money laundering / combating terrorism financing laws here).
We pay utmost attention to make sure that personal information of Platform’s users is secure. Nevertheless, You should be aware that the use of the Internet is not entirely secure and there are multitude of threats in cyberspace, some of which are totally out of our control e.g., neither We are nor Nextchange is in position to mitigate security threats that emerge on Your devices (and that is why You always advised to use proper security software, such as anti-viruses, anti-malware software, Internet security suits etc.).
LATOKEN Limited is a company incorporated in England & Wales under company registration number 11850443, having its registered office at Company was 71-75, Shelton Street, Covent Garden, London, WC2H 9JQ, ENGLAND. Nextchange Limited a Cayman Islands entity with Cayman Islands Monetary Authority reference number 1512615.
We will regularly review this Policy. If we make any changes to it, we will post the updated Policy in the relevant section of the APP.