This is a template. It is written as realistic, readable copy for a website build and is not legal advice. Have qualified counsel review it, including controller identity, lawful bases, retention periods, transfer mechanisms and regulator references for each market, before publishing.
1. Overview and scope
This Privacy Notice explains what personal data Vixzz Business collects, why we collect it, how long we keep it and the rights you can exercise over it. It applies to our website, mobile applications, APIs and the services delivered through them.
A Vixzz group company in the market where your business is registered is the data controller for the account. Questions can be sent to privacy@vixzz.com.
2. Data we collect
We collect the data needed to open an account, move money, meet our legal obligations and support you. Some data is required to provide the service; if you do not provide it, we may not be able to activate or maintain an account.
- Identity and business data: entity name, registration and tax numbers, addresses, beneficial owners, directors and the documents used to verify them.
- Contact data: business email addresses, phone numbers and, where relevant, a physical address.
- Transaction data: amounts, currencies, references, counterparties, balances, payout destinations and the status of each instruction.
- Device and technical data: IP address, device model, operating system, app version, session and security logs.
- Support data: messages, calls and attachments exchanged with the business or agent desk.
- Preference data: the notification, language and marketing choices you set.
3. How we use data and our lawful basis
We process personal data only where we have a lawful basis to do so. The table below summarises the main purposes and the basis we rely on.
- Providing the Services, performing our contract with your business: opening accounts, executing instructions, settling transactions and keeping statements.
- Verification and compliance, legal obligation: identity checks, sanctions screening, anti money laundering and tax reporting.
- Fraud prevention and security, legitimate interests: velocity checks, device and session monitoring, and protecting customers from misuse.
- Improving the Services, legitimate interests: aggregated analysis of reliability and performance.
- Support, legitimate interests and consent where required: responding to enquiries and resolving disputes.
- Marketing, consent or soft opt in where local law allows: sharing product updates, always with an easy way to opt out.
4. Automated checks
We use automated systems to screen transactions for fraud, sanctions and unusual activity. These checks may slow or hold an instruction while a person reviews it. You can ask for a human review of a decision that significantly affects you by contacting the business desk.
5. Who we share data with
We do not sell personal data. We share it only where it is needed to run the service or meet the law, and only under contracts that require confidentiality and appropriate safeguards.
- Verified agents and payout partners that fulfil a deposit, withdrawal or payment you requested.
- Banks, mobile money operators and settlement rails that deliver funds to the recipient.
- Identity verification and sanctions screening providers.
- Cloud hosting, secure communications and analytics providers that support the platform.
- Professional advisers, auditors and insurers, where necessary.
- Regulators, courts and law enforcement where we are legally required or permitted to disclose.
6. How long we keep data
We keep personal data only for as long as we need it for the purpose it was collected, plus any period required by law. Indicative retention periods are set out below; local law may require a longer period.
- Identity, account and transaction records: seven years after the account is closed.
- Verification and screening results: for the statutory period applicable in the relevant market.
- Support correspondence: typically 24 months.
- Device and session security logs: typically 12 months.
- Marketing preferences: until you withdraw consent.
7. Your rights
Depending on where you are, you may have some or all of the rights listed below. To exercise a right, email privacy@vixzz.com. We will verify your identity and respond within one month, or tell you if we need longer and why.
- Access: request a copy of the personal data we hold about you.
- Correction: ask us to fix data that is inaccurate or incomplete.
- Deletion: ask us to erase data where we no longer have a lawful reason to keep it.
- Restriction and objection: ask us to limit or stop certain processing, including direct marketing.
- Portability: receive certain data in a structured, machine readable format.
- Withdraw consent: where processing relies on consent, withdraw it at any time.
- Complain: raise a concern with your local data protection authority. We would prefer the chance to resolve it first.
8. Cookies and tracking
Our website uses a small number of cookies and similar technologies. We do not use advertising cookies or sell audience data.
- Essential cookies keep you signed in, protect forms against cross site requests and remember your security settings. The site cannot work without them.
- Preference cookies remember choices such as language and display settings.
- Analytics cookies, where enabled, help us understand which pages are used, in aggregate. They are set only with consent where consent is required.
- You can clear or block cookies in your browser. Blocking essential cookies will prevent parts of the site from working.
9. Security of your data
We protect data with encryption in transit and at rest, least privilege access controls, monitoring and logging, and a documented incident response process. Account access is further protected by PIN and biometric controls and per device sessions.
If a breach affects your personal data and creates a risk to your rights, we will notify you and the relevant authority as required by law.
10. International transfers
Because money moves across borders, your data may be processed in a country other than your own. Where we transfer personal data internationally, we use appropriate safeguards such as standard contractual clauses or an equivalent approved mechanism, and we assess the destination for legal risk.
11. Changes and contact
We may update this notice to reflect changes in the service or the law. Material changes are communicated by email or in app notice before they take effect, and the date at the top of this page always shows the current version.
Contact us at privacy@vixzz.com for any privacy question, or support@vixzz.com for account support. Our general business desk is at business@vixzz.com.