Privacy and Data Protection

Introduction
At SchindlersX and SDA, we are committed to protecting the privacy and security of our users’ personal data. This policy outlines how we collect, use, share, and protect personal information in accordance with applicable laws and industry standards.

Data Collection and Use
We collect personal data necessary to provide our services, enhance user experience, and comply with legal obligations. This includes information such as names, contact details, identification documents, and other Know Your Client (KYC) documentation. We use this data to verify identity, process transactions, and communicate with users about their accounts and our services.

Data Storage and Security
Personal data is stored in secure environments that meet strict security requirements. This ensures that data is protected against unauthorized access and breaches. We implement a range of technical and organizational measures to safeguard personal data, including encryption, firewalls, regular security audits, Google CAPTCHA, and Two-Factor Authentication (2FA) to prevent unauthorized access and enhance the security of user accounts.

Automated Decisions
Some aspects of our service, such as user onboarding, may involve automated decision-making. These processes are designed to improve efficiency and accuracy in compliance with regulatory requirements. Users have the right to request manual review of decisions made by automated systems.

Data Sharing and Disclosure
We may share personal data with third-party service providers who assist us in delivering our services, including identity verification, fraud prevention, and transaction monitoring. These providers are contractually obligated to protect personal data and use it only for the purposes specified by us. We also share data with regulatory authorities as required by law.

User Rights
Users have the right to access, correct, or delete their personal data. Requests can be submitted via email, and our privacy team will respond promptly. Users can also manage their communication preferences and opt-out of marketing communications at any time. Please contact our Privacy Team at [email protected] for any requests or queries regarding personal data.

Data Retention
Personal data is retained for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, and resolve disputes. We follow strict data retention policies to ensure that personal data is not kept longer than required.

*Cookies and Tracking Technologies
Our application uses cookies and similar tracking technologies to enhance user experience, analyze site traffic, and understand user behaviour. Cookies are small data files stored on your device that help us remember your preferences and improve the functionality of our site.

Payment Information
We utilize secure payment gateways to process transactions. Your payment information is encrypted and handled with the highest level of security to protect against unauthorized access. We do not store credit card details on our servers.

Third-Party Integrations
Our application may integrate with third-party services to provide additional functionality, such as KYC providers, payment processors, and marketing tools. These third parties are carefully selected and required to comply with our data protection standards.

GloRep Compliance Platform
We use the GloRep compliance platform to streamline the onboarding of clients and ensure compliance with FICA requirements. It provides tools for monitoring and reporting compliance activities, ensuring that we adhere to global standards.

User Responsibilities
Users are responsible for maintaining the confidentiality of their account credentials and for any activities that occur under their account. We recommend using strong, unique passwords and enabling Two-Factor Authentication (2FA) for added security.

Contact Us
For any questions or concerns about our data protection practices, please contact our Privacy Team at [email protected].