Privacy Policy

As you review this policy, please keep in mind that:

This Policy is intended to cover our U.S. customers. If you access our online sites, your information may be transferred or processed in the U.S. Personal information that you share on Crest Credits-managed social media pages, such as Facebook and Twitter, are subject to the privacy policies and terms of use of those platforms. Please refer to those policies before posting any content to those pages. You should NEVER provide personal information to Crest Credits through public social media pages. Our online sites are not intended for children under the age of 13. We do not knowingly collect personal information from individuals under the age of 13 without parental consent. To learn more about the Children’s Online Privacy Protection Act (COPPA), please visit the Federal Trade Commission's Website at https://www.ftc.gov/. California residents, please find a link to our California Privacy Statement at the bottom of this Policy.

What Information We Collect:

Personal Information When you visit our site, we collect personal information that you provide, including in our forms, applications, surveys and other online fields. This information may include your name, mailing or email address, telephone number(s), account number(s) and other personal information you may provide. If you have a financial product or service with us, we will share and use any information we collect from or about you in accordance with our Privacy Notice which offers some choices with respect to the use and sharing of your personal information.

Non-personal Information

Crest Credits and service providers acting on our behalf may also collect non-personal information from your use of our online sites. This information may include your IP address, browser and/or device information, including location information, if enabled on your device, type of operating system you are using, information about the site or advertisement that brought you to our online site, and the parts of our online sites that you visit. You have choices to limit the ways your non-personal information is collected and used, please view our Privacy Notice.

How We Collect Information

We collect information through various means, including the information you provide directly to us on our online sites, information collected through third parties, as described below, and in an automated fashion, through your browser, cookies, pixel tags, clear gifs, web beacons, flash cookies, and other technologies.

Cookies are small text tiles that are stored on your computer or mobile device that allow us to collect certain information, such as your browser type, the time you spend on our online sites and the pages you visited. Many internet browsers allow you to refuse cookies, but doing so may cause you to be unable to access certain of our services. For more information on opting out of certain tracking see the "Your Choices" section, below.

Pixel tags, clear gifs, web beacons and flash cookies are transparent tags that are placed on a website, email or other message and are used to measure the actions of the visitor opening the page that contains the clear gifs and allow us to evaluate the effectiveness of our communications, detect and prevent fraud, advertising.

Third-Party Information: Crest Credits contracts with advertising companies to advertise our products and services on third-party websites and mobile applications. We may use other information we collect as described above to assist these advertising companies in selecting which of our advertisements and offers may appeal to you. Please visit the third-party websites and mobile application for their privacy policies. We may also collect information about you from other online and offline sources, including our affiliates, credit reporting agencies and other third-party sources as permitted by law.

How We Use Information

As well as checking your identity, the personal information we hold may be used for:

• considering any of your applications
• carrying out risk assessments
• complying with our legal and regulatory obligations
• performing our obligations under any contract we have with you
• administering our relationship with you including resolving queries or issues
• establishing and managing your account
• reviewing your ongoing needs
• providing you with the information, products and services that you request from us
• checking your instructions to us
• investigating any complaint you may make
• providing evidence in any dispute or anticipated dispute between you and us
• recovering amounts payable
• training our staff
• enhancing our customer service and products
• undertaking product development and analysis
• detecting or preventing fraud or other crimes
• analytics, inter alia, with the help of the following services of Google Inc. and Facebook Inc.:
• Google Ads conversion tracking (Place of processing: U.S. – Privacy Policy)
• Google Analytics (Place of processing: U.S. – Privacy Policy)
`
• Google Tag Manager (Place of processing: U.S. – Privacy Policy)
• Facebook Ads conversion tracking (Place of processing: U.S. – Privacy Policy)
• Display Advertising extension for Google Analytics (Place of processing: U.S. – Privacy Policy)
• contacting you - we may send you marketing material from time to time by post, email, telephone, SMS, mobile push notifications, web push notifications, messengers (Viber, Telegram, Facebook messenger, and other) or other electronic messaging services;
• handling payments, inter alia, with the help of the following service providers:
• Neteller (Paysafe Group PLC) - Place of processing: Isle of Man – Privacy Policy
• Skrill (Skrill Ltd.) - Place of processing: U.K. – Privacy Policy
• 2Checkout (2Checkout.com, Inc.) - Place of processing: U.S. – Privacy Policy
• Interaction with live chat platforms, inter alia, with the help of the following service providers:
• Zopim Widget (Zopim Technologies Pte Ltd)- Place of processing: Singapore – Privacy Policy;
• Managing contacts and sending messages, inter alia, with the help of the following service providers:
• Mandrill (The Rocket Science Group, LLC.) - Place of processing: U.S. – Privacy Policy
• Mailchimp (The Rocket Science Group, LLC.) - Place of processing: U.S. – Privacy Policy
• Remarketing and behavioural targeting, inter alia, with the help of the following service providers:
• Remarketing with Google Analytics (Google Inc.) - Place of processing: U.S. – Privacy Policy
• Facebook Remarketing (Facebook, Inc.) - Place of processing: U.S. – Privacy Policy
• Twitter Remarketing (Twitter, Inc.) - Place of processing: U.S. – Privacy Policy
• Facebook Custom Audience (Facebook, Inc.) - Place of processing: U.S. – Privacy Policy
• Twitter Tailored Audiences (Twitter, Inc.) - Place of processing: U.S. – Privacy Policy
• Google Ads Remarketing (Google Inc.) - Place of processing: U.S. – Privacy Policy.

When may we share your personal information?

We may share your personal information with:

• relevant regulatory or tax authority
• such third parties as we reasonably consider necessary in order to prevent crime, for instance, the police
• our associated companies
• third-party service providers and advisers who provide us with administrative, financial, research or other services in connection with the services we provide to you
• our introducing brokers and other commercial partners
• our professional advisers
• our auditors for the purposes of carrying out financial and regulatory audits
• our agents, including credit reference agencies, acting on our behalf, carrying out such credit and identity checks, including money laundering checks, compliance regulatory reporting, and fraud prevention checks
• courts, tribunals, regulatory or tax authorities, and government agencies to enable us to enforce our agreement with you or to comply with the requirements of a court, regulator, tax authority, or government agency
• our trade repository
other parties which may be necessary to involve in order to provide the best service to you as our customer.

Generally, we require that organisations outside our associated companies with whom we share your personal information acknowledge the confidentiality of your data, undertake to respect your right to privacy and comply with the data protection principles and this policy.

What is the legal basis for our processing of personal information?

The legal basis for our processing of personal information will depend on why we process your personal information.

Where you wish to enter into or have signed a contract to receive services from us, we will process your Personal information to enable us to enter into and perform our contract with you. If you do not provide the personal information requested, we may not be able to provide some or all of those services to you.

We may also need to process your personal information to comply with our legal and regulatory obligations including in relation to performing anti-money laundering, terrorism prevention, and sanctions screening checks, complaints, and investigations or litigation.

We also have a legitimate interest to process your personal information for:

• performing the services or supplying the products or information you have agreed to receive from us
ongoing management of our relationship with you and to maintain contact with you
• our internal business purposes which may include business and disaster recovery, document retention/storage, IT service continuity (for example, back-ups and helpdesk assistance) to ensure the quality of the services we provide to you
• corporate transactions
• marketing analytics including marketing campaign optimisation and web analytics to enable us to develop and target the marketing of our products and services
• keeping our records updated and studying how customers use our products/services
• developing our products and services, growing our business, and informing our marketing strategy
• defining the types of customers for our products and services and keeping our website(s) and platform(s) updated and relevant
• portfolio analysis and experience studies to enable us to improve the products and services we offer to customers.

In any case, we will gladly help to clarify the specific legal basis that applies to the processing, and in particular whether the provision of Personal information is a statutory or contractual requirement, or a requirement necessary to enter into a contract.

What is the place of processing?

The data is processed at our operating offices and in any other places where the parties involved in the processing are located.

Depending on your location, data transfers may involve transferring your personal information to a country other than yours. To find out more about the place of processing of such transferred Personal information, you can check the section ‘Using Your Personal Information.

If any such transfer takes place, you can inquire with us via support@crestcredits.com..

Please note that we use Transport Layer Security (TLS) encryption (also known as HTTPS) for all transmitted data. All the data are sent over an encrypted TLS 1.2 connection.

How long will we keep it?

We hold personal information about you on electronic and/or paper files whilst you are a customer and for at least three years after you cease to be a customer. Please note that pursuant to the applicable anti-money laundering and terrorist financing legislation some of your personal information must be retained for a term of seven years. Such personal information includes:

• name, family name, patronymic name (if any)
• residential address
• age/date of birth
• passport details
• photos of your identity documents
• information regarding deposits to and withdrawals from your account, the currency and the amounts of such deposits and withdrawals
• information regarding your trading activities
• telephone number
• email address
• communication history with the support (chats/emails/calls).

In addition, the above data shall be stored for our defence of legal claims during the limitation periods envisaged by the applicable legislation.

Please be informed that the above personal information will be encrypted and securely stored in our IT system, will not be used for any purposes other than for the purposes indicated above and will be erased from our system at the expiration of the seven-year period. Please be assured that access to the above personal information will be restricted during the whole period of storage.

What is a Cookie and why do we use it?

Cookies are small pieces of information that are stored on your computer by a website you visit in order to enable you to perform certain functions on the website and regulate its content to your preference. They can store data on the pages for which you have provided key information (for example, when you provide a password), but only once you are asked and you accept the storage of this information. Cookies may be used on some pages of the site for us to provide you with a more customised web browsing experience. They are not used to determine the personal identity of anyone merely visiting the site.

Types of cookies we use:

Session cookies.

These cookies are temporary cookies as they are deleted as soon as you close your browser. Session cookies are used to retain the information you provide us with as you navigate through each section of our website. You can choose to decline session cookies via your browser’s privacy settings but please note that this may have a negative impact on your browsing experience and particularly if these are declined across all websites.

Analytical cookies.

Analytical cookies may include both temporary and more persistent cookies that we use to track how you use our website and for how long. Analytical cookies do not divulge any identifying information specific to your person but they do help us improve how we provide you with our content. Refer to your browser’s privacy settings on how you can opt out of analytical cookies.

Functional cookies.

Functional cookies record and save your choices in order to provide a more seamless experience across our website. One way functional cookies do this is by remembering your language selection each time you visit us. Refer to your browser’s urgent privacy settings on how you can opt out of functional cookies.

Third-party cookies.

These cookies are used by third parties and mostly by social media websites like Google+, Facebook, or YouTube. Third-party cookies allow us to offer you easy ways to share our content throughout your social media and also present you with the videos we post on YouTube. You can disable the use of these cookies through your browser’s privacy settings but please do note that this will also disable all the functions described above.

As already mentioned, we use cookies to ensure the optimal functionality of our website and cater our content to your personal preferences. If you have further questions, please do not hesitate to contact us via support@crestcredits.com..

How can you get more help?

If you want help with our Privacy Policy or have questions about it, please contact us via support@crestcredits.com..

If you are unhappy about any aspect of the way we collect, share, or use your personal information, we would like you to tell us. You can contact us using the details above.

What are your Privacy Rights?

This section explains your rights in relation to your personal information in more detail.

To exercise any of the rights described below, please contact us via support@crestcredits.com..