Privacy Notice for PIK Customers

PIK > Privacy Notice for PIK Customers

Privacy Notice

Last updated: 17th December 2025

  1. Introduction

PIK is committed to protecting your privacy and handling your personal data in a transparent and secure manner. We do not sell your personal data.

This Privacy Notice explains how we collect, use, store, and protect personal data when you interact with our website, products, or services.

  1. Who We Are

PIK is the entity responsible for processing your personal data and acts as the data controller for the purposes of applicable data protection laws.

Where PIK facilitates access to products or services provided by third-party service providers (including payment processors, wallet providers, blockchain networks, and compliance service providers), those third parties may act as independent data controllers or data processors under their own privacy policies.

  1. Who This Notice Applies To

This Privacy Notice applies to individuals whose personal data we process, including:

  • website visitors;
  • customers and prospective customers;
  • directors, shareholders, authorised representatives, and beneficial owners of corporate customers;
  • other individuals who interact with us.

Data protection laws apply to individuals, not legal entities. Where you act on behalf of a company, we may still collect and process your personal data.

  1. Personal Data We Collect

We may collect and process the following categories of personal data:

  • identification information (e.g. name, date of birth, ID documents);
  • contact information (e.g. email address, phone number);
  • business and company-related information;
  • transaction, payment, and usage data;
  • blockchain-related information (e.g. wallet addresses, transaction references or hashes);
  • technical data (e.g. IP address, browser type);
  • compliance-related information required for KYC/KYB, AML/CTF, sanctions screening, and fraud prevention.
  1. Legal Bases for Processing

We only process personal data where we have a lawful basis, including:

Contractual Necessity

To provide our products and services and perform our contractual obligations.

Legal Obligations

To comply with applicable laws and regulations, including AML/CTF, taxation, and financial services regulations.

Legitimate Interests

Where processing is necessary for our legitimate business interests, provided those interests do not override your rights and freedoms.

Substantial Public Interest

To prevent fraud, financial crime, and other unlawful activities.

Consent

Where you have given explicit consent, which you may withdraw at any time.

  1. How We Use Your Personal Data

We use personal data to:

  • provide and manage our services;
  • verify identity and conduct compliance checks;
  • communicate with you;
  • improve our website and services;
  • meet regulatory and reporting obligations;
  • prevent fraud and protect our systems.
  1. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or disclosure.

While we take reasonable steps to protect personal data, transmission over the internet is not completely secure, and we cannot guarantee absolute security.

  1. Sharing of Personal Data

We may share personal data with:

  • regulators, supervisory authorities, and law enforcement agencies where required by law;
  • Third-party service provider who assist us in delivering or facilitating services (including payment processors, wallet providers, blockchain infrastructure providers, identity verification providers, and cloud service providers);
  • professional advisers such as auditors, accountants, and legal advisers.

All third parties are subject to appropriate confidentiality, security, and data protection obligations.

  1. International Data Transfers

Your personal data may be transferred to and processed in jurisdictions outside your country of residence, including where third-party service providers or cloud infrastructure are located.

Where required by applicable law, we implement appropriate safeguards (such as contractual protections) to ensure that international data transfers are protected.

  1. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including:

  • statutory retention periods under AML/CTF, KYC/KYB, and financial services laws;
  • dispute resolution or legal proceedings.
  1. Your Rights

Depending on applicable law, you may have rights to:

  • access your personal data;
  • correct inaccurate or incomplete data;
  • request deletion or restriction of processing;
  • object to processing;
  • withdraw consent.

Requests can be made by contacting us using the details below.

  1. Cookies

We use cookies and similar technologies to improve website functionality and analyse usage. Please refer to our Cookies Policy for more information.

  1. Updates to This Notice

We may update this Privacy Notice from time to time. The latest version will always be available on our website.

  1. Contact Us

If you have questions about this Privacy Notice or how we handle your personal data, please contact us at:

Email: hi@pik.money

This Privacy Notice should be read together with our Website Terms of Use.