1. Introduction
Tap 2 Send is a trading name of Tap 2 Send Ltd, a company incorporated under the laws of British Columbia, with its registered business address at 300 - 15300 CROYDON DRIVE,SURREY,BRITISH COLUMBIA,CANADA,V3Z 0Z5 (“Tap 2 Send,” “we,” “us,” or “our”). We protect personal information and process it in connection with our website, business onboarding, international payment services, foreign exchange, digital asset conversion, communications, and related activities. Our practices are designed to comply with applicable Canadian privacy legislation, including PIPEDA and relevant provincial legislation. Where another jurisdiction applies, we comply with its requirements. By submitting information or using our services, you acknowledge receiving this Policy. Where required, we seek consent separately.

2. Scope
This Policy applies to website visitors, prospective and existing business customers, authorized representatives, directors, officers, shareholders, beneficial owners, transaction senders and recipients, individuals in compliance records, people contacting support or compliance personnel, and others whose information we process lawfully. Information about identifiable individuals associated with businesses may be protected personal information.

3. Accountability
Tap 2 Send is responsible for personal information under its control, including information transferred to service providers. We designate a Privacy Officer.
Privacy Officer: Tap 2 Send
Email: [PRIVACY EMAIL]
Address: 300 - 15300 CROYDON DRIVE,SURREY,BRITISH COLUMBIA,CANADA,V3Z 0Z5
4. Information We Collect
We may collect personal identification information such as legal name, date of birth, addresses, email, telephone number, nationality or residence, government identification, verification records, and job title; corporate information such as legal company name, registration number, addresses, activities, structure, directors, representatives, shareholders, beneficial ownership, expected transaction volume, purpose and jurisdictions; financial and transaction information such as banking details, payment accounts, beneficiaries, amounts, dates, references, source of funds, invoices, currency details, instructions, transaction history and compliance information; digital asset information such as public wallet addresses, assets, networks, transaction hashes, on-chain information, wallet control information, screening results and conversion details; technical information such as IP address, browser, operating system, device, access times, URLs, pages, cookies and security data; and communications submitted through authorized channels. We do not require seed phrases or private keys through ordinary onboarding or transaction processes.

5. How We Collect Information
We collect information directly from you, your employer or represented business, onboarding and transaction requests, payment and financial partners, identity and verification services, public registries, fraud and sanctions providers, blockchain analytics providers, and cookies and website technologies as permitted by law. A corporate customer providing another person’s information is expected to have authority and satisfy notification and consent requirements.

6. Purposes of Collection and Use
We use information to respond to enquiries; assess eligibility; establish relationships; conduct KYC and KYB verification; identify beneficial owners; assess compliance and transactions; provide international payments, foreign exchange and permitted digital asset services; process instructions; manage records; prevent fraud; screen sanctions; monitor transactions; meet legal obligations; respond to authorities; support customers; resolve complaints; improve website functionality; protect systems; communicate with businesses; send permitted marketing; and enforce lawful rights. We limit collection to what is reasonably necessary or legally permitted or required.

7. Consent
Where required, we obtain meaningful consent. Consent may be express or implied where permitted. Some processing may occur without consent when authorized or required by law, including compliance, fraud prevention, investigation and reporting. You may withdraw consent where legally permitted by contacting the Privacy Officer, but this may affect services and does not undo prior lawful processing or mandatory retention.

8. Financial Crime Prevention and Regulatory Compliance
We may be subject to the Proceeds of Crime (Money Laundering) and Terrorist Financing Act, sanctions legislation and other financial-services laws. We may verify identities and ownership, assess relationships and risks, maintain records, monitor activity, report specified transactions or suspicious activity, and answer lawful regulatory enquiries. Some reports and compliance information are confidential or legally restricted.

9. Disclosure
We may disclose information as reasonably necessary and legally permitted to financial institutions and payment partners; verification, compliance, sanctions and fraud providers; digital asset providers; technology and communications providers; lawyers, auditors, accountants and insurers; FINTRAC, law enforcement, courts, regulators and other authorities; and participants in lawful corporate transactions, subject to safeguards. We do not sell personal information to data brokers. Service providers are expected to use information only for authorized purposes and protect it.

10. International Data Transfers
Information may be processed, transferred, accessed or stored outside Canada, including in jurisdictions with different privacy laws. We apply contractual, organizational and technical safeguards required by law, including additional transparency or assessments where required under Quebec legislation. Contact the Privacy Officer for information about cross-border processing.

11. Information Security
We maintain safeguards against unauthorized access, use, disclosure, alteration, loss and destruction, including access controls, authentication, encryption where appropriate, secure transfers, confidentiality duties, vendor assessments, monitoring, incident response, training and secure disposal. No system or internet transmission is risk-free. Use approved secure channels for sensitive documents.

12. Data Retention
We retain information as reasonably necessary for identified purposes, business obligations and legal requirements. Financial-services and identity records may have prescribed retention periods. Information may be retained for proceedings, investigations or regulatory examinations. When no longer required, we securely delete, destroy or anonymize it where legally permitted.

13. Individual Privacy Rights
Subject to legal exceptions, individuals may request access, correction, information about collection and use, withdrawal of consent where permitted, information about disclosures, review of concerns and other rights under federal or provincial law. We may verify identity or authority and respond within applicable timeframes, explaining lawful limits or refusals.

14. Quebec and Other Provincial Rights
Where applicable, Quebec law may provide additional transparency, privacy-impact-assessment, portability, automated-decision, de-indexing, incident-record and privacy-by-default rights and obligations. We comply with applicable provincial requirements, including in Alberta and British Columbia where governed by those laws.

15. Automated Processing
Technology may support identity verification, transaction screening, fraud prevention and risk assessment. Where exclusive automated processing creates rights under applicable law, we provide relevant information and processes.

16. Cookies
Our website may use cookies for essential functions, security, analytics, preferences and optional marketing. Details depend on our configuration. See our Cookie Policy. Optional technologies will be subject to required consent and controls.

17. Marketing Communications
We may communicate with existing and prospective business customers about services and updates. Commercial electronic messages comply with Canada’s Anti-Spam Legislation and other requirements, including consent, sender identification, contact information and unsubscribe options where required. Operational and legally required messages may continue.

18. Third-Party Websites
We do not control third-party privacy practices. Review external privacy policies before providing information.

19. Privacy Incidents
We maintain procedures to assess and respond to privacy and security incidents and provide required notices and records.

20. Children
Our services are for businesses and authorized representatives. We do not knowingly market regulated financial services to minors or intentionally collect children’s information for business onboarding.

21. Changes
We may update this Policy for changes in services, practices, technology or law. The current version and last-updated date will appear on our website. Additional notice or consent will be provided where required.

22. Privacy Complaints
Contact our Privacy Officer if you believe information was mishandled. We will investigate and respond according to law. You may also contact the Office of the Privacy Commissioner of Canada or the applicable provincial regulator.

23. Contact
Tap 2 Send
Legal Entity: Tap 2 Send Ltd
Email: [PRIVACY EMAIL]
Address: 300 - 15300 CROYDON DRIVE,SURREY,BRITISH COLUMBIA,CANADA,V3Z 0Z5