Privacy Policy

1. Important Information and Who We Are

1.1

As a global company, KIRA and its Affiliates (the "KIRA Group") collect, use, and share personal information when you use any service that we offer. This global privacy notice has been created to cover how the KIRA Group ("We", "us", "our") collect, use, and disclose personal information and is relevant to KIRA Group website visitors and users of KIRA Group's services. The notice describes the types of personal information we collect, the purposes for processing that personal information, the third parties we share your personal information with, and the security measures we have implemented to keep your personal data secure. It also sets out the rights and choices of individuals and how to contact us about the information contained in this global privacy notice, wherever you are in the world.

1.2

Where any entity within the KIRA Group acts as a controller, the controller will be deemed to be the KIRA Group entity listed on the terms and conditions that you enter into when using a KIRA Group service.

1.3

This global privacy notice sets out some core content and, where applicable, can be read in conjunction with any supplemental privacy notices as required by country-specific law. This is where certain country-specific information, such as individuals' rights, can be found. In the absence of any country-specific information, this privacy notice will apply.

1.4

Our global privacy notice, and any associated country-specific privacy notices, will be reviewed from time to time to take account of new obligations and technology, changes to our operations and practices, and to make sure it remains appropriate to the changing global environment.

2. Data Protection Principles

2.1

The KIRA Group seeks to comply with all data protection laws that are applicable around the world. Where possible, we have adopted the core principles set out in the GDPR to inform how we collect and use your personal information. The principles are as follows:

• a) Used lawfully, fairly, and in a transparent way;
• b) Collected only for valid purposes that we have clearly explained to you and not used in any way that is incompatible with those purposes;
• c) Relevant to the purposes we have told you about and limited only to those purposes;
• d) Accurate and kept up to date;
• e) Kept only as long as necessary for the purposes we have told you about; and
• f) Kept securely.

3. The Kind of Personal Information We Collect and Use About You

3.1

Personal Information or personal data means any information about a living individual from which that person can be identified, even without any linkage to their name. It does not include data where the identity of the individual has been completely and permanently removed (which is called anonymous or anonymized data). The types of personal information we collect include the following categories:

• a) Identity and Profile;
• b) Contact;
• c) Financial;
• d) Usage;
• e) Transaction;
• f) Marketing and Communications; and
• g) Technical.

Examples of these categories are set out in the table in section 10.

4. How Your Personal Information is Collected

4.1

We collect information from you when you fill in forms on our website or correspond with us by phone, email, or otherwise. This includes information you provide when you register to use our website, report a problem with our site, or contact us to discuss any aspect of your account with us.

When you visit our website, access our services, or engage with our emails and online ads, we may collect information by automated means. For more information on how we collect your data, please refer to the Cookies Policy on our website.

4.1.a

We obtain most of the customer personal information shared with us directly through account applications or other submission forms, and by maintaining records of customer information provided in the course of our ongoing customer service. We may also obtain information from other sources to meet certain regulatory requirements.

4.1.b

On occasion, we will ask for other information voluntarily (for example, through market research, surveys, or special financial promotion offers) to enable us to improve our service or consider the wider needs of our customers.

4.1.c - Information We Receive from Other Sources

On occasion, we will collect your personal information indirectly and through a third party. Examples of this include our use of credit reference agencies to perform KYC (client verification) and AML (anti-money laundering) checks.

5. How Do We Use Your Personal Information

5.1

We will only use your personal information when applicable data protection law permits us to, including by identifying any necessary lawful bases for processing (i.e., a legally permissible reason for processing your personal information). Please check the relevant country-specific notices below to ensure that there are no differences in your specific jurisdiction.

5.2

The table below contains the purposes we plan to use your personal information, the types of data applicable to this purpose, and the applicable lawful basis for our processing activities:

6. Disclosures of Personal Information

6.1

We share your personal information with our trusted third parties as part of the operation of our global business. Your personal data will be shared with the following categories of recipients:

7. Security

7.1

Protecting your personal information and your privacy is very important to us. At a global level, we have set high standards for data security. We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed, altered, or disclosed in an unauthorized manner. In addition, we limit access to your personal information to those employees and third parties who have a business need to know. They will only process your personal information on our instructions and they are subject to a duty of confidentiality.

8. International Transfers

8.1

KIRA is an international business that has operations and service providers around the world.

8.2

Where we transfer your personal information outside of the jurisdiction in which the relevant controller (pursuant to this privacy notice) is incorporated in ("Jurisdiction"), as well as to processors located outside of the Jurisdiction who are engaged on our behalf. Where we transfer your information outside of the Jurisdiction, we will ensure that the transfer is lawful and that there are appropriate security and contractual arrangements in place to safeguard such transfers.

8.3

If we transfer your personal data to another country that doesn't offer a standard of data protection equivalent to the Jurisdiction from which your personal data is transferred from, we will ensure that your personal data is sufficiently protected through mechanisms such as (where applicable), (i) approved Standard Contractual Clauses; (ii) the UK Approved Addendum; (iii) Binding Corporate Rules; (iv) standard data protection clauses, certification or an approved code of conduct adopted by a supervisory authority within the Jurisdiction; or (v) a contractual framework deemed to provide an adequate level of protection for personal data.

8.4

To the extent applicable, please see any country-specific notices for additional details in relation to our international transfers and our appropriate safeguards in place.

9. How Long Do We Keep Your Personal Information

9.1

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

9.2

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

9.3

To receive additional details around our retention periods, please contact us using the details in section 12 below.

10. Examples of the Types of Personal Information We Collect About You

10.1

We may collect, use, store, transfer and otherwise process different kinds of personal information about you, which we have grouped together as follows:

11. Your Rights

11.1

Under certain circumstances, you have rights under data protection laws in relation to your personal data. These may include:

• a) The right to be informed
• b) The right of access
• c) The right to rectification
• d) The right to erasure
• e) The right to restrict processing
• f) The right to data portability
• g) The right to object
• h) Rights in relation to automated decision-making and profiling

11.2

You can exercise your rights by contacting us using the details set out in section 12 below.

11.3

If you have concerns regarding how we deal with your data, you have a right to complain to your local data protection authority or to the data protection regulator in the country where you live or work.

12. How to Contact Us

12.1

If you have questions or comments about our privacy practices, or if you would like help exercising your privacy rights, you can contact us using the email address set out below:

13. Changes to Our Privacy Policy

13.1

Any changes we make to our privacy policy in the future will be posted on this page and, where appropriate, notified to you by e-mail. Please check back frequently to see any updates or changes to our privacy policy.