Privacy Policy Last updated: 24/02/2024

At Token Tact (“We” or “Our”), we are dedicated to safeguarding your personal information and upholding your privacy rights as a user.

This Privacy Policy explains how we collect, store, process, and use your data when you engage with our website, Token Tact (referred to as the “Website”).

Our approach is guided by these core principles:

• Clear transparency in data handling:

We aim to keep users fully informed about how their data is managed, empowering confident and informed choices. Whether you’re exploring our Website or connecting with third-party crypto platforms, we provide clear, timely details about data usage.

Need more information? We’re here to help with any questions (unless restricted by law). Contact us at: [email protected]

• Data processed only for stated purposes:

Your personal data is used to enable access to the Website and connect you with third-party crypto trading services (our “Services”). This includes enhancing user experience, optimizing platform performance, meeting legal requirements, and protecting our services.

We may also analyze your data to tailor content or services to your preferences, ensuring a personalized experience for traders.

• Full control over your data:

We provide resources to help you exercise your privacy rights under law, including the ability to access, correct, delete, restrict, or transfer your personal data. Reach out to us, and we’ll respond in accordance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).

• Robust data security commitment:

While no system is entirely foolproof, we prioritize your privacy with advanced technical and organizational safeguards to protect your personal data from unauthorized access, loss, or misuse.

Our Privacy Commitments

1. Scope of This Policy

This Privacy Policy details the types of personal data we collect, how we gather it, how we use it, and when we may share it with third parties. It also explains our security and processing practices.

“Personal Data” refers to any information about an identifiable individual—someone who can be recognized directly or indirectly using available data.

“Processing” includes actions such as collecting, storing, updating, using, sharing, or deleting your personal data.

Our Services are for users aged 19 and older, in line with regulations. We do not knowingly collect or process data from minors. If such data is collected unintentionally, we will promptly delete it.

2. When We Collect Personal Data

We collect personal data when you use our Services, visit the Website, or interact with our communication channels. This includes data you provide directly or information we obtain from your activity or trusted third-party partners.

3. Is Sharing Personal Data Mandatory?

Providing personal data is voluntary. However, without it, you may not have full access to the Website or Services, and some features may not function properly.

4. Types of Personal Data We Collect

Automatically collected data: Includes activity logs, IP address, device and browser type, visit timestamps, crash logs, and general interaction data. Some of this may not personally identify you.

Data you provide: Includes information submitted while using our platform or engaging with third-party trading services through Token Tact.

Trading-related data: To connect with third-party platforms, we may collect your full name, phone number, and email address.

5. Purposes and Legal Basis for Processing

Token Tact processes your personal data only for valid, clearly defined purposes, each supported by a legal basis under law.

We ensure all data processing complies with lawful grounds, including:

Your consent: You may voluntarily share data, such as when filling out forms or requesting connections with third-party trading services. We process this data with your explicit permission.
Legitimate interests: We may process data to enhance our Services, secure the platform, or address legal matters, ensuring your rights are not overridden.
Legal obligations: We may process data to meet requirements under laws, such as anti-money laundering regulations or user verification.

For more details on how we apply legitimate interests or other legal bases, contact us at [email protected].

Below are examples of why we process your personal data and the corresponding legal grounds.

	Purpose of Processing	Legal Basis
1	Sharing your data with third parties at your request This occurs when you authorize us to share your details with external crypto or trading providers.	Your consent
2	Addressing your inquiries or support needs We use your data to respond to questions or provide assistance when you reach out.	Legitimate interest (customer support)
3	Meeting legal or regulatory requirements We process data to comply with laws or authorities, such as PIPEDA or anti-fraud rules.	Legal obligation
4	Enhancing our platform and Services We collect crash logs, feedback, and metrics to improve Token Tact for users.	Legitimate interest (platform optimization)
5	Preventing fraud or misuse We analyze activity to protect the platform from security threats or fraudulent behavior.	Legitimate interest (security)
6	Supporting platform operations This includes internal administration, legal reviews, or system maintenance for seamless service.	Legitimate interest (business operations)
7	Conducting analytics and statistics We use insights to enhance service quality, security, and user experience for peoples.	Legitimate interest (data analysis)
8	Protecting legal rights We may use data to support legal claims, enforce terms, or protect user and company assets.	Legitimate interest (legal protection)

6. Sharing Your Personal Data with Third Parties

Token Tact may share your personal data with trusted third-party providers who support our Services, such as secure hosting, analytics, user experience enhancements, and technical diagnostics.

If you request a connection with a third-party trading platform, we will share your contact details with them. These providers follow their own privacy policies, which we recommend reviewing. Your data may be shared with multiple platforms as needed.

We may also share data with business partners or affiliates to improve our Services for users.

In some cases, we may be required to disclose your personal data to regulators, government agencies, or legal entities, such as to comply with laws or resolve disputes.

If Token Tact undergoes a business transaction (e.g., merger, acquisition, or asset sale), your personal data may be shared with relevant parties. We will ensure compliance with privacy laws during such transfers.

7. Cookies & Third-Party Services

We use third-party tools, such as analytics or advertising platforms, that may place cookies on your device to enhance your experience and understand Website interactions. Each provider operates under its own privacy policy.

Cookies are small data files stored on your browser or device, enabling us to remember preferences, track activity, and personalize your experience.

Cookies help us analyze user engagement and improve Services. Session cookies are deleted when you close your browser, while persistent cookies remain to recognize you on future visits.

Types of cookies we may use:

Cookies are categorized by their function, supporting a seamless and secure experience for users.

Type of Cookie	Purpose	Details
Strictly Necessary Cookies	Essential for Website functionality, these cookies enable navigation, access to secure areas, and use of requested features. They ensure your device loads content correctly and maintains stable access.	May store basic data, like login timestamps, to keep you signed in. Session-based and deleted when you close your browser.
Functionality Cookies	Store your settings, such as language or display preferences, for a tailored experience on return visits.	Persistent cookies that expire after a set period.
Performance Cookies	Collect anonymous data on user interactions to test features and enhance the experience for peoples.	Do not store personally identifiable information. May be session-based or persistent, depending on purpose.

Managing and Removing Cookies

You can manage or delete cookies via your browser settings. Guides for popular browsers include:

Disabling cookies may impact Website functionality, limiting access to some features.

Online Tracking Notice

We currently do not respond to “Do Not Track” (DNT) browser signals.

8. Retention of Your Personal Data

How Long We Keep Your Personal Data

Token Tact retains your personal data only as long as necessary for the purposes outlined in this Policy or as required by laws, such as PIPEDA or anti-money laundering regulations.

When connecting you with third-party trading platforms, we may retain and share your data for up to 12 months, extendable for another 12 months with your consent.

We periodically review stored data and securely delete it when it’s no longer needed.

9. Data Transfers to Other Countries or International Bodies

Your personal data may be transferred outside Canada to trusted international partners. We ensure these transfers comply with PIPEDA and other applicable safeguards to protect your rights.

For users, we align with international data protection standards, including:

Countries with adequate privacy laws recognized by authorities.
Legally binding agreements ensuring data protection.
Standard contractual clauses for secure transfers.

For more details on international data transfers, contact us at [email protected].

10. How We Protect Your Data

We employ robust technical and organizational measures, including encryption, firewalls, access controls, and monitoring, to protect your personal data from loss, misuse, or unauthorized access.

While we strive for maximum security, no system is entirely immune. We cannot guarantee complete protection, especially during online transfers or with third-party involvement.

laws may require us to share data with government agencies or regulators, limiting our control over their handling of your information.

We recommend using secure networks and devices to minimize risks during data transmission.

11. Links to External Websites

Our Website may link to third-party sites or apps. Token Tact is not responsible for their privacy practices or content, as we do not control these external platforms.

Review the privacy policies of third-party sites before sharing data or using their services.

12. Your Data Privacy Rights

Under PIPEDA, you have the right to know if we collect your personal data, access it, correct inaccuracies, request deletion, or limit its use. You may also object to certain processing activities.

For residents:

Your rights under PIPEDA include:

Right of Access

You can confirm whether we process your data and request a copy, along with details such as:

Purposes of processing
Categories of data collected
Recipients of your data, including international transfers
Data retention periods
Your rights to correct or delete it
Your right to complain to the Office of the Privacy Commissioner
Data sources (if not from you directly)
Whether automated decision-making is used
Safeguards for international transfers

We provide data in a standard electronic format unless otherwise requested, but may limit disclosure if it impacts others’ rights.

Right to Rectification

You can request corrections to inaccurate or outdated data or provide a statement to complete incomplete data.

Right to Erasure

You may request deletion of your personal data if:

It’s no longer needed for its original purpose
You withdraw consent, and no other legal basis applies
You object to processing, and no overriding legitimate grounds exist
Data was processed unlawfully
Deletion is required by law

This right may not apply if processing is required for legal or claim-related purposes.

Right to Restrict Processing

You may request we limit processing of your personal data in cases such as:

You dispute data accuracy, and we’re verifying it
Processing is unlawful, but you prefer restriction over deletion
We no longer need the data, but you require it for legal claims
You object to processing, and we’re evaluating your objection

During restriction, we may store your data but only use it with your consent or for legal, public interest, or rights protection reasons.

Right to Data Portability

You can request your personal data in a structured, machine-readable format and transfer it to another provider, where feasible, if processing is based on consent or a contract and automated.

Right to Withdraw Consent

You may withdraw consent for data processing at any time, without affecting prior processing.

Right to Object

You can object to processing based on legitimate interests, especially if your situation warrants it. We will stop unless compelling legitimate grounds override your rights.

You may also object to data use for direct marketing, and we will cease immediately.

Right to File a Complaint

residents can file a complaint with the Office of the Privacy Commissioner if concerned about our data practices.

Your rights may be subject to limitations under laws.

How We Handle Rights Requests

We aim to respond to valid requests within 30 days, extending to 60 days for complex cases, with prior notification.

Requests are free, but repetitive or excessive requests may incur a reasonable fee or be declined.

We may request identity verification to process your request securely.

13. Updates to This Policy

We may update this Policy periodically. Changes will be posted on the Website, and significant updates will be communicated via email or Website notices to users. Updates take effect upon publication unless otherwise stated.