Daysrate Privacy Policy

This Privacy Policy explains how Daysrate.com ("we", "our", or "us") collects, uses, discloses,

and protects your personal data when you access or use our platform and services,

including through digital wallets and currency exchange transactions.

We are committed to protecting your privacy in accordance with applicable laws including:

• EU General Data Protection Regulation (GDPR)
• Nigeria Data Protection Regulation (NDPR)
• UK Data Protection Act (UK-GDPR)
• California Consumer Privacy Act (CCPA)
• Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA)
• South Africa’s Protection of Personal Information Act (POPIA)
• And other local laws in Ghana, Kenya, and Liberia.

2. Types of Data We Collect:

We collect the following categories of personal and financial data:

1.1. Identification and Verification Data (KYC):

• Full legal name
• Date of birth
• Government-issued ID (passport, national ID, driver’s license)
• Residential address and proof of address
• Biometric data (where required for identity confirmation)

1.2. Transaction and Platform Usage Data:

• Wallet balances
• Currency exchange history
• Bank account details and payment methods
• Device IP address, browser information, and geolocation
• Communication logs and support interactions
• Device IP address, browser information, and geolocation

1.3. Cookies and Web Analytics:

• Session behavior
• Preferences and usage patterns (via cookies and tracking pixels)

3. Purpose for Data Collection and Processing:

Your data is collected and processed strictly for legitimate purposes, including:

• Verifying your identity for compliance with KYC/AML laws
• Enabling and recording currency exchanges
• Managing and securing your e-wallets and transactions
• Detecting and preventing fraudulent or suspicious activities
• Providing customer support and platform services
• Fulfilling regulatory obligations in multiple jurisdictions
• Conducting internal analytics to improve platform efficiency

Your consent will be explicitly requested where required by applicable law,

and you may withdraw such consent at any time without affecting the legality of prior processing.

4. Data Sharing with Third Parties:

We may share limited personal data with the following categories of third parties,

always under strict data protection agreements:

• KYC/AML Verification Providers (e.g., Jumio, Onfido, Trulioo)
• Payment Gateway Processors (e.g., Flutterwave, Stripe, Paystack)
• Cloud and Infrastructure Providers, solely for hosting encrypted data
• Regulatory and Law Enforcement Authorities, when legally obligated

We do not sell or rent your personal data to third parties.

4. Data Storage, Encryption, and Retention:

4.1. Data Security and Encryption

All sensitive data is encrypted using AES-256 or equivalent at rest, and TLS 1.2+ in transit.

Access is role-based and logged for audit purposes.

Biometric data (where collected) is stored only as long as legally required and

is hashed or tokenized for additional protection.

4.2. Data Retention Period

We retain your data only as long as necessary to:

• Fulfill the purpose for which it was collected
• Resolve disputes and enforce our agreements
• Comply with applicable laws (e.g., 5–10 years for financial transaction records)

Upon expiration of the legal or operational need, data is permanently deleted or anonymized.

5. Your Rights as a Data Subject:

Depending on your jurisdiction (e.g., EU, Nigeria, UK, California, South Africa),

you may have the following rights:

• Access – Request a copy of the data we hold about you
• Rectification – Request correction of inaccurate or incomplete data
• Erasure (Right to be Forgotten) – Request deletion of data under certain conditions
• Restriction – Request limitation of processing in certain situations
• Portability – Request transfer of your data to another provider
• Objection – Object to data processing on legitimate grounds
• Withdraw Consent – At any time, without affecting prior lawful processing

To exercise any of these rights, please contact our Data Protection Officer (details below).

6. International Data Transfers:

Given the global scope of Daysrate.com, your data may be transferred to and processed

in countries outside your jurisdiction, including:

• Nigeria
• United Kingdom
• United State
• Canada
• South Africa
• Ghana, Kenya, Liberia
• EU or EEA countries (if applicable)

Where data is transferred internationally, we implement:

• Standard Contractual Clauses (SCCs) under GDPR
• Adequacy Decisions where applicable
• Binding Corporate Rules and data protection impact assessments (DPIAs)
• Encryption and storage in compliant cloud regions

You acknowledge and agree to such transfers, provided they comply with relevant privacy safeguards.

7. Cookies Usage:

We use cookies to:

• Authenticate sessions
• Store user preferences
• Analyze platform performance
• Personalize your user experience

7.2. Analytics Providers

We use third-party analytics tools (e.g., Google Analytics, Mixpanel) which may collect anonymized usage statistics.

These providers are contractually bound to process data in accordance with privacy standards.

You acknowledge and agree to such transfers, provided they comply with relevant privacy safeguards.

8. Data Breach Notification:

In the event of a data breach:

• Users will be notified without undue delay (within 72 hours if required by law)
• Regulatory authorities in affected jurisdictions will be informed as mandated
• Appropriate remedial actions will be taken to minimize impact

9. Changes to This Policy

We may update this Privacy Policy periodically. Any material changes will be communicated via email

or platform notification. Continued use of the platform signifies your acceptance of the revised policy.

10. Contact Our Data Protection Officer (DPO)

For privacy inquiries, complaints, or rights requests, please contact:

Data Protection Officer – Daysrate.com

Email: privacy@daysrate.com

Phone: +1 [332] 249 7355

Mailing Address: One World Trade Center 85th Floor, Lower Manhattan, New York - NY 10007, USA.

If you are located in the EU, UK, Nigeria, or any other region with a data protection authority,

you have the right to file a complaint with your local supervisory authority.