Taptap Send Global Privacy Policy

Last updated: September 2026

Version number: 1.11

This Privacy Policy explains how we collect, store, use, share and process your personal data when you use our website, services or mobile application (the “App”). It also describes the rights you have over your personal data.

Personal data means any information about an identified or identifiable individual. It does not include anonymous data, which cannot be linked back to an individual.

1. About us

The Taptap Send group is made up of different companies (set out below, together referred to as “Taptap Send”). Taptap Send offers international remittance services (and other services depending on your location) via its App and website (the “Services”).

The Taptap Send company providing the Services to you will be responsible for processing your personal data for that Service. We’ll let you know which company you have a relationship with when you first apply for or use a Service. It differs depending on where you live:

“Taptap Send”, “we”, “our” or “us” means the responsible Taptap Send entity. They are known as the ‘controller’ of your personal data in some jurisdictions. “You” means any visitor to our website or App or user of our Services.

This is a global Privacy Policy, which means that it applies to Taptap Send customers and their personal data in all the regions and countries listed above. Throughout this policy we refer to data protection legislation, but the legislation that is applicable to you will depend on which Taptap Send entity provides Services to you and where you are located. The data protection legislation applicable to the Taptap Send entities includes (but is not limited to) the UK General Data Protection Regulation, EU General Data Protection Regulation, Dubai International Financial Centre (“DIFC”) Data Protection Law N°5 of 2020, UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (“UAE PDPL”), and any applicable data protection, confidentiality, and customer data requirements issued by the Central Bank of the UAE (“CBUAE”), UK Privacy Electronic Communication Regulation 2011, EU e-Privacy legislation, Australia’s Privacy Act 1988 (Cth) and Australian Privacy Principles, New Zealand's Privacy Act 2020, Brazilian Data Protection Law (“LGPD”), the Bahraini Personal Data Protection Law No. (30) of 2018 and other applicable data protection laws. Where mandatory provisions of applicable law apply, those provisions shall prevail to the extent required by law.

2. How to contact us about your privacy and data protection

You can contact us about your privacy, to exercise your data rights and for information about how we use, process, store and protect your personal data by emailing us at privacy@taptapsend.com.

3. Types of personal data we collect and how we get it

Most of the personal data we process is provided to us directly by you. This sets out the information we collect and process, and where we get it from. The collection and use of data is crucial to providing our Services and keeping the Services safe. If you choose not to provide the Personal Data we request, we may not be able to provide you with the Service you need. Data helps us increase the safety of your online payments, while reducing the risk of fraud, money laundering and other harmful activity.

Due to the Services we offer, we may process personal data of individuals other than App or website users, such as the recipients of payments (including merchants) or other individuals making enquiries or complaints.

4. Age requirement

Our Services are not designed for those under the age of 18. If we become aware of anyone using our Services who may be under 18, we will take all reasonable steps to ensure we do not process their data any further and will tell them this.

5. Sensitive personal data

In limited circumstances, we will collect, process and store sensitive personal data, for example to enable us to comply with our legal and regulatory obligations (e.g. biometric data to carry out anti-money laundering checks). Depending on the applicable law, sensitive personal data may include information relating to health, biometric identifiers, genetic data, religious or philosophical beliefs, ethnicity, trade union membership or criminal records. Your jurisdiction may have rules that classify other information as sensitive.

All sensitive information is subject to appropriate levels of protection and we ensure we will only process your sensitive personal data if we have a lawful ground to rely on such as your consent. Whenever permitted by the applicable law, you acknowledge that by using our Services, you are consenting to us collecting your sensitive personal data as set out here.

6. Our legal basis for using your personal data

We must have a valid legal reason for using your personal data. The legal reasons we rely on include, depending on the jurisdiction, and to the extent permitted by law:

• Contractual obligations: We need personal data to provide our Services and cannot provide them without it. We use personal data to enter into agreements with you and meet our contractual obligations.

• Legal obligations: In some cases, we have a legal responsibility to collect and store your personal data (for example, for tax purposes or under anti-money laundering laws we must hold certain information about our customers)¹.

• Legitimate interests: Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests;

• Consent: Where you have given us your consent to process your personal data;

• Substantial public interest: Where the processing of sensitive or special category data (e.g. ethnicity data, biometric data, or data which may reveal health status or political opinions) is in the substantial public interest.

Where we process personal data that is special category data (i.e., biometric data or data which may reveal political opinions), we process it on the appropriate additional legal basis required by the applicable jurisdiction, such as consent or substantial public interest (including for the prevention or detection of unlawful acts).

When required by law, you explicitly consent to us accessing, processing and retaining personal data for provision of payment services and electronic money services to you.

7. Why we use and process your personal data

We collect, use, disclose and store your personal data for a variety of reasons that we set out below.

​​We may not be able to do these things without your personal data. For example, it may affect your use of the App, the Website or the provision of our Services to you and in some cases we may need to close your account with us.

We use your data to provide our Services:

• To fulfil agreements with you and to otherwise administer our relationship with you.

• To process payments and prove transactions have been executed.

• To process information about your contacts to make it easy for you to find and connect them and improve payment accuracy.

• To administer profiles of users on our databases.

• To issue cards and process payments made by card as part of our Services;

• To provide you with customer support (we may record and monitor any communications between you and us, including phone calls, to maintain appropriate records, check your instructions, analyse, assess and improve our Services for quality and training purposes).

• To provide, maintain, personalise, optimise, and improve the Services, including research and analytics regarding use of the Services, or to remember you when you leave and return to the Services.

We use your data to keep our Services up and running:

• To monitor website and App usage, including to determine enhancements and technical improvements.

• For customer analysis, to administer our Services, and for internal operations, for example troubleshooting, data analysis, testing, research and statistical purposes.

We use your data to meet our legal obligations and enforce our rights:

• To confirm your identity and verify your personal and contact details.

• To comply with applicable laws, including anti-money laundering, counter terrorist financing and sanctions laws, including to verify your identity.

• To establish, exercise or defend a legal claim.

• To action any data subject right requests.

• To meet our legal and regulatory obligations.

We use your data to protect you and other users against fraud:

• To detect, investigate and prevent activities which may be fraudulent or illegal, or which may misuse our Services or break our policies.

• To comply with financial crime laws and to confirm that you’re eligible to use our Services. We also use it to help us manage fraud risks related to your account.

We use your data to communicate with you:

• To communicate with you in relation to our Services, including to notify you of changes, seek your views or comments on our Services and to handle any enquiry or complaint you may have made.

We use your data for marketing and providing Services that might interest you:

• To improve our Services and for general business development, for example to develop new products and features and explore new business opportunities.

• For marketing, product and customer analysis, including testing, for example to improve our product range and optimise our customer offerings.

• To be able to administer your participation in competitions, offerings, and events.

• To provide you with information, news, and marketing about our Services, including where we partner with others to offer similar services.

• For advertising, including personalised advertising and advertising by Taptap Send ambassadors.

8. Who we share your personal data with

Due to the nature of our business, there may be times we share your data with the following third parties. (We do not sell your personal data, unless lawful to do so in the context of a transfer of business (see section 19 below).)

• Taptap Send group companies: We share data with related companies and members of the Taptap Send group where necessary to provide our Services.

• Taptap Send recipients: We also share your personal data with the person who provides your payment method and recipients (through service providers) that you transfer money to. Where you make a transfer, the recipient may receive your details with your payment (for example, your name and IBAN).

• Taptap Send service providers: We will share your personal data with various suppliers who provide us with services that we need in order to provide our Services to you, for example:

  • Suppliers who provide us with IT, payment and delivery services;

  • Suppliers who help us meet our legal and regulatory obligations, such as identity verification service providers and background check providers (these providers may use your data to conduct checks with credit reference agencies, financial or credit institutions, official registers and databases, as well as fraud prevention agencies to verify your identity);

  • Suppliers who provide us with card processing and management services;

  • Our banking and financial services partners and payments networks (including Visa);

  • Analytics providers and search information providers;

  • Legal advisors and other professional advisors;

  • Customer-service providers, survey providers and developers (including chatbot services);

  • Suppliers, including artificial intelligence providers, who help us read and extract information from documents or images you upload; and

  • Communications service providers.

• Third parties authorised by you: We share personal data with parties directly authorised by you. The use of data by an authorised third party is subject to the third party’s privacy policy and any agreements you have with them. For example, for Visa Click to Pay (if applicable), we are joint controllers of your personal data under Article 26 of the GDPR and, as such, we are responsible for activating your card for Click to Pay and sending your cardholder data to Visa. Visa is responsible for storing your Click to Pay profile and operating the Click to Pay database, verifying your identity via one-time passcodes and providing your tokenised card details to merchants at checkout. Please see Visa’s Global Privacy Notice at: https://www.visa.co.uk/legal/global-privacy-notice

• Other third parties: There may also be instances where we may need to share personal data with a competent law enforcement body, regulatory body, government agency, court, or other third party where we believe disclosure is necessary (i) as a matter of applicable law or regulation or (ii) to exercise, establish or defend our legal rights. We may also share your personal data to respond to requests from public and government agencies (including law enforcement) upon demonstration of lawful authority.

• To advertisers, advertising and social media networks, analytics and search engine providers: We share personal data with these providers (which includes Google) to select and serve relevant adverts to you and others. Where required by law, you consent to these providers using personal data for personalised advertising.

• To Taptap Send’s ambassadors: We share personal data with ambassadors we are partnered with to promote our Services to you. You consent to these ambassadors using personal data to advertise our Services to you.

• We use certain automated tools and technologies in limited ways to support the efficiency and accuracy of our operations, including customer due diligence processes and Know Your Client purposes. Any personal data processed through such tools is handled in accordance with applicable data protection laws and regulations, and your rights to access, rectify, or erase your data remain fully protected. Where you upload an image or document of a recipient's details, we use a third-party artificial intelligence provider to read and extract those details so we can pre-fill the recipient screen for you; this is not used to make any decision about you.

9. International data transfers

As our Services are international, we may need to transfer your personal data outside the country you are located in to help us provide our Services.

Where permitted by applicable laws and regulations, Personal data that we collect may be transferred to, and stored and processed in, the United States or United Kingdom, Europe, Canada and any other country in which we or our affiliates, subcontractors, vendors or partner payment processors maintain facilities (for example, the countries our recipient partners are located in, as set out on our website). The laws in the U.S. and other countries regarding personal data may be different from the laws of your state or country. Any such transfers will comply with safeguards as required by relevant law. It may also be processed by staff operating outside the country you are located in, who work for us or for one of our payment processors. Such staff may be engaged in, among other things, the fulfilment of your payment order, the processing of your payment details and the provision of customer support. By submitting your personal data, you acknowledge this transfer, storing or processing.

If we transfer your personal data to another country that doesn’t offer a standard of data protection equivalent to where you are located, we will make sure that your personal data is sufficiently protected and requirements from applicable laws are observed. For example, we’ll make sure that a contract with strict data protection safeguards is in place or we rely on a suitable safeguard and/or regulatory approvals before we transfer your personal data. For more information about how we protect your personal data, please contact us.

If you were previously a customer of Taptap Send (DIFC) Limited and subsequently applied to become a customer of T T S Financial Services Middle East L.L.C, we may reuse personal data collected by Taptap Send (DIFC) Limited, including identity verification and transaction data. Such data will be processed by T T S Financial Services Middle East L.L.C for the following purposes: (i) meeting applicable legal and regulatory onboarding requirements; (ii) fraud prevention and risk management; and (iii) providing and administering our products and services to you. By proceeding with your application to re-onboard with T T S Financial Services Middle East L.L.C, you acknowledge this notice and, where required by applicable law, consent to the processing of your data for the purposes described above. You may withdraw consent at any time by contacting us, subject to Taptap Send (DIFC) Limited and T T S Financial Services Middle East L.L.C's right to retain data where required by law or regulation.

10. Marketing and other communications

To the extent permitted by law, we may use the contact details you provide to send you marketing communications by email, telephone, SMS, WhatsApp, push notification, social media or other communication formats about our Services. This may include news, promotional offers, opportunities to enter competitions and win prizes and updates regarding our company and Services (including new services and products).

You have the right to ask us not to process your personal data for marketing purposes.

You can exercise this right simply at any time by telling us or following the instructions in the communication e.g. unsubscribing from emails and replying ‘STOP’ to SMS (messaging rates may apply). We respect your choice and will stop sending you such communications as soon as reasonably practicable and within one month of receiving your request to unsubscribe, or any shorter period required by law. You are free to change your choices at any time. To the extent required and/or permitted by law, we may contact you to reaffirm your consent to marketing or other communications, where we rely on your consent for marketing activity.

Please note that if you ask us not to contact you by email at a certain email address, we will retain a copy of that email address on a “suppression list” in order to comply with your no-contact request.

If you opt-out, we may still send you important service and administrative messages, from which you cannot opt-out.

Taptap Send authentication by SMS

In order for us to set up strong customer authentication on your account, a pin code will be sent to your mobile phone upon completing your account sign up through the App. You will receive one message per request to authenticate, message and data rates may apply.

You confirm that you hold the account corresponding to the mobile phone number you enter. By signing up for Taptap Send and receiving the pin code, you are agreeing to our User Agreement, this Privacy Policy and our eCommunications Policy, and confirming that you have read and understood this Privacy Policy. For help please contact privacy@taptapsend.com.

11. Website links

This website contains links to other websites, which are clearly marked as such. Please note that we have no control over external websites and are not responsible for the protection and privacy of any information which you may provide to them. Please refer to a website’s privacy policy when using it.

12. Cookies

A cookie is a small text file that is unique to the web browser on your computer or mobile device, which is used to retain user preferences, and enhance browsing experience. We use cookies and other tracking technologies on our website, App and in emails we send you. Some cookies are strictly necessary for our App and website to function; others are used for analytics, personalisation, or marketing purposes. We will not place non-essential cookies or tracking technologies on your device without your consent. You can manage your preferences through the cookie settings on our website or in the App settings.

We collect the bare minimum, necessary cookies in order to operate the relevant website or app. By continuing to use our website/App, you are agreeing to our use of essential cookies.

Check the ‘cookie settings’ menu to change your cookie preferences. You can choose to alter cookies settings related to the use of our website, but this may limit your ability to access certain areas of the website.

Please see our Cookies Policy for more detail, including full details of the cookies and tracking technologies we use and how to control them.

13. Automated decision-making

We use automated processes to support decisions about your application, account, and transactions. This includes, verifying your identity, assessing fraud and financial crime risk, screening transactions, and reviewing account activity. These processes may result in a decision to reject your application, block or decline a proposed transaction, restrict access to your account, or to close your account. Where a decision is taken solely on automated processing and may produce a significant adverse effect on you, you will be notified and offered the opportunity to provide further information and challenge the decision through an appeal mechanism, which includes a manual non-automated review. In any case, if you feel that an automated process may have impacted you, please contact us at privacy@taptapsend.com.

14. Data retention

We will generally keep your personal data for ten years after our business relationship with you ends, or for as long as necessary and permitted in line with various local requirements, such as for example, best practice recommendations (e.g. supervisory authority recommendations), relevant guidelines (e.g. employment guidance) or for as long as mandated under specific legislation (e.g. tax laws).

We will also determine appropriate retention periods based on our legitimate interests where identified. As a regulated financial institution, we are required by law to store some of your data beyond the termination of your relationship with us. After such time, your data will only be accessed or processed if absolutely necessary. We will always delete data that is no longer required by relevant legislation.

We take reasonable steps to delete or de-identify personal data as required by relevant legislation.

When personal data needs to be deleted or de-identified, we will either delete manually or automatically, or anonymise it if deletion is not possible.

15. Data security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. We use reasonable physical and technical safeguards to protect your personal data, both during transmission and storage. No method of transmission over the internet, including by email, or method of electronic storage is 100% secure. So, we cannot guarantee its absolute security.

All information you provide to us is stored on our secure servers. Any payment transactions will be encrypted using Transport Layer Security technology. You are responsible for keeping confidential any passwords we give you. We ask you not to share this password with anyone else and not to use this password for other services or products.

In addition, we limit access to your personal data to those who need it to do their jobs (i.e. employees, agents, contractors and other third parties who have a business need to know). Where this is a third party, they will only process your personal data on our instructions and they are subject to a duty of confidentiality.

16. Data protection rights

Data protection laws enable several rights in relation to how an organisation processes your personal data.

If you would like to exercise any of the below rights you can do so by sending us a written request to privacy@taptapsend.com. For security reasons, we can't deal with your request if we’re not sure of your identity, so we may ask you for proof of ID.

Your ability to exercise these rights will depend on a number of factors. Sometimes, we won’t be able to agree to your request (for example, if we have a legitimate reason for not doing so or the right does not apply to the particular information we hold about you). If you object to us using personal data which we need in order to provide our Services, we may need to close your account as we won’t be able to provide the Services to you.

When you exercise one of your rights it may take us up to one month to respond or implement your changes, unless another timeframe is determined by applicable law. Where applicable law prescribes a specific timeframe for responding to personal data rights requests (for example, ten working days in certain jurisdictions), we will comply with the timeframe required by that law.

If you are based in the UK, our one-month response period begins from the later of (a) the date we receive your request, or (b) the date we receive any additional identity verification information we request. We will inform you where we need further information from you to identify what information or processing activities you are asking about, and our one-month response period will be paused until we receive this further information.

United Kingdom and the European Union

• Right to be informed - You have the right to know what personal data we collect about you, how we use it, for what purpose and in accordance with which lawful basis, who we share it with and how long we keep it. We use our Privacy Policy to explain this.

• Right to access data - You have the right to receive a copy of the Personal Data we hold about you (this is sometimes referred to as a “Subject Access Request”).

• Right to rectification - You have the right to have any incomplete or inaccurate information we hold about you corrected. You can also make updates yourself in the App.

• Right to erasure - You have the right to ask us to delete your personal data if it is no longer necessary for the purpose for which it was collected or needed by us to meet our legal obligations or for a legitimate interest.

• Right to restrict processing - You can tell us to stop using your personal data, including for marketing.

• Right to objection - You have the right to object to us processing your personal data. If our legal basis for using your personal data is 'legitimate interests' and you disagree with us using it, you can object. However, we will assess whether our interests are overridden by your fundamental rights and freedoms.

• Right to portability - You can ask us to transfer personal data to you or another company.

• Right to not be subject to automated decision-making - You have the right to opt out of our processing of your Personal Information for the purposes of using it to make automated decisions or train an automated decisioning model.

Canada

• Right to be informed - You have the right to know what personal data we collect about you, how we use it, for what purpose when you give us consent to process your personal data. We use the Privacy Policy to explain this.

• Right to access data - You have the right to be informed of the existence and use of your personal data and to receive a copy of the personal data we hold about you.

• Right to rectification - You have the right to have any incomplete or inaccurate information we hold about you corrected You can also make updates yourself in the App.

• Right to objection - You have the right to object to us processing your personal data where our legal basis for processing is consent.

• Right to make a complaint or inquiry about our practices – You have the right to make a complaint or inquiry to us about our personal data policies and procedures.

• Right to erasure - You may have the right to ask us to delete your personal data in certain circumstances in accordance with applicable laws.

• Right to data portability. You may have the right to request a copy of your personal data, including your transaction history. Your transaction history is downloadable in machine-readable format from the App.

• Right to request the review of decisions made solely based on automated processing – You may have the right to request that we review decisions made based on the automated processing of your personal information.

United Arab Emirates

• Right of access - Upon request, we will provide you with information about whether we hold any of your personal data. We will also provide, free of charge, access to one copy of your personal data that we may hold.

• Right of rectification - You may request to review, delete or update your personal data to ensure it is accurate. You can also make updates yourself in the App.

• Right to erasure - You have the right to ask us to delete your personal data if it is no longer necessary for the purpose for which it was collected or needed by us to meet our legal obligations or for a legitimate interest. We will inform you which of your personal data may be erased without violating our legal obligations.

• Right to restrict or object to our processing. - You have the right to ask us not to process your personal data if we are processing your data based on legitimate interests or the performance of a task in the public interest as an exercise of official authority (including profiling) or using your data for direct marketing (including profiling). You also have the right to ask us not to process your personal data while a rectification request is pending.

• Right to withdraw your consent – You have the right to withdraw your consent if your personal information is processed based on consent. As a result, any processing of your personal data that is being carried out based on consent will be ceased.

• Right to not be subject to automated decision-making - You have the right to opt out of us processing your Personal Information for the purposes of profiling in furtherance of solely automated decisions that produce legal or similarly significant effects concerning the consumer.

• Right to data portability. You have the right to request a copy of your personal data , including your transaction history. Your transaction history is downloadable in machine-readable format from the App.

• Use of Artificial Intelligence (AI). We use AI in specific, limited ways to enhance the efficiency and accuracy in our operations, and for Know Your Client purposes. Personal data processed through AI tools is handled in accordance with DIFC Data Protection Law and DIFC Data Protection Regulation 10, and your rights to access, rectify, or erase your data are fully maintained.

• You have the right to request that we rectify or delete personal data collected and maintained about you. However, there are some circumstances where your request to rectify or delete your personal data may be denied if it is necessary for us to retain your information (for example, for legal or regulatory reasons).

• Right to not be discriminated against because of the exercise of any of the above rights.

United States

Residents of certain states may have additional privacy rights:

• If you live in California, we comply with the California Consumer Privacy Act (CCPA), to the extent applicable.If you live in Connecticut, we comply with the Connecticut Data Privacy Act (CTDPA), to the extent applicable.

• If you live in Minnesota, we comply with the Minnesota Consumer Data Privacy Act (MCDPA), to the extent applicable.

• If you live in Montana, we comply with the Montana Consumer Data Privacy Act (MCDPA), to the extent applicable.

• If you live in Oregon, we comply with the Oregon Consumer Privacy Law (OCPL), to the extent applicable.

In this section “Personal Information” means data that can be categorised into data that directly identifies you individually.

If you live in any of the above states, you may have certain rights in relation to the processing of data that either directly identifies you individually or can be categorized into data that directly identifies you (“Personal Information”, for purposes of this section of the Privacy Policy):

• Right to be informed - We are required to tell you important information about what we do with your Personal Information. We do this through this Privacy Policy. In particular, the Privacy Policy sets out:

  • The categories of Personal Information (and sensitive Personal Information) to be collected and the purposes for which these are collected and used (including whether information is sold or shared);

  • How long we will keep your Personal Information (including sensitive Personal Information) for;

  • How and where you can exercise the rights you have under data protection laws applicable to you as listed above, i.e., through our email address privacy@taptapsend.com;

  • The categories of Personal Information we share with third parties, and the categories of those third parties;

• Right to access - You have the right to ask us to confirm whether or not we are processing your Personal Information and access it. In particular, you can ask us:

  • What categories of Personal Information and what specific pieces of Personal Information we have collected about you

  • The categories of sources from which the Personal Information is collected

  • The business or commercial purpose for collecting or sharing your Personal Information

  • The categories of third parties to whom we disclose your Personal Information

• Right to rectification - you have the right to correct inaccuracies in Personal Information we hold about you, taking into account the nature of the Personal Information and the purposes of processing it.

• Right to erasure - You have the right to request deletion of Personal Information we hold about you. However, this right may only be exercised to the extent that we are not required to retain relevant Personal Information about you by other applicable laws.

• Right to data portability. You have the right to request a copy of your Personal Information, including your transaction history. Your transaction history is downloadable in usable, machine-readable format from the website or App that allows you, as far as possible, to transfer the Personal Information without impediment.

• Right to opt-out - You have the right to opt out of the processing of your Personal Information for purposes of:

  • Targeted advertising; or

  • The sale of Personal Information(excepted as permitted or required by law).

• Do Not Sell My Personal Information - We do not “sell” Personal Information. However, should we sell Personal Information in the future, you will have the right to opt out of such sales.

• Right to not be subject to automated decision-making - You have the right to opt out of our processing of your Personal Information for the purposes of using it to make automated decisions or train an automated decisioning model.

• Additional rights in California - You have the right to request that we limit our use of the sensitive Personal Information to what is necessary to perform the services as reasonably expected. You also have the right to not be discriminated against because of the exercise of this or any of the above rights.

• Notice for Texas - If you have a complaint, first contact the consumer assistance division of Taptap Send at 833-916-0670, if you still have an unresolved complaint regarding the company's (money transmission or currency exchange) activity, please direct your complaint to: Texas Department of Banking, 2601 North Lamar Boulevard, Austin, Texas 78705, 1-877-276-5554 (toll free),www.dob.texas.gov.

Australia

• Right to open and transparent management of your personal data - You have the right to know what personal data we collect about you, how we use it and for what purpose. We use the Privacy Policy to explain this.

• Right to access personal data - You have the right to receive a copy of or access to the personal data we hold about you.

• Right to seek correction - You have the right to have any incomplete, out-of-date, inaccurate, misleading or irrelevant personal data we hold about you corrected. You can also make updates to your personal data yourself in the App.

• Right to not be subject to automated decision-making - You have the right to opt out of our processing of your Personal Information for the purposes of using it to make automated decisions or train an automated decisioning model.

• Our goods and services come with guarantees that cannot be excluded under the Australian Consumer Law. Nothing in this policy excludes, restricts, or modifies any right or remedy, or any guarantee, warranty, or other term or condition, implied or imposed by the Australian Consumer Law which cannot be lawfully excluded or limited.

New Zealand

• Right to access personal data - You have the right to access to the personal data we hold about you.‍

• Right to seek correction - You have the right to ask us to correct personal data we hold about you. You can also make updates to your personal data yourself in the App.

Brazil

If you are a Brazilian resident or were located in Brazil when your personal data was collected, you have the following rights, which you can exercise at any time, free of charge.

• Right to obtain confirmation of processing – You have the right to ask us whether we process or not your personal data. Please note that if you use our Services, our answer to this request will be positive.

• Right to access your personal information – You have the right to receive a report in which we present the personal information related to you and processed by us.

• Right to correct personal information that is incomplete, inaccurate or out of date – You have the right to request correction, indicating what needs to be changed and why if you understand that your personal information is incorrect. We may ask for proof to make the required update.

• Right to request anonymization, blocking or deletion of personal data – You have the right to request that unnecessary, excessive or personal information which is processed in noncompliance with the provisions of the LGPD is anonymized, blocked or deleted.

• Right to request the portability of your personal information – You have the right to request the portability of your personal data held by us to another service or product provider, as long as commercial and industrial secrets are respected.

• Right to obtain information about who we share your personal information with – You have the right to request that we provide information related to the sharing use of your personal information. Please note that information about who we may share your personal data with is provided in section 8 above.

• Right to obtain information about the possibility of not providing your consent and the respective consequences – You have the right to be informed about the possibility of not providing consent and the consequences of refusal when consent is used as a legal basis for the processing of your personal data.

• Right to withdraw your consent – You have the right to withdraw your consent if your personal information is processed based on consent. As a result, any processing of your personal data that is being carried out based on consent will be ceased.

• Right to oppose processing that violates the law – You have the right to object to the processing for your personal data if you understand that we are processing your personal data in a manner contrary to the law. The request will be analyzed very carefully and, if we agree, the processing of your personal data that does not comply with the law will be ceased.

• Right to request the review of decisions made solely based on automated processing – You have the right to request that we review decisions made based on the automated processing of your personal information.

Kingdom of Bahrain

• Right to be informed and notified - You have the right to be notified when your personal data is collected or processed. This includes knowing the purpose of processing, the details of the data controller, and the recipients of your data.

• Right to access data - You have the right to request confirmation of whether your personal data is being processed. If it is, you can ask for details about the data, its source, the purpose of processing, and who it is shared with.
  

• Right to rectification, blocking, and erasure - You have the right to ask us to correct, block, or delete your personal data if it is inaccurate, incomplete, outdated, or unlawfully processed.

• Right to object to direct marketing - You have the right to object to your personal data being used for direct marketing purposes. If you make such a request, we must stop processing your data for marketing.

• Right to object to processing causing damage - You have the right to object to the processing of your data if it is causing you unwarranted substantial damage, whether material or moral. This does not apply if you have given your explicit consent or if the processing is required by law.
  

• Right to object to automated decision-making - You have the right to object to decisions based solely on automated processing (such as creditworthiness or performance assessments) and to request a method that involves human intervention.
  

• Right to lodge a complaint - You have the right to file a complaint with the Personal Data Protection Authority if you believe your rights under the law have been violated or your data is being processed unlawfully.

Pakistan

• Pakistan does not currently provide a comprehensive statutory framework granting specific data subject rights in relation to personal data. Accordingly, individuals in Pakistan may not have legally enforceable rights to access, correct, delete, or otherwise control their personal data under a general data protection law. We will, however, consider privacy requests on a case-by-case basis where reasonable and lawful to do so.

17. Concerns and complaints

We understand you may have concerns and complaints in relation to this Privacy Policy and in relation to how we process personal data. If you would like to contact us directly to talk to us about a concern or to raise a complaint, you can do so by emailing us at privacy@taptapsend.com and setting out full details of your complaint. We will acknowledge receipt of your complaint within 30 days of receiving it, and will investigate your complaint within a reasonable period of time depending on the difficulty and complexity of your complaint. We will tell you the outcome of our investigation as soon as we are able to and inform you of any steps taken or proposed to be taken to handle your complaint. We may need to engage or consult with other parties in order to investigate and deal with your complaint. We will keep records of your complaint and any resolution. If you’re unhappy with how we’ve handled your personal data or any request you have made to exercise your rights, you can complain using the details set out below.

18. Changes to this Privacy Policy

We will make changes to this Privacy Policy from time to time to reflect changes to law, best practice and how we process personal data. We will do this by posting a revised version on this website. We recommend that you check this webpage occasionally to stay up to date.

19. What happens if our business changes hands?

We may, from time to time, expand or reduce our business and this may involve the sale and/or the transfer of control of all or part of our business. Any personal data that you have provided will, where it is relevant to any part of our business that is being transferred, be transferred along with that part and the new owner or newly controlling party will be permitted to use that data only for the purposes for which it was originally collected by us.