Website Privacy Policy

1. Introduction

1.1 This Policy (together with our Terms and Conditions, and any other documents referred to in them) sets out the basis on which we, MyAssets Limited (“MyAssets”), a Hong Kong registered company, with company number 3046285 and registered address of 503, Crawford House. 70 Queen’s Road Central, Hong Kong, will process any personal data we collect from you, or which you provide to us, in the course of using our website (“Site”). (https://myassets.com/)

1.2 We respect the privacy rights of all our users and recognise the importance of protecting the information we collect about you. Our Privacy Policy is designed to help you understand how we collect, hold, use and disclose personally identifiable information about you.

1.3 For the purpose of the UK Data Protection Act 2018 (“DPA’18”) MyAssets is the data controller.

2. Your Information

2.1 The personal data of our users is processed under the UK General Data Protection Regulation (“UK GDPR”) and DPA’18 on the lawful basis of legitimate business interest.

2.2 All personal data, including personal data that is collected when you contact us, for marketing purposes or for purposes of analytics, is collected and processed under the legal basis of legitimate business interest to provide users with information about the MyAssets platform and answer any queries.

3. Information that may be collected about you

3.1 Where you use the ‘contact us’ button on the Site, data, including your personal data, may be collected. This may include the following information:

• Your name;
• Your email address;
• Your contact details; and
• Any information in relation to your enquiry.

3.2 During the course of using our Site other personal data may be collected from you, including:

• Your internet Protocol (“IP”) address;
• Device type, for example iOS or Android;
• Time zone and location;
• Your activity on the App;
• Date and time stamps; and
• Operating system.

4. How your personal data may be used

4.1 MyAssets may use your data in the following ways:

• To respond to your enquiry.
• To ensure that content from our Site is presented in the most optimised and effective manner for you and for your computer.
• To diagnose or fix technology problems.
• To control unauthorised use or abuse of our Site and our products and services, or otherwise detect, investigate or prevent activities that may violate our Site policies or be illegal.
• To carry out obligations arising from any interaction entered into between you and MyAssets.
• To allow you to participate in interactive features of this service, when you choose to do so.
• To notify you about changes to any service.
• To administer our Site including data analysis, testing, traffic monitoring, research, statistical and survey purposes.
• To provide you with information, products or services that you request or that we feel may interest you, where you have consented to be contacted for such purposes.
• To gather general statistical information which may then be provided to third parties. In such case any information provided to third parties will not allow you as a data subject to be personally identified.

4.2 We will only contact you for marketing purposes if you opted in to receiving such communications, either at the time of signing up to the Platform or at a later date. If you later decide that you do not wish to be contacted for marketing purposes, you can unsubscribe using the unsubscribe function in the footer of the email, or by sending an email to [email protected].

5. Special category personal data:

5.1 We ask you not to send us, and you not to disclose, any sensitive personally identifiable information (such as information related to racial or ethnic origin, religion or other beliefs, health, criminal record or trade union membership) on or through our Site or otherwise. If, contrary to this request, you do provide any sensitive information, in doing so you acknowledge that we will be collecting and handling that information in accordance with this Privacy Policy.

6. How your data may be disclosed

6.1 In order to provide services to you, MyAssets may transfer your personally identifiable information to third parties, parents, affiliates, subsidiaries and service providers, some of which may process and/or store your personally identifiable information outside of the European Economic Area (“EEA”). However, in such an instance all reasonable steps will be taken to ensure that your personal data is treated securely and in accordance with this Privacy Policy (where possible). Any data transfers that take place outside of the EEA will be covered by appropriate safeguards, for example Standard Contractual Clauses (“SCCs”), Binding Corporate Rules (“BCRs”) or Data Transfer Agreements (“DTAs”).

6.2 Third parties to whom your personally identifiable information may be disclosed include, but are not limited to:

• Stripe: https://stripe.com/gb/privacy;
• Plaid: https://plaid.com/legal/#consumers
• Hubspot: https://legal.hubspot.com/privacy-policy
• Genesys: https://www.genesys.com/en-gb/company/legal/privacy-policy
• Sendgrid: https://www.twilio.com/en-us/legal/privacy
• Google Firebase and Firestore: https://firebase.google.com/support/privacy/
• Cloudflare: https://www.cloudflare.com/en-gb/privacypolicy/

6.3 Please note that if you click on, or follow, any links from our Site to external websites, our Privacy Policy will no longer apply. Please check the privacy policies of any such external site before submitting any personal data, as we cannot accept any responsibility or liability in relation to them.

7. Servers

7.1 All information you provide to us will be stored on our secure servers based in Germany, encrypted using SSL TLS v1.2 encryption.

7.2 We take your privacy seriously and will take all reasonable steps to protect your personal data, but please beware that any data that you submit to our Site is sent at your own risk.

7.3 The data that we collect from you may be processed, transferred to, stored in or accessed by MyAssets’ employees in countries that are outside of the EEA. These countries include, but is not limited to, Hong Kong, the Philippines and New Zealand. By submitting your personal data, you agree to this. We will take all reasonable steps to ensure that your data is treated securely and in accordance with this Privacy Policy.

8. Data Storage

8.1 We hold personally identifiable information in a combination of hard copy and electronic files for the period necessary to support our Site, comply with our legal obligations, resolve disputes, or otherwise fulfill the purposes outlined in this Privacy Policy. We use third-party information system providers who may store or have access to your personal information. We may also retain backup information on our servers for some time to comply with applicable law or our internal security policies. We do not always remove or delete all of your information for a number of reasons including technical and system constraints and contractual or legal requirements.

8.2 We operate a data retention period of 7 years from the date of our last interaction with a user. 7 years after the date of our last interaction with a user all of the data provided by the user during all of their interactions with us will be reviewed and securely deleted/ destroyed, subject to MyAssets’ legal and regulatory obligations.

8.3 No method of transmission over the internet, method of electronic storage or other security methods is one hundred percent secure. Therefore, while we strive to use commercially acceptable means such as firewalls, password-protected databases with limited physical and electronic access, and encryption to protect your personally identifiable information against unauthorised use, disclosure or modification, we cannot guarantee its absolute security.

9. Processing of personal data of those below the age of 13

9.1 Our Site is not intended for use by anyone under the age of 13 nor does MyAssets knowingly collect or solicit personally identifiable information from anyone under the age of 13. If you are under the age of 13, you may not attempt to send any information about yourself to us, including your name, address, telephone number, or email address.

9.2 In the event that we confirm that we have collected personally identifiable information from someone under the age of 13 without verification of parental or guardian consent, we will delete/destroy that information promptly. If you are a parent or legal guardian of a child under the age of 13 and believe that we might have any information from or about such child, please contact us at the email or mailing address provided at the end of this Privacy Policy.

10. Data subject rights

10.1 You have the following rights under DPA’18 in relation to your personal data. You may exercise any of these rights at any time by contacting us here.

10.2 Subject access request - You have the right under DPA’18 to access the information we hold about you.

10.3 Right to rectification – You have the right under DPA’18 to request the amendment or updating of all the personal information that we hold about you.

10.4 Right to erasure – You have the right under DPA’18 to have all of the information that we hold about you deleted in line with our statutory and legal responsibilities.

10.5 Right to restriction of processing – In line with Article 18 (1) (a) to (d) of UK GDPR, you have the right under DPA’18 to obtain from the controller restriction of processing.

10.6 Right to data portability - You may have the right under DPA’18 to request a copy of all of the information we hold about you if the processing is based on consent or contract and the processing is being carried out by automated means.

11. Enforcement

11.1 We cooperate with the appropriate regulatory authorities, including local data protection authorities (the UK Information Commissioner’s Office (“ICO”)), to resolve any complaints regarding the collection, processing and disclosure of personally identifiable information that cannot be resolved between MyAssets and the individual.

11.2 If you have a concern about your privacy or would like to know more about how your personally identifiable information is collected or used, please contact us. We ask that when you contact us with a complaint, please include contact information and clearly describe your complaint. For any complaint regarding privacy please use [email protected].

11.3 We will respond to your request or complaint within a reasonable time and will let you know the next steps in resolving your complaint. If you are not satisfied with our response, you may also contact your local and federal data protection authorities to lodge a complaint.

11.4 Should you not be satisfied with the process, conduct or response to a request you may have made you have the right to complain to the ICO (https://ico.org.uk/make-a-complaint/).

12. Notices and provisions

12.1 We reserve the right to change our Privacy Policy at any time. These changes will take immediate effect unless you are notified otherwise. We recommend that you refer to this Privacy Policy on an ongoing basis so that you understand our current practice at the time of using our service. Unless stated otherwise in a separate agreement, this Privacy Policy applies to all information we hold about you.

13. Contact Us

13.1 MyAssets regularly reviews its compliance with relevant data protection laws and this Privacy Policy. If you have any questions or want to get in contact with us regarding this Privacy Policy, please feel free to email us at [email protected].