At CaliberX, we want you to understand how and why we use, store, secure and otherwise process your Personal Data. This policy also aims to explain the rights you have with respect to your Personal Data, which may vary depending on where you are located.
For example, certain privacy rights may apply to the extent that EU, UK, Hong Kong, Singapore, U.S. or other privacy or data protection legislation applies to our processing of your Personal Data, or to the extent you are located in those jurisdictions.
As such, “Personal Data” has the meaning given to it in the relevant data protection legislation and includes any data or information relating to an identifiable individual (such as name, address, date of birth or economic information), or which may identify an individual from other information to which an organization is likely to have access.
By virtue of interacting with the CaliberX platform, whether through application program interfaces(APIs) or through our websites(including caliberexchange.com or caliber.exchange and any of their subdomains, the “Platform”), you will provide the Platform with Personal Data. To comply with Regulation S-P, we have also prepared this Privacy Notice.
In connection with CaliberX's business activities, we collect various types of Personal Data, including, among other things:
1. Directly from You (e.g., when you voluntarily submit information to the Platform, or send us an email or other written correspondence):
2. Indirectly From Other Sources (e.g., from public records or from a counterparty in possession of the data):
We intend to use your Personal Data for a variety of reasonable and legitimate business purposes, including, but not limited to, the following:
In general, we will process and store your Personal Data for at least as long as it is necessary in order to fulfill our contractual, regulatory and statutory obligations, which may differ depending on the relevant Group entity or jurisdiction. Subject to those qualifications, our goal is to keep such data for no longer than necessary in relation to the purposes for which we collect and use the Personal Data (we refer to the purposes as set forth above). CaliberX will retain your Personal Data in accordance with our record retention policy. If you have any specific questions in this respect, please feel free to contact us.
In the course of using the Platform, your Personal Data may be processed by a number of third-party services for the purposes described above. Those services include but are not limited to:
We are committed to ensuring that our communications are accessible to people with disabilities. To make accessibility-related requests or report barriers, please contact us using the contact Information below.
The below information applies to any Data Subject resident in the EEA or the UK. For purposes of the General Data Protection Regulation (EU) 2016/679 of the European Parliament and of the Council of 27th April 2016 and the UK Data Protection Act 2018 (both referred to herein as the “GDPR”):
In respect of the collection, holding, storage, use, and processing of your Personal Data:
The transfer of Personal Data from the UK/EEA to the CaliberX entities outside the UK/EEA is governed by data transfer agreements which are in the form of the standard contractual clauses approved by the European Commission (a copy of which can be obtained from us via the contact details below).
Where your Personal Data is processed by third parties outside the UK/EEA, we will ensure appropriate safeguards are in place to adequately protect it, as required by applicable law, including the execution of standard contractual clauses (referred to above) if the recipients are not located in a country with adequate data protection laws (as determined by the European Commission).
Under the GDPR, in certain circumstances, an EEA-resident Data Subject has certain individual rights with respect to the Personal Data that we hold about them. In particular, you may have the right to:
Additionally, in the circumstances where you may have provided your consent to the collection, processing and transfer of your Personal Data for a specific purpose, you have the right to withdraw your consent for that specific processing at any time. Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose or purposes you originally agreed to, unless we have another legitimate basis for doing so in law. To exercise any of these rights, please contact us using the contact details set out under the “Contact and Complaints” heading above.
We respect your legal rights not to be subject to decisions that are based solely on automated processing of your Personal Data, including profiling, especially where such processing has legal or other significant effects on you. In establishing and carrying out a business relationship, we generally do not use any automated decision making pursuant to the GDPR. We may process some of your Personal Data automatically, with the goal of assessing certain personal aspects (profiling), such as to comply with legal or regulatory obligations to combat money laundering, terrorism financing, and offenses that pose a danger to assets. We also use assessment tools in order to be able to allow communications and marketing to be tailored as needed.
As a resident of the EEA or UK, you are also entitled to direct any complaints in relation to our processing of your Personal Data to your national or local data protection supervisory authority. You will not have to pay a fee to access your Personal Data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request for access is clearly unfounded or excessive.
The information below may apply to Data Subjects who are residents of California.
California Data Subject Rights
California’s “Shine the Light” law permits California residents to annually request and obtain information free of charge about what Personal Information is disclosed to third parties for direct marketing purposes in the preceding calendar year. For more information on these disclosures, please contact us using the contact details set out under the “Contact and Complaints” heading above.
In addition, Data Subjects in California may have a right under the California Consumer Privacy Act (“CCPA”) to request erasure of their personal data or access to personal data that we have collected in the last twelve (12) months.
You may submit requests for access or erasure of your personal information by contacting us at email@example.com.
Individuals who submit requests for access or erasure of personal information will be required to verify their identity by answering certain questions. We will not disclose or delete any information until identity is verified.
If you are making a request for access, we may not be able to provide specific pieces of personal information if the disclosure creates a substantial, articulable, and unreasonable risk to the security of your personal information, your account with us, or our systems or networks.
If you are making a request for erasure, we will ask that you confirm that you would like us to delete your personal information again before your request is addressed. You may designate an authorized agent to submit a request on your behalf by providing that agent with your written permission. If an agent makes a request on your behalf, we may still ask that you verify your identity directly with us before we can honor the request. Agents who make requests on behalf of individuals, will be required to verify the request by submitting written authorization from the individual. We will not honor any requests from agents until authorization is verified.
Under the CCPA, you cannot be discriminated against for exercising your rights to access or request erasure of their personal data.
Thank you for visiting Caliber Exchange.