Privacy Policy
Last updated: May 2025
About this policy: This Privacy Policy describes how BITBREX HOLDINGS LIMITED collects, uses, stores, and protects personal data in connection with the Bitbrex website and services. We are committed to handling personal data responsibly and in accordance with applicable privacy legislation, including Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).
1. Who We Are
The data controller for this website and services is BITBREX HOLDINGS LIMITED, 10 Four Seasons Pines, Suite 1000, Toronto, Ontario M9B 6H7, Canada, and A50, 14th Goodwill Industrial Building, Nos. 36 to 44 Pak Tin Par Street, Tsuen Wan, NT, Hong Kong. For privacy-related enquiries, contact us at office@bitbrex.net.
2. What Data We Collect
We may collect and process the following categories of personal data:
- Contact data: name, email address, phone number, job title, and company name when you submit a contact form or enquiry
- Business data: company registration details, business type, country of operation, and payment volume information provided during onboarding
- Identity verification data: government-issued identification, beneficial ownership information, and other KYB/KYC documentation required for compliance
- Transaction data: payment details, account activity, and financial records related to the use of Bitbrex services
- Technical data: IP address, browser type, device information, and website usage data collected via cookies and analytics tools
3. How We Use Your Data
We process personal data for the following purposes:
- To respond to enquiries and provide requested information about Bitbrex products and services
- To conduct KYB/KYC verification and compliance due diligence as required by applicable regulations
- To provide and operate the payment services and account solutions you have contracted for
- To comply with legal obligations, including AML regulations and FINTRAC reporting requirements
- To detect and prevent fraud, financial crime, and misuse of our services
- To improve our website and services and conduct internal business analysis
- To communicate important updates about our services and compliance requirements
4. Legal Basis for Processing
We process personal data on the following legal grounds:
- Consent: where you have explicitly agreed to processing, such as when submitting a contact form
- Contractual necessity: to fulfil obligations under our service agreement with you
- Legal obligation: to comply with applicable financial regulations, AML requirements, and FINTRAC obligations
- Legitimate interests: for fraud prevention, security, and business improvement purposes
5. Data Sharing
We may share your personal data with:
- Regulated financial and payment partners who deliver products and services on our behalf, subject to appropriate data processing agreements
- Compliance and identity verification service providers used during onboarding and ongoing monitoring
- Regulatory authorities, including FINTRAC, where required by law or regulation
- Professional advisors such as legal and accounting firms, under confidentiality obligations
We do not sell personal data to third parties.
6. Data Retention
We retain personal data for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, and compliance obligations. For regulatory and AML purposes, certain records may be retained for a minimum of five years in accordance with FINTRAC requirements.
7. Security
We apply industry-standard technical and organisational measures to protect personal data against unauthorised access, loss, disclosure, or destruction. These include encryption, access controls, and regular security reviews. However, no transmission over the internet is completely secure and we cannot guarantee absolute data security.
8. Your Rights
Subject to applicable privacy laws, you may have rights in respect of your personal data, including:
- The right to access personal data we hold about you
- The right to correct inaccurate data
- The right to withdraw consent where processing is based on consent
- The right to request deletion of personal data, subject to our legal retention obligations
To exercise these rights, contact us at office@bitbrex.net.
9. Cookies
Our website uses cookies and similar technologies to improve your browsing experience and analyse website usage. You can manage cookie preferences through your browser settings. For detailed information, see our Cookie Policy.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised date. Continued use of the website after changes are posted constitutes acceptance of the updated policy.
11. Contact
For privacy-related enquiries or to exercise your data rights, contact us at:
BITBREX HOLDINGS LIMITED
10 Four Seasons Pines, Suite 1000
Toronto, Ontario M9B 6H7, Canada
A50, 14th Goodwill Industrial Building
Nos. 36 to 44 Pak Tin Par Street
Tsuen Wan, NT, Hong Kong
Email: office@bitbrex.net