1.1 Overview: In order to provide the UNITED Services and to
reduce the risk of fraud, UNITED, the data controller, must ask you to provide the information (as defined below) about yourself, including your bank account details, information about any other financial instruments that may be connected to your UNITED wallet and the information particularly set out in Section 2 below.
a) it is necessary for the legitimate interests of the subsidiaries, affiliated companies and other related corporations of UNITED (collectively, the “UNITED Group”), including our interests in fulfilling the purposes in Section 3 below and when we make the disclosures referred to in Section 5 below, necessary for providing products and services of a consistently high standard, keeping our customers satisfied, and meeting our accountability and regulatory requirements around the world, in each case provided such interests are not overridden by your privacy interests;
b) it is necessary for us to enter into, and perform our obligations under, our contract with you, such as when we use your data for the purposes in Section 3 below;
c) it is necessary for compliance with a legal obligation under EU law or the laws of a Member State (e.g. any mandatory disclosures to an authority, regulator or government body);
• in some cases, we have obtained your prior consent.
2.1 Account Information: We will collect the following information
for the purposes of opening and operating the UNITED account.
a) Account opening and usage: To open a UNITED account or use the UNITED Services, we need your:
3. phone number;
4. the details of your identification document(s);
5. email address.
b) Topping up and making payments: To top-up your available balance of your UNITED account, order a payment card or make certain payments through the UNITED Services, we need (where applicable):
• your bank (or another payment instrument) account information;
• to ask you to choose different security questions and answers (such as your city of birth or your pet’s name); and
• other additional commercial and/or identification information, if you send or receive certain high-value transactions or high overall payment volumes through the UNITED Services, or we are otherwise required by anti-money laundering laws and regulations.
c) Know-Your-Client/Anti-Money Laundering information from third parties and other sources:
• In order to complete our customer screening and identity verification process, including checks in relation to fraud detection and prevention, anti-money laundering, know-your- client and countering of the financing of terrorism, we verify the information you provide with the UNITED Group, payment partners, service providers and fraud agencies as well as information available through internet and publicly accessible social network data. In the course of such verification, we will collect information on your political opinions, records on past criminal jurisdictions and whether you are a politically exposed person or included in any sanction list.
• We need you to upload a picture of yourself and your face must be recognizable in order for us to complete our customer screening and identity verification process.
d) Confirmations and additional information:
• If we cannot verify the information that you provide, we may
ask you to upload or send us additional confirmations or to answer additional questions online to help verify your information.
• If you send or receive high overall payment volumes or display inconsistent transactional patterns through the UNITED Services, or if you have a limited transactional history with us, we will conduct a background check on you by obtaining information about you and/or your business, and potentially (if legally permitted) also about your directors, shareholders and partners, from a credit reference or fraud agency. If you owe us money, we may obtain additional information about you from a fraud agency, to the extent permitted by law. UNITED, at its sole discretion, reserves the right to periodically retrieve and review a business and/or consumer credit report supplied by such credit reference or fraud agency for any account, and reserves the right to close an account based on information obtained during this credit review process.
2.2 Provision of the UNITED Services: We also will collect the following information to provide you with the UNITED Services:
a) Using your Device: When you use the UNITED Services using any device (whether connected to UNITED wirelessly or by a fixed line or otherwise), we will additionally collect and store device sign-on data (including but not limited to device ID) and geolocation data in order to provide the UNITED Services.
b) Loyalty Information: If we allow you to link your membership of an eligible loyalty scheme to your account, we need your loyalty scheme membership details to enable us to track your membership and calculate applicable fees, discounts or other loyalty benefits.
c) Transaction Information: When you use the UNITED Services to send funds to someone else, we will ask you to provide information related to that transaction. This information includes the amount and type of transaction (such as purchase of goods, purchase of services, or simple peer-to-peer transfer), and the details pertaining to the identity of the third party. Also, when you send money to another UNITED customer, you may be asked to provide your personal details to that customer to complete the transaction. Your personal details may then be passed on to us from that customer. We also collect the IP address and other identifying information about the computer or device you use to access your UNITED account or use the UNITED Services, in order to help detect possible instances of unauthorized transactions.
d) Website Traffic Information: Because of the way Internet communication standards work, when you arrive at or leave the UNITED website, we automatically receive the web address of the site that you came from or are going to. We also collect information on the pages of our website which you visit, IP addresses, the type of browser you use and the times you access our website.
f) Communications: When you communicate with us for customer service or other purposes (e.g., by emails, phone calls, tweets, etc.), or provide any feedback, we retain such information and our responses to you in the records of your account.
g) Questionnaires, Surveys, Sweepstakes: From time to time, we offer optional questionnaires, surveys and sweepstakes to our users for such purposes as collecting demographic information or assessing users’ interests and needs. If we collect personally identifiable information from our users in these questionnaires, surveys, and sweepstakes, the users will be given notice of how the information will be used prior to their participation in the survey, questionnaire or sweepstake.
h) Profile Data: We may also collect public information about your business and your behavior on social media platforms (such as your e-mail address and the number of “likes” and “followers”), to the extent relevant to confirm an assessment of your transactions and/or your business, including its size and the size of its customer base.
2.3 We set out in Section 3 below greater detail (in addition to what is set out in the foregoing of this Section 2) on how we use the information we collect.
We will use your Account Information to provide the UNITED Services. In particular, we will use your information for the following purposes:
3.1 Internal Uses: Our primary purpose in collecting your information is to provide you with a safe, smooth, efficient, and customized experience in your use of the UNITED Services. We do this by processing your information to:
a) process transactions and provide the UNITED Services;
b) complete our customer screening and identity verification process including checks in relation to fraud detection and prevention, anti-money laundering, know-your-client and the countering of the financing of terrorism;
c) resolve disputes, collect fees, and troubleshoot problems;
d) manage risks and carry out investigations, in relation to any illegal activity or potential illegal activity or transactions for breach or potential breach of our terms and conditions;
e) provide you with customer support services;
f) improve the UNITED Services by customising your user experience;
g) measure the performance of the UNITED Services and improve their content and layout;
h) manage and protect our information technology infrastructure;
i) provide targeted marketing and advertising, service updates, and deliver promotional offers based on the communication preferences you have defined for your UNITED account (please refer to the section “Our Contact with UNITED Customers” below) and your activities when using the UNITED Services;
j) perform creditworthiness and solvency checks, compare information for accuracy, and verify it with third parties.
3.2 Questionnaires, Sweepstakes, Surveys and Profile Data: If you choose to answer our optional questionnaires or surveys, we may use such information to improve the UNITED Services, send you marketing or advertising information, manage the sweepstakes, or as otherwise explained in detail in the survey itself.
3.3 Our Contact with UNITED Customers: We communicate with our users on a regular basis via email and chats to provide requested services. We may also communicate with our users by phone to:
a) resolve customer complaints or claims made by users;
b) respond to requests for customer service;
c) inform users if we believe their accounts or any of their transactions have been used for an illegitimate purpose;
d) confirm information concerning a user’s identity, business or account activity;
e) carry out collection activities;
f) conduct customer surveys;
g) investigate suspicious transactions.
We use your email or physical address to confirm your opening of a UNITED account, to send you notice of payments that you send or receive through UNITED, to send you information about important changes to our products and services, and to send notices and other disclosures required by law. Generally, users cannot opt out of these communications, but they will be primarily informational in nature rather than promotional.
We also use your email address to send you other types of communications that you can control, including “news” and “notice of special third-party promotions”. You can choose whether to receive some, all or none of these communications when you complete the registration process, or at any time thereafter, by logging in to your account and then selecting settings and updating your preferences.
3.4 Other purposes: In some cases, we will also use your information for the purposes of, or in connection with:
a) independent audits of our financial statements and operations – the auditors may seek to contact a sample of our customers to confirm that our records are accurate. However, these auditors cannot use personally identifiable information for any secondary purposes;
b) an official request from a public or judicial authority where either compelled by law or where appropriate in all the circumstances;
c) applicable legal or regulatory requirements;
d) financial accounting and invoicing purposes;
e) maintaining and managing insurance and insurance claims relating to our business;
f) services we receive from our professional advisors, such as lawyers, accountants, insurance brokers and consultants;
g) the transfer to a potential buyer, transferee, merger partner or seller and their advisers in connection with an actual or potential transfer or merger of part or all of UNITED’s business or assets, or any associated rights or interests, or to acquire a business or enter into a merger with it; and
h) protecting our rights and those of the UNITED Group.
We may combine your information with other information we collect from other companies and use it to improve and personalize the UNITED Services and send marketing communications to you. You will only receive such marketing communications from us or may participate in our ad-customization programs if you have expressly consented to doing so. If you have consented, but no longer wish to receive marketing communications from us or participate in our ad- customization programs, simply update your preferences.
We will share your information with the following types of third parties in the circumstances described below.
5.1 Disclose necessary information to the police and other law enforcement and/or fraud prevention agencies:
Such entities include security forces, competent governmental, inter-governmental or supranational bodies, regulatory authorities and recognised self-regulatory authorities. Disclosure to such entities will be made where (i) the law (including but without limitation the GDPR, the applicable regulations on the US Foreign Account Tax Compliance Act (the “FATCA Law”), and regulations on the OECD common reporting standard (the “CRS Law”)) compels or permits us; or (ii) we have reason to believe it is appropriate for us to cooperate with such entities for checks in relation to fraud detection and prevention, anti-money laundering, know-your-client and countering of the financing of terrorism, or investigations in relation to any other illegal activity or potential illegal activity. If you are covered by the FATCA Law or the CRS Law, we are required to give you notice of the information about you that we may transfer to various authorities.
5.2 Disclose necessary information to other third parties such as payment processors, auditors, financial products providers, business partners, marketing and public relations agencies, shipping and courier companies, UNITED Group companies, marketplaces, service providers and your agents or legal representatives:
Such disclosure is required for purposes of our provision of the UNITED Services, investigations into transactions on breach or potential breach of our terms and conditions, support of our business operations, checks in relation to fraud detection and prevention, anti-money laundering, know-your-client and countering of the financing of terrorism, investigations in relation to any other illegal activity or potential illegal activity, bill collection, marketing, provision of customer support services and public relations purposes.
5.3 Disclose necessary information to intellectual property rights owners:
Such disclosure is required under the applicable national law in the event that an owner of intellectual property rights commences any action or pursues a claim against UNITED for an out-of-court information disclosure due to an infringement of their intellectual property rights for which the UNITED Services have been used.
5.4 Disclose necessary information to card networks and schemes:
Such disclosure is required in response to the requirements of the card networks through which your use of the UNITED Services may rely on (such as Visa and Mastercard).
5.5 Grant access to information in event of mergers or acquisitions involving UNITED:
5.6 Disclosing transactional details of UNITED users in event of transfer of funds between them:
If you are a registered UNITED user and you are sending funds or transacting with another registered UNITED user, as a part of the transaction, the name, email address, date of sign-up and pertinent transactional details of both parties will be shared as a part of transaction notification. However, your card number, bank account and other financial information will not be revealed to anyone whom you have paid or who has paid you through the UNITED Services or third parties that use the UNITED Services, except with your express permission or if we are required to do so pursuant to credit card rules, a court order or other legal process.
5.7 Disclosing information to sellers when UNITED users use purchase goods/services using the UNITED Services:
If you are buying goods or services and pay through UNITED, we may provide the seller with the delivery address for the goods and your billing address to complete your transaction. If an attempt to pay your seller fails, or is later invalidated, we may also provide your seller with details of the unsuccessful payment. To facilitate dispute resolutions, we may provide a buyer with the seller’s address so that goods can be returned to the seller.
5.8 Disclosing information to loyalty schemes of which UNITED users are members:
If you link your membership of an eligible loyalty scheme to your account in our mobile app, we will share your loyalty scheme membership ID with the relevant loyalty scheme when you pay using UNITED. If you remove your loyalty scheme membership ID from your Account, we will stop sharing this information.
5.9 Disclosing information to third party service providers who facilitate payments from or to you:
We work with third parties to enable them to accept or facilitate payments from or to you using the UNITED Services. In doing so, a third party may share information about you with us such as your email address or phone number, when a payment is sent to you or when you are attempting to pay that third party. We use this information to confirm that you are a UNITED customer and that UNITED can be enabled to make a payment, or where a payment is sent to you to send you a notification that you have received a payment. Also, if you request that we validate your status as a UNITED customer with a third party, we will do so. Please note that third parties you receive funds or buy from may have their own privacy policies, and UNITED is not responsible for their operations, including but not limited to their information handling practices.
6.1 Please note that some of the recipients of your information referred to above will be based in countries outside of the European Economic Area whose laws may not provide the same level of data protection. These countries are: Singapore and the United States. UNITED is committed to adequately protecting your information regardless of where the data resides and to providing appropriate protection for your information where such data is transferred outside of the EEA.
6.2 The appropriate safeguard we use to secure your information in the context of such transfers are the EU Model Clauses. You can find a sample of such EU Model Clauses under http:// ec.europa.eu/justice/data-protection/international-transfers/ transfer/index_en.htm or contact our data protection officer (see Section 10 below).
6.3 Further details of the transfers of your information outside of the European Union and the adequate safeguards used by us in respect of such transfers (including copies of relevant agreements) are also available from us by contacting us at email@example.com
7.1 You have a number of rights in relation to your information. Where you contact us to exercise your rights, we will honour your privacy request as required under the GDPR but your rights are not absolute as they do not always apply and exemptions may be applicable. You may also contact us at firstname.lastname@example.org if you wish to make a complaint to us relating to your privacy.
7.2 Under the GDPR, you have rights:
a) of access to, rectification of, and/or erasure of your information;
b) to object to processing of your information;
c) withdraw consent to our processing of your information (to the extent such processing is based on consent) or restrict our processing of your information;
d) where processing your information is necessary for entering into or performing our obligations under a contract with you, you may have the right to request your information be transferred to you or to another controller;
e) to request not to be subject to automated decision making.
To exercise any of your rights, or if you have any other questions about our use of your information, please contact us at email@example.com
7.3 Finally, you have the right to lodge a complaint with the data protection authority in the place where you live or work, or in the place where you think an issue in relation to your data has arisen.
8.1 We will retain your information for as long as necessary to fulfil the purposes outlined in Section 3. However, we will retain your information for a longer period where required by law and for the duration of any statutory limitation period for claims.
8.2 In general, although there are limited exceptions, we will retain your information during the period when you are using the UNITED Services and for at least six (6) years after your use of the UNITED Services ceases.
9.1 UNITED is committed to handling your information with high standards of information security. We use computer safeguards such as firewalls and data encryption, we enforce physical access controls to our buildings and files, and we authorise access to information only for those employees who require it to fulfil their job responsibilities.
9.2 The security of your UNITED account also relies on your protection of your UNITED password. You may not share your UNITED password with anyone. UNITED representatives will never ask you for your password, so any email or other communication requesting your password should be treated as unauthorized and suspicious and forwarded to firstname.lastname@example.org . If you do share your UNITED password with a third party for any reason, including because the third party has promised to provide you additional services such as account aggregation, the third party will have access to your account and your information, and you may be responsible for actions taken using your password. If you believe someone else has obtained access to your password, please change it immediately by logging in to your account and changing your Profile settings, and also contact us right away.