Privacy Notice

Updated June 23rd, 2024

1. GENERAL

1.1 This Privacy Notice, together with the Platform Terms, governs Chainsight’s collection, processing and use of your Personal Data.

1.2 As used in this Privacy Notice, “Chainsight”, “we”, “us” or “our” refers to Horizonx FZCO, a free zone company, registered with the International Free Zone Authority of Dubai, with registered address at IFZA Business Park, DDP, 17688-001, Dubai Silicon Oasis, Dubai, United Arab Emirates, as a data controller under this Privacy Notice. The Privacy Notice sets out the manner in which it, as data controller, may use your Personal Data.

1.3 This Privacy Notice covers our use of your Personal Data arising from your use of the Platform, your creation of an Account and/or the Services we provide to you from time to time.

2. Purpose of privacy statement

2.1 Chainsight is committed to protecting and respecting your privacy. The purpose of this Privacy Notice is to describe:

2.1.1 the types of Personal Data we collect and how it may be used;

2.1.2 our use of cookies and similar technology;

2.1.3 how and why we may disclose your Personal Data to third parties;

2.1.4 the transfer of your Personal Data within and outside of the UAE;

2.1.5 your statutory rights concerning your Personal Data;

2.1.6 the security measures we use to protect and prevent the loss, misuse or alteration of Personal Data; and

2.1.7 Chainsight’s retention of your Personal Data.

2.2 Please contact us at contact@network should you require more information on our Privacy Notice.

3. DEFINITIONS

3.1 In this Privacy Notice, unless the context otherwise requires, the following definitions apply:

4. Information from Integrated Services

4.1 If you decide to register through or otherwise grant access to a third-party social networking or integrated services (”Integrated Service”), such as Google, Chainsight may also collect Personal Data that is already associated with your Integrated Service account. If you choose to provide such information, during registration or otherwise, you are give Chainsight and the Integrated Service the permission to use, share, and store it in a manner consistent with this Privacy Notice.

4.2 To enable account registration and user login authentication, and for the purpose of distributing various communications and notifications related to this service and other correspondence, we collect data from third-party services with the user's consent as follows:

5. Personal Data We Collect

5.1 We collect the Personal Data which you provide directly to us or which is generated when you open an Account, perform any actions on the Platform, or otherwise use or receive the Services from time to time. This may include:

1. 5.1.1 contact information, such as name, home address and email address;

2. 5.1.2 Account information, such as username, password, Account settings and preferences;

3. 5.1.3 financial information, such as bank Account numbers, bank statement and trading information;

4. 5.1.4 identity verification information, such as images of your government-issued ID, passport, national ID card or driving licence. Note: US residents may be asked to provide their social security numbers;

5. 5.1.5 residence verification information, such as utility bill details or similar information;

6. 5.1.6 information that we receive from third parties including third parties who provide services to you or us, fraud prevention or government agencies;

7. 5.1.7 information that we learn about you through our relationship with you and the way you operate your Accounts and/or services, such as the payments made to and from your Accounts;

8. 5.1.8 information that we gather from the technology which you use to access our services (for example location data from your mobile phone, or an IP address or telephone number) and how you use it (for example pattern recognition);

9. 5.1.9 information that we gather from publicly available sources, such as the press, the electoral register, company registers and online search engines.

10. 5.1.10 information regarding the way in which you use our Services, such as when you used our Services, and the specific Services used; and

11. 5.1.11 information relating to communications with us, whether through the Platform or via e-mail, over the phone or via any other medium.

5.2 We also automatically collect certain computer, device and browsing information when you access the Platform or are provided with the Services. This information is aggregated to provide statistical data about our users’ browsing actions and patterns, and does not personally identify individuals. This information may include:

1. 5.2.1 computer or mobile device information, including IP address, operating system, network system, browser type and settings; and

2. 5.2.2 website usage information.

5.3 Finally, we may collect Personal Data from third-party partners and public sources, which include:

1. 5.3.1 reputational information;

2. 5.3.2 financial information;

3. 5.3.3 business activities of corporate customers.

5.4 We need to collect certain types of information for compliance with legal requirements relating to our anti-fraud/anti-money-laundering/counter-financing-of-terrorism/know-your-customer obligations. If this information is not provided we may not be able to provide the Services to you. Your Personal Data may also be processed if it is necessary on reasonable request by a law enforcement or regulatory authority, body or agency or in the defence of legal claims. We will not delete Personal Data if relevant to an investigation or a dispute. It will continue to be stored until those issues are fully resolved.

5.5 It is important to note that the Personal Data we collect on you when you create an Account will be retained for the mandatory retention period set forth by applicable law, including DP Law, as it is necessary for us to maintain an exhaustive documentation of our operations as required, even if your Account has not been successfully activated (e.g. if Account verification has not been completed) or no transaction has been made using it.

Use of Cookies and Similar Technology

5.6 The Platform uses cookies. Cookies are small text files that are placed on your computer by websites that you visit. They are widely used in order to make websites work, or work more efficiently, as well as to provide information to the owners of the site.

5.7 The information collected from cookies allows us to determine such things as which parts of the Platform are most visited and what difficulties our visitors may experience in accessing the Platform. With this knowledge, we can improve the quality of your experience on the Platform by recognising and delivering more of the most desired features and information, as well as by resolving access difficulties. We also use cookies and/or a technology known as web bugs or clear gifs, which are typically stored in emails to help us confirm your receipt of, and response to, our emails and to provide you with a more personalized experience when using the Platform.

5.8 If you want to avoid using cookies altogether, you can disable cookies in your browser. However, disabling cookies might make it impossible for you to use certain features of the Platform or Services, such as logging in to your Account. Your use of the Platform or Service with a browser that is configured to accept cookies constitutes an acceptance of our and third-party cookies.

How We Use Your Personal Data

5.9 We collect and use your Personal Data for a variety of reasons. We need your Personal Data primarily to create your Account and provide the Services. Some information processing is required by law due to our anti-fraud screening obligations, or is in the public interest, such as making sure we verify our customers’ identities.

5.10 Some Personal Data is processed because you have given your consent, which can be withdrawn in your Account preferences and settings. Other Personal Data we collect and use because we have legitimate business interests to do so, having taken into account your rights, interests and freedoms.

5.11 We may use your Personal Data to:

1. 5.11.1 create and administer your Account and generally for Account maintenance, legal documentation records and claim and dispute management. Related processing operations are necessary for the performance of a contract with you (or to take steps at your request prior to entering into a contract) and for compliance with legal obligations to which we are subject;

2. 5.11.2 Process your Chainsight transactions. Related processing operations are necessary for the performance of a contract with you and for compliance with legal obligations to which we are subject;

3. 5.11.3 Verify your identity in accordance with applicable know-your-customer, money-laundering and other financial sector legislation or regulations, including those required for compliance with Chainsight's Anti-Money Laundering Policy, as well as address other law enforcement needs as described in our Platform Terms, and generally as required for compliance with legislation and regulations applicable to Chainsight. With respect to US residents, we also may share your information with certain financial institutions, as authorized under Section 314(b) of the US Patriot Act, and with tax authorities, including the US Internal Revenue Service, pursuant to the Foreign Account Tax Compliance Act (“FATCA”), to the extent that this statute may be determined to apply to Chainsight. Related processing operations are necessary for the performance of a contract with you and for compliance with legal obligations to which we are subject;

4. 5.11.4 Personalise your Services experience. Related processing operations are necessary for purposes of our legitimate interests (that is, improving our Services);

5. 5.11.5 Analyse Platform usage and improve the Platform and website offerings. Related processing operations are necessary for purposes of our legitimate interests (that is, improving and promoting our Services);

6. 5.11.6 Help us respond to your customer service requests and support needs. Related processing operations are necessary for the performance of a contract with you and for purposes of our legitimate interests (that is, improving our Services and offering you the best experience);

7. 5.11.7 Contact you about Services. The email address you provide may be used to communicate information and updates related to your use of Services.

Automated Decision Making

5.12 We may make automated decisions on certain matters. For example, we may do this to decide whether we can provide our Services to you based on a credit check/risk profiling. Depending on the outcome of the credit check/risk profiling, a decision is reached automatically as to whether we are able to provide the Services to you based on your credit worthiness.

5.13 If you disagree with the decision you are entitled to contest this by contacting us at the following email address: contact@chainsight.network

Marketing

5.14 We may also communicate company news, updates, promotions and information relating to similar products and services to the Services provided by Chainsight. We may also administer a contest, promotion, survey or another site feature. We shall only do this where you have given us your consent or otherwise where we are permitted to do so under DP Law in pursuit of our legitimate interests (that is, promoting our Services).

5.15 We may share Personal Data with third parties to help us with our marketing and promotional projects, or sending marketing communications.

5.16 If you want to opt out of receiving promotional and marketing emails, text messages, posts and other forms of communication from us (or our promotional partners), which you might receive in accordance with this section, you can choose one of the following ways:

1. 5.16.1 Log into your Account and update your profile;

2. 5.16.2 Click “unsubscribe” at the bottom of an email we sent you; or

3. 5.16.3 Contact us at contact@chainsight.network and request to opt out.

5.17 If you do opt out of receiving promotional and marketing messages, we can still contact you regarding our business relationship with you, such as Account status and activity updates, survey requests in respect of products and Services we have provided to you after you have opted out or respond to your inquiries or complaints, and similar communications.

6. DISCLOSING AND TRANSFERRING PERSONAL DATA

6.1 We may disclose your Personal Data to third parties and legal and regulatory authorities and transfer your Personal Data outside the UAE, as described below.

Disclosures to Third Parties

6.2 There are certain circumstances where we may transfer your Personal Data to employees, contractors and to other parties.

6.3 We may share information about you with other members of our group of companies so we can provide the best service across our group. They are bound to keep your information in accordance with this Privacy Notice;

6.4 We may also share your information with certain contractors or service providers. They may process your Personal Data for us, for example, if we use a marketing agency. Other recipients/service providers include advertising agencies, IT specialists, credit reference agencies, screening agencies database providers, backup and disaster recovery specialists, email providers or outsourced call centres. Our suppliers and service providers are required to meet our standards on processing information and security. The information we provide them, including your information, will only be provided in relation to the performance of their function;

6.5 We may also share your information with developers of distributed applications on the Chainsight Platform subject to our obtaining your prior consent before doing so;

6.6 Your Personal Data may be transferred to other third-party organisations in certain scenarios:

1. 6.6.1 if we are discussing selling or transferring a part or all of our business – the information may be transferred to prospective purchasers under suitable confidentiality terms;

2. 6.6.2 if we are reorganised or sold, information may be transferred to a buyer who can continue to provide the Services to you;

3. 6.6.3 if we are required to by law, or under any regulatory code or practice we follow, or if we are asked by any public or regulatory authority – for example law enforcement; and

4. 6.6.4 if we are defending a legal claim, your information may be transferred as required in relation to defending such claim.

6.7 Your Personal Data may be shared if it is made anonymous and aggregated, as in such circumstances the information will cease to be Personal Data.

6.8 Your information will not be sold, exchanged or shared with any third parties without your consent, except to provide Services or as required by law.

6.9 Chainsight’s third-party service providers are contractually bound to protect and use such information only for the purposes for which it was disclosed, except as otherwise required or permitted by law. We ensure that such third parties will be bound by terms complying with DP Law.

Disclosures to Legal Authorities

6.10 We may share your Personal Data with law enforcement, data protection authorities, government officials and other authorities when:

1. 6.10.1 compelled by court order or other legal procedure;

2. 6.10.2 disclosure is necessary to report suspected illegal activity; or

3. 6.10.3 Disclosure is necessary to investigate violations of this Privacy Notice or the Platform Terms.

International Transfers of Personal Data

6.11 We store and process your Personal Data in data centres around the world, where Chainsight facilities or service providers are located. As such, we may transfer your Personal Data outside of the UAE. Some of the countries to which your Personal Data may be transferred to for these purposes that are located outside the UAE do not benefit from protection afforded to Personal Data in that country. Such transfers are undertaken strictly in accordance with our legal and regulatory obligations, and appropriate safeguards under DP Law will be implemented, such as standard data protection clauses, with data recipients or processors approved by competent authorities. A copy may be requested at the address set out in the Contact Us section.

7. YOUR STATUTORY RIGHTS

7.1 You have certain rights concerning your Personal Data under DP Law, as mentioned below, and can exercise them by contacting us at contact@chainsight.network.

7.2 Access: you are entitled to ask us if we are processing your information and, if we are, you can request access to your Personal Data. This enables you to receive a copy of the Personal Data we hold on you and certain other information about it to check that we are processing it lawfully. We process a large quantity of information and can thus request, in accordance with DP Law, that before the information is delivered, you specify the information or processing activities to which your request relates.

7.3 Correction: you are entitled to request that any incomplete or inaccurate Personal Data we hold about you is corrected.

7.4 Erasure: you are entitled to ask us to delete or remove Personal Data in certain circumstances. There are also certain exceptions where we may refuse a request for erasure; for example, where the Personal Data is required for compliance with law or in connection with claims.

7.5 Restriction: you are entitled to ask us to suspend the processing of certain parts of your Personal Data; for example, if you want us to establish its accuracy or disclose the reason for processing it.

7.6 Transfer: you may request the transfer of a certain part of your Personal Data to another party.

7.7 Objection: where we are processing your Personal Data based on a legitimate interest (or that of a third-party) you may challenge this. However, we may be entitled to continue processing your information based on our legitimate interests or where this is relevant to legal claims. You also have the right to object where we are processing your Personal Data for direct marketing purposes.

7.8 Automated decisions: you may contest any automated decision made about you where this has a legally or similarly significant effect and ask for it to be reconsidered.

7.9 You also have a right to lodge a complaint with a supervisory authority, in particular in the UAE where you are habitually resident or where an alleged infringement of DP Law has taken place. In the UAE, you can contact the National Data Protection Authority.

8. SECURITY OF PERSONAL DATA

8.1 We use a variety of security measures to ensure the confidentiality of your Personal Data, and to protect your Personal Data from loss, theft, unauthorised access, misuse, alteration or destruction. These security measures include, but are not limited to:

1. 8.1.1 password protected directories and databases; and

2. 8.1.2 Secure Sockets Layered (SSL) technology to ensure that your information is fully encrypted and transmitted online securely.

8.2 We will not collect any financially sensitive and/or credit information which will be collected and stored by our payment solutions service provider in accordance with their own privacy policy.

8.3 We do not ask for financial or payment information, such as your credit card number, passcode, Account number or pin number, in an e-mail, text or any other form communication that we use to contact you. Please always check that any website on which you are asked for financial or payment information in relation to our reservations or Services is operated by Chainsight. If you do receive a suspicious request, do not provide your information and report it by contacting one of our service representatives as set in this Privacy Notice.

8.4 You are responsible for keeping your Account login details safe and secure. Do not share those with anyone. If there is an unauthorised use or any other breach of security involving your information, you must notify us as soon as possible (see Contact Us).

9. RETENTION OF PERSONAL DATA

9.1 We retain Personal Data for as long as necessary to fulfil purposes described in this Privacy Notice, subject to our own legal and regulatory obligations. The criteria we may use to determine the retention period for certain categories of data include:

1. 9.1.1 how long you have been a Chainsight member;

2. 9.1.2 whether there are contractual or legal obligations that exist that require us to retain the data for a certain period of time;

3. 9.1.3 whether there is any ongoing legal or financial claim that relates to your relationship with us;

4. 9.1.4 whether any applicable law, statute or regulation allows for a specific retention period; and

5. 9.1.5 what the expectation for retention was at the time the data was provided to us.

10. UPDATES TO THIS PRIVACY NOTICE

10.1 This Privacy Notice was last revised on 29 March 2024. We may change this Privacy Notice from time to time, so it is advisable to review it frequently. Changes to this Privacy Notice will be announced on the Platform or through similar means for a reasonable length of time prior to and following the change taking effect.

11. CONTACT US

11.1 Please contact us with questions, comments or concerns regarding our Privacy Notice and/or practices at contact@chainsight.network.