Privacy Policy of Serpent Shield
Serpent Shield is committed to protecting the privacy and security of your personal data. This Privacy Policy describes how we collect, use, and process information in connection with our Anti-Money Laundering (AML) checks, Know Your Customer (KYC) solutions, transaction monitoring, regulatory compliance consulting, fraud detection, and enhanced due diligence services provided through our online platform. By using our services, you agree to the collection and use of information in accordance with this policy.
1. Information We Collect
We collect various types of information to provide and improve our services, facilitate compliance, and manage risks.
1.1 Information You Provide Directly To Us
This includes information you provide when you register for an account, use our services, fill out forms, or communicate with us.
- Contact Information: Name, professional email address, phone number, and mailing address of your organization's representatives.
- Account Information: Login credentials, and other details necessary to set up and maintain your account on our platform.
- Business Information: Data related to your organization, including legal name, registration details, tax identification numbers, and details pertinent to the AML/KYC checks we conduct on your behalf.
- Customer Data for Compliance: Information about your end-customers (individuals or entities) that you submit to us for AML, KYC, transaction monitoring, fraud detection, or due diligence processes. This may include names, addresses, dates of birth, identification document details, financial transaction data, and other sensitive personal data as required by law and regulation.
1.2 Information We Collect Automatically
When you access or use our online platform, we may automatically collect certain information about your device and usage patterns.
- Log Data: Internet Protocol (IP) addresses, browser type, browser version, pages of our service that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers, and other diagnostic data.
- Cookies and Tracking Technologies: We use cookies and similar tracking technologies to track the activity on our service and hold certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our service.
1.3 Information From Other Sources
For the purposes of fulfilling our FinTech compliance and risk management services, we may obtain information from public databases, governmental entities, or third-party data providers in accordance with applicable laws and contracts.
2. How We Use Your Information
Serpent Shield uses the collected data for various purposes, primarily to provide our specialized services and ensure compliance.
- To Provide and Maintain Our Services: Operating our online platform, performing AML/KYC checks, transaction monitoring, and fraud detection.
- To Fulfill Regulatory and Legal Obligations: Ensuring compliance with applicable financial regulations, anti-money laundering laws, and other statutory requirements.
- To Improve Our Services: Analyzing usage patterns, troubleshooting, and enhancing the functionality and security of our platform.
- To Communicate With You: Sending service-related notices, updates, security alerts, and support messages.
- For Security and Fraud Prevention: Detecting, preventing, and addressing technical issues, security incidents, or fraudulent activities.
- For Compliance Consulting: Providing expert advice and support based on our analysis of regulatory requirements.
3. Data Sharing and Disclosure
We will not share or sell your personal information or your customers' data to third parties for marketing purposes. We may share information only in specific circumstances, in compliance with applicable laws.
- With Your Consent: We may disclose your personal data with your explicit consent.
- Service Providers: We may engage third-party companies and individuals to facilitate our services (e.g., cloud hosting, data analysis). These third parties have access to your personal data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.
- Legal Requirements: Serpent Shield may disclose your data if required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency), or to comply with a legal obligation, protect and defend the rights or property of Serpent Shield, prevent or investigate possible wrongdoing in connection with the service, protect the personal safety of users of the service or the public, or protect against legal liability.
- Business Transfers: In the event of a merger, acquisition, or asset sale, your personal data may be transferred. We will provide notice before your personal data is transferred and becomes subject to a different Privacy Policy.
4. Data Security
The security of your data is paramount to us. We implement robust technical and organizational measures designed to secure your personal data from unauthorized access, use, alteration, and disclosure. Methods include encryption, access controls, physical security measures, and adherence to industry best practices. However, no method of transmission over the Internet or method of electronic storage is 100% secure, and we cannot guarantee its absolute security.
5. Data Retention
We retain personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with our legal obligations (e.g., retaining data for AML and KYC compliance as required by law), resolve disputes, and enforce our legal agreements and policies. The retention periods are generally dictated by regulatory requirements specific to the FinTech industry.
6. Your Data Protection Rights
Depending on your location and applicable law, you may have the following rights regarding your personal data:
- The Right to Access: Request copies of your personal data.
- The Right to Rectification: Request correction of any inaccurate personal data or completion of incomplete data.
- The Right to Erasure: Request that we erase your personal data under certain conditions.
- The Right to Restrict Processing: Request that we restrict the processing of your personal data under certain conditions.
- The Right to Object to Processing: Object to our processing of your personal data under certain conditions.
- The Right to Data Portability: Request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
We act as a data processor for the customer data you submit to our platform for compliance services, meaning you typically remain the data controller. Your requests related to your end-customers' data will usually need to be directed to you as the data controller.
7. Transfers of Data to Other Countries
Your information, including personal data, may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction. Serpent Shield takes reasonable steps to ensure that your data is treated securely and in accordance with this Privacy Policy, and no transfer of your personal data will take place to an organization or a country unless there are adequate controls in place, including the security of your data and other personal information. This often involves relying on standard contractual clauses, adequacy decisions, or other legally recognized transfer mechanisms.
8. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. We will let you know via email and/or a prominent notice on our service, prior to the change becoming effective, and update the "effective date" at the top of this Privacy Policy. You are advised to review this Privacy Policy periodically for any changes.
9. Contact Us
If you have any questions about this Privacy Policy, please contact us:
- Serpent Shield
- 887 Commerce Street, Suite 210
- Dallas, TX 75202
- USA
This Privacy Policy was last updated on October 26, 2023.