Privacy Policy
Data Protection and Privacy Notice
Last Updated: 2025-10-10
Table of Contents
- 1. Privacy Policy Overview
- 2. Information We Collect
- 3. How We Use Your Information
- 4. Information Sharing and Disclosure
- 5. Data Security Measures
- 6. Cookies and Tracking Technologies
- 7. Third-Party Services
- 8. Your Privacy Rights
- 9. Data Retention
- 10. International Data Transfers
- 11. Children's Privacy
- 12. California Privacy Rights (CCPA)
- 13. European Privacy Rights (GDPR)
- 14. Changes to This Policy
- 15. Contact Information
1. Privacy Policy Overview
Credence Pay ("Bank," "we," "us," "our") is committed to protecting your privacy and maintaining the confidentiality of your personal and financial information. This Privacy Policy explains how we collect, use, share, and protect your information when you use our banking services, visit our website, or interact with our digital platforms.
This policy applies to all customers, website visitors, and users of our services. By using our services, you consent to the collection, use, and disclosure of your information as described in this Privacy Policy and in accordance with applicable federal and state privacy laws, including the Gramm-Leach-Bliley Act, Fair Credit Reporting Act, and other relevant regulations.
Important Notice
We are required by law to give you this privacy notice to explain how we collect, use, and protect your personal information. We are also required to follow the privacy practices described in this notice while it is in effect.
2. Information We Collect
2.1 Personal Information
We collect various types of personal information, including:
- Identity Information: Name, date of birth, Social Security number, government-issued ID numbers, photographs
- Contact Information: Mailing address, email address, phone numbers
- Financial Information: Income, employment information, credit history, account balances, transaction history
- Demographic Information: Age, gender, marital status, dependents
- Biometric Information: Fingerprints, voice prints, facial recognition data (where applicable)
2.2 Automatically Collected Information
When you interact with our digital services, we automatically collect:
- Device Information: IP address, device type, browser type, operating system
- Usage Information: Pages visited, time spent, clickstream data, search queries
- Location Information: Geographic location (with your consent)
- Technical Information: Cookies, web beacons, session information, authentication data
2.3 Information from Third Parties
We may receive information about you from:
- Credit reporting agencies and credit bureaus
- Identity verification services
- Fraud prevention services
- Marketing companies and data brokers
- Government agencies and regulatory bodies
- Other financial institutions
3. How We Use Your Information
3.1 Primary Business Purposes
We use your information for the following business purposes:
- Account Management: Opening, maintaining, and servicing your accounts
- Transaction Processing: Processing deposits, withdrawals, transfers, and payments
- Identity Verification: Verifying your identity and preventing fraud
- Risk Assessment: Evaluating creditworthiness and managing risk
- Regulatory Compliance: Meeting legal and regulatory requirements
- Customer Service: Responding to inquiries and providing support
3.2 Marketing and Communication
With your consent, we may use your information to:
- Send you information about our products and services
- Provide personalized offers and recommendations
- Conduct market research and surveys
- Send newsletters and promotional materials
3.3 Service Improvement
We use your information to:
- Improve our products and services
- Develop new features and functionality
- Analyze usage patterns and trends
- Enhance security and fraud prevention
4. Information Sharing and Disclosure
4.1 Permitted Disclosures
We may share your information in the following circumstances:
- With Your Consent: When you have given explicit consent
- Service Providers: With third-party vendors who help us provide services
- Affiliates: With our corporate affiliates and subsidiaries
- Legal Requirements: When required by law, regulation, or court order
- Fraud Prevention: To prevent, detect, or investigate fraud or illegal activities
- Business Transfers: In connection with mergers, acquisitions, or sales of assets
4.2 Regulatory Disclosures
We may disclose your information to:
- Federal and state banking regulators
- Law enforcement agencies
- Tax authorities
- Anti-money laundering authorities
- Credit reporting agencies
4.3 Third-Party Service Providers
We work with trusted third-party service providers who may have access to your information, including:
- Payment processors and card networks
- Technology and infrastructure providers
- Customer service and call center providers
- Marketing and analytics companies
- Legal and professional advisors
5. Data Security Measures
5.1 Technical Safeguards
We implement robust technical security measures, including:
- Encryption: Data is encrypted in transit and at rest using industry-standard encryption
- Firewalls: Network security systems prevent unauthorized access
- Access Controls: Multi-factor authentication and role-based access controls
- Monitoring: Continuous monitoring for security threats and anomalies
- Regular Updates: Security patches and system updates are applied promptly
5.2 Physical Safeguards
Our physical security measures include:
- Secure data centers with restricted access
- Security cameras and alarm systems
- Secure disposal of physical documents
- Environmental controls and backup power systems
5.3 Administrative Safeguards
We maintain administrative controls such as:
- Employee background checks and training
- Information security policies and procedures
- Incident response and breach notification procedures
- Regular security assessments and audits
7. Third-Party Services
7.1 External Links
Our website may contain links to third-party websites and services. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.
7.2 Social Media Integration
Our website may include social media features and widgets. These features may collect information about your visit and may set cookies. Your interactions with these features are governed by the privacy policies of the respective social media companies.
7.3 Analytics Services
We use third-party analytics services to help us understand how our website is used. These services may collect information about your visit, including pages viewed, time spent, and referring websites.
8. Your Privacy Rights
8.1 Access and Correction
You have the right to:
- Access your personal information in our records
- Request corrections to inaccurate information
- Update your contact information and preferences
- Request copies of your account statements and transaction history
8.2 Marketing Communications
You can opt out of marketing communications by:
- Clicking unsubscribe links in email communications
- Logging into your account and updating preferences
- Contacting our customer service team
- Sending a written request to our mailing address
8.3 Account Closure
If you close your account, we may retain certain information as required by law or for legitimate business purposes, such as fraud prevention and regulatory compliance.
9. Data Retention
We retain your personal information for as long as necessary to:
- Provide services to you
- Comply with legal and regulatory requirements
- Resolve disputes and enforce agreements
- Prevent fraud and ensure security
Different types of information may be retained for different periods based on legal requirements and business needs. For example:
- Account Information: Retained for the duration of the account relationship plus applicable legal retention periods
- Transaction Records: Retained for up to seven years as required by banking regulations
- Marketing Data: Retained until you opt out or for a reasonable business period
- Website Analytics: Typically retained for 1-2 years
10. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. When we transfer your information internationally, we implement appropriate safeguards to protect your information, including:
- Standard contractual clauses approved by relevant authorities
- Adequacy decisions by relevant authorities
- Certification schemes and codes of conduct
- Other appropriate safeguards as required by law
11. Children's Privacy
Our services are not intended for children under the age of 18, and we do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information promptly.
Parents or guardians who believe we may have collected information from a child under 18 should contact us immediately using the contact information provided in this policy.
12. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
12.1 Right to Know
You have the right to request information about:
- Categories of personal information we collect
- Categories of sources from which information is collected
- Business or commercial purpose for collecting information
- Categories of third parties with whom we share information
- Specific pieces of personal information we have collected
12.2 Right to Delete
You have the right to request deletion of your personal information, subject to certain exceptions under the law.
12.3 Right to Opt-Out
You have the right to opt out of the sale of your personal information. Credence Pay does not sell personal information of its customers.
12.4 Non-Discrimination
We will not discriminate against you for exercising your CCPA rights.
13. European Privacy Rights (GDPR)
If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):
13.1 Legal Basis for Processing
We process your personal information based on:
- Contract: To perform our contract with you
- Legal Obligation: To comply with legal requirements
- Legitimate Interest: For our legitimate business interests
- Consent: Where you have given explicit consent
13.2 Your Rights
Under GDPR, you have the right to:
- Access your personal information
- Rectify inaccurate information
- Erase your personal information (in certain circumstances)
- Restrict processing of your information
- Data portability
- Object to processing
- Withdraw consent at any time
13.3 Data Protection Officer
You may contact our Data Protection Officer at support@credencepay.cc for GDPR-related inquiries.
14. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will:
- Update the "Last Updated" date at the top of this policy
- Notify you of material changes through email or secure message
- Post the updated policy on our website
- Provide additional notice as required by law
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.
15. Contact Information
If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:
Privacy Office
Credence Pay
Privacy Officer
Email: support@credencepay.cc
Phone: +1 (854) 212-8270
Address: 1450 Ala Moana Blvd, Honolulu, HI 96814
Response Time
We will respond to your privacy-related inquiries within 30 days of receipt. For urgent matters, please call our customer service line for immediate assistance.
Effective Date
This Privacy Policy is effective as of 2025-10-10 and applies to all information previously collected, currently collected, and collected in the future, unless a separate privacy notice applies to specific products or services.