1.1 Introduction
UVA Global is committed to protecting the privacy and confidentiality of the personal and business information we collect in the course of providing our financial services. This Privacy Policy describes how we collect, use, store, share, and protect information in connection with our money services business operations in Canada.
UVA Global is registered as a Money Services Business (MSB) with the Financial Transactions and Reports Analysis Centre of Canada (FINTRAC) and operates in compliance with applicable Canadian privacy legislation, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and any applicable provincial privacy laws.
1.2 Information We Collect
In the course of providing our services, we may collect the following categories of information:
Business & Entity Information
- Legal entity name, registration number, and jurisdiction of incorporation
- Business address, contact details, and website
- Details of directors, officers, and ultimate beneficial owners
- Corporate structure and ownership documentation
- Tax identification numbers and regulatory registration details
Individual Identification Information
- Full legal name, date of birth, and nationality
- Government-issued identification documents (passport, driver’s licence, national ID)
- Residential address and contact information
- Biometric data where required for identity verification
Financial & Transaction Information
- Bank account details, payment instructions, and transaction records
- Source of funds and source of wealth information
- Transaction history, amounts, currencies, and counterparty details
- FX rates, confirmation records, and settlement details
Technical & Usage Information
- IP address, browser type, and device identifiers
- Log data, access times, and pages visited on our platform
- Cookies and similar tracking technologies (see our Cookie Policy)
1.3 How We Use Your Information
We use the information we collect for the following purposes:
- To verify your identity and complete our Know Your Business (KYB) and Know Your Client (KYC) obligations
- To process and settle foreign exchange transactions, money transfers, and cross-border payments
- To comply with our legal obligations under the PCMLTFA, FINTRAC requirements, and applicable sanctions regimes
- To screen transactions against international sanctions lists and detect suspicious activity
- To communicate with you regarding your account, transactions, and our services
- To maintain accurate records as required by Canadian law
- To improve the security, functionality, and performance of our platform
- To comply with any lawful request from a regulatory authority or law enforcement agency
1.4 Legal Basis for Processing
We process personal information on the following legal bases:
- Legal obligation — we are required by law to collect and process certain information under the PCMLTFA and FINTRAC regulations
- Contractual necessity — processing is necessary to fulfil our obligations under our agreement with you
- Legitimate interests — to operate our business, prevent fraud, and maintain platform security
- Consent — where we have obtained your explicit consent for a specific processing activity
1.5 How We Share Your Information
We do not sell personal information. We may share information in the following circumstances:
- With FINTRAC and other Canadian regulatory authorities as required by law
- With law enforcement agencies where required by lawful order or to prevent serious harm
- With trusted third-party service providers who assist us in operating our platform, subject to confidentiality obligations
- With correspondent banks, settlement partners, and financial institutions involved in processing your transactions
- With sanctions screening and compliance technology providers
- In connection with a merger, acquisition, or sale of all or part of our business, subject to appropriate confidentiality protections
1.6 Data Retention
We retain personal and business information for a minimum of five (5) years following the end of our business relationship, or for such longer period as may be required by applicable law. Transaction records are retained in accordance with FINTRAC’s record-keeping requirements under the PCMLTFA.
1.7 Data Security
We implement appropriate technical and organisational measures to protect the information we hold against unauthorised access, disclosure, alteration, or destruction. These measures include encryption of data in transit and at rest, access controls, and regular security assessments. However, no method of transmission over the internet is completely secure and we cannot guarantee absolute security.
1.8 Your Rights
Subject to applicable law, you may have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate or incomplete information
- Request deletion of your information, subject to our legal retention obligations
- Withdraw consent where processing is based on consent
- Lodge a complaint with the Office of the Privacy Commissioner of Canada
1.9 Contact
Email: [email protected]
1.10 Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website with a revised effective date. Continued use of our services following such notification constitutes acceptance of the updated policy.