Privacy Policy

This Privacy Policy ("Policy") explains how Banqeta Pty Ltd (ABN 30 653 645 633) ("Banqeta", "we", "our", or "us") collects, uses, discloses, and protects personal data when you visit or use www.banqeta.com, any related mobile applications, or any products, services, and tools we provide (collectively, the "Platform").

By accessing or using the Platform you agree to the practices described in this Policy and to our Terms of Use and Cookies Policy. If you do not agree, please do not use the Platform.

1. Who We Are

Controller: Banqeta Pty Ltd, Suite 5, 30 Main Drive, Birtinya QLD 4575, Australia.Email: privacy@banqeta.com

Banqeta is responsible for deciding how and why your personal data is processed. We engage carefully selected third party processors (e.g. cloud hosting, payment processors, KYC providers) who process data on our instructions and under contract.

2. Data We Collect

We collect personal data in the following categories:

Category Examples
Identity Data full name, date of birth, nationality, photo ID number, selfie (for identity verification)
Contact Data business and mailing address, email, telephone
KYC & AML Data ID documents, proof of address, source of funds / wealth information, screening results
Financial Data bank or wallet details used to fund or withdraw
Transaction Data details of payments, transfers, trades, orders, subscriptions
Technical Data IP address, device ID, browser type, operating system, timezone, cookies
Usage Data clickstream, feature use, error logs, page interactions
Marketing Data preferences for receiving newsletters or event invites

We do not knowingly collect data from anyone under 18. If you believe a minor has provided data, please contact us.

3. How We Collect Data

Directly from you – when you create an account, complete KYC checks, fund your account, contact us, or otherwise provide information.

Automatically – via cookies and similar technologies when you browse the Platform (see Cookies Policy).

From third parties – identityverification vendors, sanctions and fraud databases, analytics providers, advertising networks, and publicly available records.

4 Why We Process Data & Legal Bases

Purpose Lawful basis
Create and administer your account; deliver requested services Contract performance
Conduct KYC/AML checks; prevent fraud and financial crime Legal obligation; legitimate interest
Process payments, trades, and transfers Contract performance
Provide customer support and service notifications Contract performance; legitimate interest
Improve and secure the Platform; troubleshoot, data analytics Legitimate interest
Comply with tax, accounting, and regulatory reporting Legal obligation
Send direct marketing where permitted Consent (noncustomers) / Legitimate interest (existing customers)

You may withdraw consent at any time without affecting prior processing.

5. Sharing Your Data

We share personal data only when necessary:

Service providers (e.g. cloud hosting, analytics, KYC, card issuing, payment processing) under contract;

Professional advisers (lawyers, auditors, insurers) under duty of confidentiality;

Regulators, courts, lawenforcement where required by law or to protect rights;

Successors in the event of a merger, acquisition, or asset sale (data will remain subject to this Policy). We never sell personal data.

6. International Transfers

Your data may be processed outside your country, including outside the European Economic Area ("EEA"). Where we transfer data internationally we rely on:

Adequacy decisions; or

Standard Contractual Clauses approved by the European Commission. Safeguards are reviewed regularly.

7. Security

We employ administrative, technical, and physical safeguards—including encryption in transit and at rest, access controls, and regular penetration testing—to protect data from loss, misuse, or unauthorised access. No system is 100 % secure; if you suspect a security issue please email security@banqeta.com.

8. Data Retention

We retain personal data only as long as necessary for the purposes stated in this Policy, including:

7 years after account closure for AML, accounting, and tax obligations, or

Longer if required for legal claims, investigations, or to comply with law. Data may be anonymised and retained for statistical purposes.

9. Your Rights

Subject to local law, you have the right to:

• Access the personal data we hold about you;

• Correct inaccurate or incomplete data;

• Request deletion in certain circumstances;

• Restrict or object to processing;

• Port data to another provider;

• Withdraw marketing consent at any time. Requests: email privacy@banqeta.com. We may need ID to verify requests. We respond within one month.

10. Cookies

We use cookies to operate and improve the Platform. See our separate Cookies Policy for details and optout options.

11. ThirdParty Links

The Platform may contain links to thirdparty sites. We are not responsible for their privacy practices. Review any thirdparty privacy notice before providing data.

12. Changes to This Policy

We may update this Policy periodically. Material changes will be highlighted on the Platform or sent via email. Continued use of the Services constitutes acceptance of the revised Policy.

13. Contact Us

Questions or concerns?Email: privacy@banqeta.com Postal: Suite 5, 30 Main Drive, Birtinya QLD 4575, Australia

If you are in the EEA you may lodge a complaint with your local supervisory authority, but we ask that you contact us first so we can address your concerns.