OCTOX Privacy Policy
Effective [09 20, 2024]
Last Amended [09 20, 2024]
Omnivista Consultancy Pte. Ltd. (“OCTOX,” “we, “us,” or “our”) establishes and presents the following privacy policy describing how and why we collect, store, use, share, and/or protect your personal information during your use of OCTOX (the “Service”) and resolve any relevant complaint thereof promptly and amicably. The capitalized terms not defined hereunder shall have the meaning as set forth in our Terms of Service.
1. YOUR INFORMATION WE COLLECT OR USE
We collect and process the following personal information during your use of the Service; provided that we do not process the personal information of minors who are under the age of sixteen (16):
(a) information collected when registering as a Member (required): email address and password;
(b) information of Member collected when binding to an Partner Exchange UID (required): exchange name, exchange UID, exchange futures transaction history (date, volume);
(c) information of Non-Member collected when using the cashback service (required): exchange name, exchange UID, exchange futures transaction history (date, volume);
(d) information automatically generated and collected when you use the Service: your IP address and browser type, the language used, Service usage history (visit history such as access date and time, usage history such as accumulation, application, withdrawal history for the cashback/commission), device information (mobile phone model name, OS name and version), cookies; and
(e) information collected when taking surveys or providing feedback via email or other channels: the necessary items of each of the above-mentioned information and other items required for the applicable survey or feedback.
2. PERIOD OF PROCESS AND RETENTION FOR PERSONAL INFORMATION
We will, without delay and without your further request, delete and destroy your personal information when you withdraw from the Service or are disqualified from user status. Notwithstanding the foregoing, the following information is retained for the following period despite the withdrawal of membership or loss of the User qualification:
(a) if there is an ongoing investigation regarding a violation of relevant laws and regulations, the personal information will be retained until the completion of the respective investigation;
(b) if any debts resulting from your use of the Service remain unsettled, the personal information will be retained until the relevant debts are settled.
(c) your email address will be retained until the end of the Service to prevent re-subscription with the same email address; and
(d) your retention, accumulation, application, and withdrawal history of cashback/commission will be retained for five (5) years for the purpose of follow-up management and possible inspections; provided that information that can identify an individual, such as UID, is retained by data masking from your date of application for withdrawal.
3. HOW WE USE THE INFORMATION WE COLLECT
We collect and use personal information for the following purposes:
(a) membership registration and management: to confirm membership registration intention, maintain and manage the membership, prevent unauthorized use of the Service, and provide various notices and notifications;
(b) detection and prevention of fraud or loss of funds: to detect, prevent, and reduce fraud and misuse of the Service and to protect you from account damage or loss of funds;
(c) service provision: to provide the Services to you;
(d) service communications: to keep you informed about the Services, to notify you of relevant security issues or updates, or to provide other transaction-related information;
(e) customer support: to resolve a problem or dispute when you contact us;
(f) network and information security: to improve security, monitor and verify identity and access to the Services, deal with spam or other malicious software or security risks, and comply with applicable security laws and regulations;
(g) service improvement and development: to customize and improve the content and layout of the Services and to develop additional services; and
(h) marketing and advertising: to send marketing communications (e.g., emails or text messages) to inform you about our or our partners' activities, to provide targeted marketing, and to provide promotional offers.
4. PROVISION OF PERSONAL INFORMATION TO THIRD PARTIES
We, in principle, do not provide your personal information to third parties except with the consent of the user or unless applicable laws or regulations allow us to do so.
5. OPERATION, INSTALLATION, AND REFUSAL THEREOF OF AUTOMATIC PERSONAL INFORMATION COLLECTION
We use ‘cookies' to store and frequently retrieve usage information to provide the Users with individually customized services. Cookies are a small amount of information sent to the user's PC browser by the server (HTTP), which are used to operate the website, etc., and may be stored in the user's hard disk in the computer.
5.1. Information collected and purpose when using cookies: cookies will collect information on your access frequency, visit time, Service usage patterns, usage traces, whether you securely access the Service, User size, and the like. We may use the cookies for Service improvement, new services development, customized services, and advertisement provision.
5.2. You have the right to choose the installation of cookies. Therefore, you may refuse to store all cookies by changing the settings as follows:
(a) Android: [Settings] > [Privacy] > [Advertising] > [Remove Ad ID];
(b) iPhone: [Settings] > [Privacy] > [Tracking] > off [Do Not Allow Apps to Request Tracking];
(c) Internet Explorer: [Tools] > [Internet Options] > [Privacy] > [Settings] > [Block Cookies];
(d) Microsoft Edge: [⋯] (settings and more at the top right of the web browser) > [Settings] > [Privacy, Search, and Services] > 1) [Do Not Track]; always use strict do not track when searching for InPrivate, 2) [Privacy] > send request for [Do Not Track], 3) [⋯] (settings and more at the top right of the web browser) > [Settings] > [Cookies and Site Permissions] > [Cookies and Stored Data] > [Manage and Delete Cookies and Site Data > off [Allow Sites to Store and Read Cookie Data (recommended)];
(e) Chrome: ⋮ (chrome customize and control in the top right corner of your web browser) > Settings > Privacy and security > Privacy and security > Third-party cookies > Choose how you want to block cookies.
6. DESTRUCTION OF PERSONAL INFORMATION
6.1. We will, without delay, destroy your personal information when your personal information becomes unnecessary, such as in the cases of the expiration of the personal information retention period, or achievement of the purpose of processing.
6.2. If we need to preserve your personal information in accordance with the applicable laws and regulations as set forth in Section 2.2, even when the personal information retention period agreed upon by you has elapsed or the purpose of processing has been achieved, we will store your personal information and isolate it from further processing by storing it in a separate database.
6.3. We take the following destruction procedures and methods:
(a) destruction procedures: we will select the personal information for which the reason for destruction has occurred and destroy the personal information with the approval of our Chief Privacy Officer; and
(b) destruction method: we will destroy personal information recorded and stored in electronic files using technical methods so that the records cannot be reproduced, and we will destroy personal information recorded and stored in paper documents by shredding or incinerating them.
7. SAFETY MEASURES FOR PERSONAL INFORMATION
We have implemented the following measures to protect the security of your personal information:
(a) administrative measures: establishment and implementation of internal management plans for personal information, regular employee training, etc., and the like;
(b) technical measures: technical measures against hacking, encryption of personal information, management of access rights to the personal information processing system, storage of access records and prevention of falsification, and the like;
(c) physical measures: access control to server rooms, data storage rooms, and the like; and
(d) other measures: processing withdrawal of consent, deletion, access request, or correction of information that you provide to us
8. YOU AND YOUR LEGAL REPRESENTATIVES’ RIGHTS, OBLIGATIONS, AND EXERCISE METHODS THEREOF
8.1. You may, at any time, exercise the right to peruse, correct, delete, and suspend the processing of your personal information against us.
8.2. You may exercise the above right set forth in Section 8.1 by your agents, such as your legal representative or a delegate, in which case you will be required to submit to us a power of attorney that confirms such delegation.
8.3. You may exercise the rights set forth in Section 8.1 by sending an email to our chief privacy (support@octox.io) as set forth in Section 9, and we will take action without delay; provided that, the exercise of certain rights may be restricted under applicable laws such as the Personal Information Protection Act of the Republic of Korea.
8.4. Your request to suspend the processing of personal information or withdrawal of consent to the collection and use of personal information may limit your continued use of the Service, and you may be required to terminate the User Agreement executed with us.
9. CHIEF PRIVACY OFFICER
9.1. We have designated the person in charge of managing personal information tasks and handling your complaints about personal information (the “Chief Privacy Officer”) as follows:
▶ Chief Privacy Officer
- Name: Peter Young
- Position: Director
- Contact: support@octox.io
9.2. You may inquire about all personal information protection-related inquiries, handling complaints, damage relief, etc., that occurred while using our services to our Chief Privacy Officer and the following department in charge:
- Department: Security Team
- Contact: support@octox.io
10. ADDITIONAL PROVISIONS FOR EU USERS
10.1. The provisions of this Section apply only to a resident of the European Union ("EU"). When applicable, this Section precedes any inconsistent provisions in the rest of this Privacy Policy.
10.2. We may transfer your personal information outside the EU, in which case we will take all reasonable precautions to apply the appropriate safeguards set forth by the GDPR. This includes, for example, entering into relevant contracts to ensure that the recipient of such transfer will protect and treat your personal information in accordance with all applicable privacy laws.
10.3. You may exercise the following rights under the GDPR:
(a) the right to access your personal information, to correct or amend any inaccuracies and, where applicable, to object to the processing of the data;
(b) the right to delete data that was collected with your consent but is no longer necessary to fulfill the purposes for which it was collected;
(c) the right to restrict processing where such data is no longer necessary to fulfill the purposes for which it was collected;
(d) the right to receive your personal information in a structured, commonly used, and machine-readable format, or transfer your personal information to another organization; and
(e) the right to withdraw consent at any time and without any penalty, as long as the processing of personal information is based solely on the your consent.
11. AMENDMENT OF THE PRIVACY POLICY
We may amend the Privacy Policy in order to comply with applicable law or to reflect any changes in the provision of the Service, in which case we will notify you of such amendment at least seven (7) days prior to the effective date of such amendment; provided that we will notify you at least thirty (30) days in advance of any significant changes to your rights, such as changes in the items of personal information we collect, changes in the purpose of use.
[View the previous version of our Privacy Policy]