Privacy Policy
This privacy policy sets out how Zak Money Exchange Limited Trading as Zak Money® and referred as “Zak Money” uses and protects any information that Zak Money have about you when you use our service in store, website or mobile applications or otherwise provide your personal details to us.
Zak Money is committed to ensure that your privacy is protected. Should we ask you to provide certain information by which you can be identified when using our Service (as defined below), then you can be assured that it will only be used in accordance with this privacy policy.
Zak Money may change this policy from time to time by updating this page. You should check this page from time to time to ensure that you accept any changes.
Important Notice
By proceeding to use Zak Money Service you acknowledge that Zak Money and our affiliated partners and third parties will collect, process, and store your personal data and may share such data with other EEA, UK and outside of EEA/UK regulated entities.
You grant Your consent that we collect personal and payment related data, check such data with various third parties including the issuer of such data or their authorised representatives, in order to meet our obligations as an FCA Authorised Payment Institution, provided that we do so to either,
- identify you under the UK Money Laundering Regulations 2017 and/or the EU’s 6th Anti Money Laundering Directive (Directive (EU) 2018/843) (“5AMLD”) on behalf of Zak Money
- to process payments between under the UK Payment Services Regulations 2017, 2023 or (“PSD3”) between You and either Zak Money® or at least one of our Merchants, whereby YOU have granted explicit consent for us to do so under the PSR’s and/or PSD3 by providing to Us Your payment and personal data, together with confirmation of the amount to be processed, and any necessary authentication requirements, in order to initiate identification and/or payment.
You understand that your personal data related to our performance or compliance with either
the MLRs/6AMLD or PSRs/PSD3 will be retained by Us as a data controller for a minimum of five (5) years as required by law, and that such data may not be subject to a ‘right to be forgotten’.
We may use the data provided by You to Us to in the future to either Zak Money Services or offer You additional payment related services.
General Legal Notice
Registration and ongoing use of the Zak Money Service. This is an agreement between You and Zak Money for provision of the Services, in order to provide Zak Money or its contracted Merchant third parties with assurance of Your identity or to authenticate or process payment transactions. Zak Money provides the Service to Yourself and in conjunction with various third parties that include online merchants, payment gateways, payment processors, payment service providers, financial institutions, and entities regulated by financial or anti money laundering regulations, which jointly or severally comprise the “third party services”. The “Zak Money Service” is the service provided to You as the customer.
1. Who is Zak Money?
Zak Money is a API-money transfer company that enables customers to send money to their loved ones from our store in person or online through laptop, tablet or smartphone (the “Service”).
In this privacy policy, the terms “we”, “us”, “our”, and “Zak Money” refer to Zak Money, a limited company incorporated under the laws of United Kingdom with Company registration No: 04995400, Information Commissioner’s Office with registration No: Z3153690 and registered office at 70 Ilford Lane, IG1 2LA, United Kingdom.
In the terminology of the UK General Data Protection Regulation (“GDPR”) and the Data Protection Act 2018, Zak Money is the “controller” of your personal data and you, our customer, are the “data subject”. This means that Zak Money determines the purposes and means of the processing of your personal data, while respecting your privacy rights.
2. What we collect
This section sets out the categories of personal data we collect and use.
2.1 Data you give us
We collect information you provide when you:
- Open an account or use the Service
- Respond to our requests for additional KYC information
- Communicate with a member of our customer support team (either on the phone, WhatsApp chat or through the email)
- Participate in competitions or campaigns organised by us or share information with us on social media
Basic KYC data | · Name · Address · Personal number · Date of birth · ID Details (ID No, Issue date, Expiry date) |
Additional KYC data | · Nationality · Gender · IP address · Bank statement · Salary slip or pension slip · Contracts, loan documents that contain your name or other data about you |
Contact data | · Telephone number · Email address |
Identity verification data | Copies of your identification documents that may include, in particular: · Passport · Driving license · National IDcard · Residence permit card · Asylum status document |
Address verification data | · Rent payment receipts · Household utility bill (e.g. gas, electric, water or fixed line telephone) · Rental contract with a housing association or city council · Letters fromthe tax or migration authority · Government benefits statement · Bank, building society or credit card statement · Any other document froma government or financial institution that contains your name and address |
Payment data | · Masked bank account number · Masked credit or debit card number |
Recipient data | · Name · Address · Email address · Telephone number · Date of Birth · Copy of a passport or another IDdocument |
Campaigns related data | · Contact details (e.g. email and telephone number) of the participants and the winners · Other information necessary to fulfil our obligations in relation to competitions and campaigns |
All above mentioned information could potentially be collected, but may not be collected in each individual case. Some information, like Gender, will be collected indirectly by the information you are providing, such as by uploading your passport. You do not have to disclose the information to us, but if you choose not to, we may not be able to provide you with the Service.
2.2 Data collected through your use of the Service
Usage data | This includes information on transactions and your use of the Service, in particular:
· date, time, amount, currencies, exchange rate of a transaction · recipient details(including Bank account no/IBAN if bank deposit) · IP address of sender · sender’s and receiver’s name · details of device used to arrange the payment and the payment method used |
Device data | · Operating system type and version number, manufacturer and model · Browser type and language · Screen resolution; · IP address · Unique device identifiers |
Service data | · Time spent on a page or screen · Navigation paths between pages or screens · Session date and time; activity status (including first seen, last seen, last heard from- and last contacted) |
· Pages viewed · Links clicked · Language preferences |
- Information from third parties
If you are established in United Kingdom, we collect your address information from third-party service providers who retrieve it from publicly available databases.
3. Purposes of the data processing and legal basis
The table below sets out:
- To identify you under UK Money Laundering Regulations 2017
- To process payments under the UK Payment Service Regulations 2017, 2023
- Our legal basis under data protection law (GDPR and DPA 2018)
- Categories of personal data which we use for each See more about these categories in Section 2 ‘What we collect’
We may use one of the following legal bases:
- Performance of a contract: we need certain personal data to provide our Service and cannot provide it without this personal data.
- Compliance with legal obligations: in some cases, we have a responsibility to collect and store your personal data (for example, under anti-money laundering laws we are required to possess certain information about our customers).
- Legitimate interest: when we have an interest in using your personal data in a certain way, which is necessary and justified considering any potential risks to
- Consent: when we ask you to actively indicate your agreement to us using your personal data for a certain purpose
To identify you | Compliance with legal obligations | · Basic KYC data |
To verify your identity | Compliance with legal obligations | · Identity verification data · Personal number · Your image in photo |
To verify your address | Compliance with legal obligations | · Address verification data |
To process your transactions | Performance of a contract | · Name · Contact data · Address · Payment data · Recipient data |
To collect payment for your use of the Service | Performance of a contract | · Basic KYC data · Payment data |
To send transaction alerts to you and/or the recipient of your remittance | Performance of a contract | · Name · Contact data · Recipient data |
To provide you with information about the Service | Performance of a contract | · Name · Contact data |
To conduct competitions and campaigns | Performance of a contract | · Campaigns data |
To send you marketing notices, service updates, and promotional offers through direct marketing | Legitimate interest | · Name · Contact data |
To evaluate and develop new features, technologies, and improvements to the Service | Legitimate interest | · Device data · Service data |
To detect and prevent fraud | Compliance with legal obligations | · Your image in photo |
To comply with applicable laws, regulations, and rules, such as those relating to anti-money laundering and counter-terrorist financing | Compliance with legal obligations | · Additional KYC data · Address data · Recipient data · Usage data |
To establish, exercise, or defend legal claims | Legitimate interest | · Basic KYC data · Additional KYC data · Contact data · Identity verification data · Address verification data · Payment data · Recipient data · Campaigns related data · Usage data |
4. How long we keep your personal data
Depending on what purpose your data is used for, the length of time we keep it may vary.
· Basic KYC data | To identify you | 5 years following the last transaction or termination of our contract with you. 10 years if instructed by the competent authorities |
· Identity verification data · Personal number · Your image in photo | To verify your identity | 5 years following the last transaction or termination of our contract with you. 10 years if instructed by the competent authorities |
· Address verification data | To verify your address | 5 years following the last transaction or termination of our contract with you. 10 years if instructed by the competent authorities |
· Name · Contact data · Address · Payment data · Recipient data | To process your transactions | As long as you are our customer |
· Basic KYC data · Payment data | To collect payment for your use of the Service | 5 years following the last transaction or termination of our contract with you. 10 years if instructed by the competent authorities |
· Name · Contact data · Recipient data | To send transaction alerts to you and/or the recipient of your remittance | As long as you are our customer |
· Name · Contact data | To provide you with information about the Service | As long as you are our customer |
· Name · Contact data | To send you marketing notices, service updates, and promotional offers through direct marketing | As long as you are our customer |
· Device data · Service data | To evaluate and develop new features, technologies, and improvements to the Service | 1 year from collection |
· Your image in photo | To detect and prevent fraud | 5 years following the last transaction or termination of our contract with you. 10 years if instructed by the competent authorities |
· Additional KYC data · Address data · Recipient data | To comply with applicable laws, regulations, and rules, such as those relating to anti-money laundering and counter-terrorist financing | 5 years following the last transaction or termination of our contract with you. 10 years if instructed by the competent authorities |
Please note that we may retain any personal data mentioned above for a longer period than stated above, if required by law or if required to protect the rights, property or safety of Zak Money or of the Service provided by us or our partners.
5. How we share information with others
We may share your personal data with:
- Third-party service providers under contract with Zak Money that help us with our business operations, such as transaction processing, fraud prevention, communication, customer support and marketing. The information we share may include all categories of data about you that we These service providers are authorized to use your personal data only as necessary to provide these services to us.
- Third-parties that will pay money for you to your recipient, they will see your name & address to be able to confirm that you are the correct sender and fulfil regulatory
- In the event of a capital raising process or a sale process regarding some or all of our shares or assets, we may disclose your personal data to the prospective The categories of data we may share in this case include basic KYC data, additional KYC data, contact data, identity verification data, and usage data.
- Law enforcement and government officials, but only in connection with a formal request, subpoena, court order, or similar legal procedure, as well as circumstances where we believe in good faith that disclosure is necessary to comply with the law, report suspected illegal activity, or investigate violations of our Terms and The categories of data we may share in this case include basic KYC data, additional KYC data, contact data, identity verification data, address verification data, payment data, recipient data, and usage data.
We will not sell or otherwise transfer the information we collect to third parties for their promotional purposes unless we have received your explicit permission to do so.
6. Transferring data outside of UK/European Economic Area
Personal data which is submitted via our Service is sent to and stored on secure servers owned by, or operated for, us in the UK/European Economic Area (“EEA”). Such data may be transferred to, or stored at, a destination outside the UK/EEA and may also be processed by staff operating outside the UK/EEA who work for us or for one of our service providers. Such transfers may be made in order to operate the Service, improve our Service, or to assist in our security or fraud protection activities.
Whenever we transfer personal data to a destination outside UK/EEA, we take appropriate legal measures to:
- Make sure that the data transfer complies with applicable
- Ensure that your data has the same level of protection as it has in the UK/EU/EEA.
To ensure that each data transfer complies with applicable UK/EU/EEA legislation, we use the following legal mechanism:
- Standard Contractual Clauses, which are clauses that require the other party to protect your data with UK/EU-level rights and protections.
- Adequacy decision, which means that we transfer personal data to a destination outside UK/EEA which have adequate laws to protect personal data, as determined by the UK/EU.
Depending on your use of the Service, including the countries you send money to, we may transfer your data to the countries outside of the UK/EEA: our recipient countries as displayed in the Service from time to time.
When we transfer your data outside of UK/EEA, we do so on the basis of an adequacy decision issued by the ÌCO UK/European Commission in accordance with Article 44 of GDPR which can be accessed here. The decision confirms that the regulatory requirements in these countries ensure an adequate level of protection for your personal data. For transfers to all other countries, we rely on standard data protection clauses adopted by the UK/European Commission. If you would like to obtain a copy of the clauses we use, please contact us by sending an email
to support@zakmoneyexchange.com.
7. Your rights related to personal data
The UK GDPR 2023 & DPA 2018 establishes certain rights in relation to your personal data, which are listed below:
- Information: the right to be informed about how we use your personal data
- Rectification: the right to correct, amend or update your personal data if it is wrong or has changed
- Erasure: the right to ask us to remove your personal data from our You can ask us to delete your personal data if:
- your personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed
- you gave us consent to use your personal data and you have now withdrawn it
- you have objected to us using your personal data
- we have used your personal data unlawfully or
- the law requires us to delete your personal data
- Restriction: the right to ask us to stop processing your personal You can ask us to suspend using your personal data if:
- you want us to verify whether it is accurate
- our use of your personal data is unlawful, but you do not want us to delete it
- we no longer need your personal data, but you need it for the establishment, exercise or defence of legal claims or
- you have objected to us processing your personal data (see below), but we need to verify whether we have compelling legitimate grounds for the
- Objection: the right to object to data processing, including profiling, if our legal basis for processing your data is legitimate However, we may decline your request if there are compelling legitimate grounds for the processing which override your rights and interests
- Access and Portability: the right to access and receive your personal data which you have shared with us in a structured, commonly used and machine-readable format and the right to transmit the data to another controller if (i) the processing is based on that the data subject has given consent to the processing or that the processing is necessary for the performance of a contract, and (ii) the processing is carried out by automated
At any time, you are welcome to contact us in relation to these rights. However, please note that there are certain exceptions where these rights may be superseded by laws and other requirements applicable to regulated financial institutions like Zak Money. An example of this would be the obligatory retention period, which supersedes the right to data erasure.
8. Automated decision making, including profiling
We may conduct automated processing and/or profiling based information you provide to us, together with information obtained from third parties. For example, we may make automated decisions about you that relate to identity verification and sanction checks.
In some cases, automated processes may restrict or suspend access to our Service if such processes identity activity that we believe poses risks to our Service, other users, or third parties.
You have the right to not be subject to individual decisions made solely by automated means. This means that if we make an automated decision about you that significantly affects you, you can request us to perform a manual review of this decision.
9. Security
The security of your personal data is important to us. When you enter financial information (such as credit/debit card and banking information) within our Service,
Your data is encrypted with the card payment service provider which uses secure socket layer technology (SSL), so all information sent between your web browser and our Service remains private and secure.
Zak Money has also introduced technical and organisational measures to ensure the appropriate level of protection for any personal data processed by us. These measures ensure that the personal data is treated confidentially, is available to the extent needed within the organisation and that the content is correct. All measures are designed to take into account the requirements set out in the GDPR and the UK Payment Services Regulations.
10. Use of cookies
We use cookies to analyse how you use our website. For detailed information about cookies see our Cookie Policy.
11. Third party sites
The Service contains links to other websites. Zak Money is not responsible for the privacy practices or the content of these other websites. We encourage you to familiarize yourself with the privacy practices of these other sites prior to submitting your personal data to them.
The Service includes Social Media Features, such as the Facebook Like button and Widgets, such as the Share this button or interactive mini-programs that run on our site. These Features may collect your IP address, which page you are visiting on our site, and may set a cookie to enable the Feature to function properly. Social Media Features and Widgets are either hosted by a third party or hosted directly in our Service. Your interactions with these Features are governed by the privacy policy of the company providing it.
12. Contact
If you have any questions, requests or concerns about this privacy policy or the use of your personal data, please contact us by sending an email to the following address support@zakmoneyexchange.com
If you feel that we have not addressed your question, request or concern adequately, you have a right to make a complaint with the Information Commissioner’s Office (https://ico.org.uk/make-a-complaint). You may call at 03031231113, or use live chat.