Privacy policy

Information we collect

We collect the following categories of information.

Account and contact information

Names, business email addresses, phone numbers, job titles and login details for the people who register, manage or use a Boldrails account.

Verification information

To meet our legal and financial-crime obligations we collect identity and business-verification data during onboarding and from time to time afterwards. This can include company registration details, beneficial-ownership information, government-issued identifiers, proof of address, and supporting documents for the people connected to a business.

Transaction information

Details of the payments, payouts and settlements processed through your account, such as amounts, currencies, payment methods, timestamps, references and counterparties.

Technical and usage information

Device, browser, IP address, log and usage data collected automatically when you use our website or dashboard, including through cookies and similar technologies.

Communications

Messages, support requests and other information you send us by email, form or other channels.

How we use information

We use the information we collect to:

• set up, run and support your Boldrails account and services;
• verify identities and businesses, and meet our anti-money-laundering, sanctions and other legal obligations;
• process payments, payouts and settlements, and keep records of them;
• detect, investigate and prevent fraud, abuse and other prohibited activity;
• communicate with you about your account, service changes and support;
• operate, secure, troubleshoot and improve our website and services;
• comply with applicable law and respond to lawful requests from authorities.

Why we are allowed to process it

We process information to provide the services you ask for, to meet legal and regulatory obligations that apply to financial services, to prevent financial crime, and to run our business responsibly. Where the law requires consent for a particular use, such as some analytics cookies, we ask for it and you can withdraw it.

How we share information

We share information only where it is needed, and only with:

• service providers that help us run the platform, such as identity-verification, fraud-screening, cloud-hosting and communications vendors, under contracts that require them to protect the data;
• banks, payment networks and other financial institutions involved in moving and settling funds;
• regulators, law-enforcement and other authorities when we are legally required to respond, or to protect our customers, the public or Boldrails;
• professional advisers, and parties involved in a corporate transaction such as a merger, acquisition or financing, subject to appropriate confidentiality.

We do not sell personal information, and we do not share it for unrelated advertising.

Cookies and similar technologies

Our website and dashboard use cookies and similar technologies. Strictly necessary cookies keep the site working, keep you signed in and help protect against fraud. Optional analytics cookies help us understand how the site is used so we can improve it.

You can control optional cookies through your browser settings and any cookie controls we present. Blocking strictly necessary cookies may stop parts of the service from working.

How long we keep information

We keep information for as long as you have an account and for as long as we need it for the purposes in this policy. Financial-services and anti-money-laundering rules require us to keep certain records, such as verification and transaction records, for set periods after a relationship ends. We keep those records for at least the period the law requires, then delete or anonymise them.

How we protect information

We use technical and organisational measures to protect information, including encryption in transit, access controls, monitoring and staff training. No system is perfectly secure, but we work to reduce risk and to respond quickly if something goes wrong.

International processing

Boldrails serves businesses across Africa, Latin America, Southeast Asia, the Middle East and North Africa, and Australia. To deliver the service, information may be processed in, or accessible from, countries other than your own, including where we and our service providers operate. Where we transfer information across borders, we apply appropriate safeguards to protect it.

Your choices and rights

Depending on where you are and the law that applies, you may have rights to access the personal information we hold about you, to correct it, to ask us to delete it, to object to or restrict certain uses, and to receive a copy in a portable format.

To make a request, email info@boldrails.com. We may need to verify your identity first, and some information must be kept where the law requires it. If a merchant uses Boldrails to process your data as its customer, contact that merchant first, and we will support them in responding.

Children

Our services are for businesses and the adults who run them. They are not directed at children, and we do not knowingly collect information from anyone under 18.

Changes to this policy

We may update this policy as our services, technology or legal obligations change. When we do, we update the date at the top of the page, and we tell you about significant changes where appropriate.

Contact us

For privacy questions, to exercise your rights, or for our corporate and registered details, email info@boldrails.com and our team will respond by email.