Data protection - Revision history

Astropoint at 10:39, 5 May 2023

2023-05-05T10:39:58Z

← Older revision		Revision as of 10:39, 5 May 2023
Line 11:		Line 11:
	==Deletion of data==		==Deletion of data==

	Paragraph 33 of the [https://www.gov.im/media/470621/anti-moneylaunderingandcounteringthefinancingofterrorismcode2015.pdf Anti-Money Laundering and Countering the Financing of Terrorism Code 2015] requires Bittylicious to store user data for at least 5 years even after accounts are marked as deleted. Following common industry practice, we retain data for 10 years from the date of deletion.		Paragraph 33 of the [https://www.gov.im/media/470621/anti-moneylaunderingandcounteringthefinancingofterrorismcode2015.pdf Anti-Money Laundering and Countering the Financing of Terrorism Code 2015] requires Bittylicious to store user data for at least 5 years even after accounts are marked as deleted. Following common industry practice, we retain data for 5 years from the date of deletion.

	When the account is marked as deleted, we set a flag meaning the account can no longer be registered again. After 10 years, any sort of identifiable data, including uploaded data, will be automatically deleted.		When the account is marked as deleted, we set a flag meaning the account can no longer be registered again. After 5 years, any sort of identifiable data, including uploaded data, will be automatically deleted.

Cocodude at 08:10, 13 April 2022

2022-04-13T08:10:32Z

← Older revision		Revision as of 08:10, 13 April 2022
Line 1:		Line 1:
	Bittylicious complies with the [https://www.gov.im/about-the-government/data-protection-gdpr-on-the-isle-of-man/legislation/ data protection laws] of the Isle of Man, including the [https://www.legislation.gov.im/cms/images/LEGISLATION/PRINCIPAL/2018/2018-0010/DataProtectionAct2018_1.pdf Data Protection Act 2018]. Information about your account is held with the strictest security protocols and policies.		Bittylicious complies with the [https://www.gov.im/about-the-government/data-protection-gdpr-on-the-isle-of-man/legislation/ data protection laws] of the Isle of Man, including the [https://www.legislation.gov.im/cms/images/LEGISLATION/PRINCIPAL/2018/2018-0010/DataProtectionAct2018_1.pdf Data Protection Act 2018]. Information about your account is held with the strictest security protocols and policies.

	Bittylicious is also a registered as a Data Controller with the [https://www.inforights.im/ Information Commissioner]. This registration is required primarily because of some of the personal information we hold, including any identification documents you may upload. Our reference number is ~~IC292128I~~ and you can [https://www.inforights.im/contact-us/ contact] the Information Commissioner to confirm.		Bittylicious is also a registered as a Data Controller with the [https://www.inforights.im/ Information Commissioner]. This registration is required primarily because of some of the personal information we hold, including any identification documents you may upload. Our reference number is R002897 and you can [https://www.inforights.im/contact-us/ contact] the Information Commissioner to confirm.

	We do not sell any of your information to any third parties. We keep all information secure and only will hand over information if required by the laws of the countries in which we operate.		We do not sell any of your information to any third parties. We keep all information secure and only will hand over information if required by the laws of the countries in which we operate.

Nicguana at 17:10, 1 January 2021

2021-01-01T17:10:01Z

← Older revision		Revision as of 17:10, 1 January 2021
Line 1:		Line 1:
	Bittylicious complies with the data protection laws of the ~~United Kingdom~~, including the [https://www.gov.uk/~~data~~-~~protection~~ Data Protection Act]. Information about your account is held with the strictest security protocols and policies.		Bittylicious complies with the [https://www.gov.im/about-the-government/data-protection-gdpr-on-the-isle-of-man/legislation/ data protection laws] of the Isle of Man, including the [https://www.legislation.gov.im/cms/images/LEGISLATION/PRINCIPAL/2018/2018-0010/DataProtectionAct2018_1.pdf Data Protection Act 2018]. Information about your account is held with the strictest security protocols and policies.

	Bittylicious is also a registered ~~[http://www.ico.org.uk/for_organisations/data_protection/the_guide/key_definitions~~ Data Controller] with the [~~http~~://www.~~ico~~.~~org.uk~~/ Information Commissioner~~'s Office~~]. This registration is required primarily because of some of the personal information we hold, including any identification documents you may upload. Our ~~registration~~ number is ~~ZA027569~~ and you can [~~http~~://www.~~ico.org~~.uk/~~esdwebpages~~/~~search search~~ the ~~register]~~ to confirm.		Bittylicious is also a registered as a Data Controller with the [https://www.inforights.im/ Information Commissioner]. This registration is required primarily because of some of the personal information we hold, including any identification documents you may upload. Our reference number is IC292128I and you can [https://www.inforights.im/contact-us/ contact] the Information Commissioner to confirm.

	We do not sell any of your information to any third parties. We keep all information secure and only will hand over information if required by the laws of the countries in which we operate.		We do not sell any of your information to any third parties. We keep all information secure and only will hand over information if required by the laws of the countries in which we operate.
Line 11:		Line 11:
	==Deletion of data==		==Deletion of data==

	~~Owing to~~ the [https://www.gov.uk/~~government~~/~~publications~~/~~money~~-~~laundering-and~~-~~terrorist-financing-amendment-regulations-2019~~ Money Laundering and ~~Terrorist~~ Financing ~~Regulations 2019~~] ~~being applicable to cryptoasset companies from 10th January 2020, we are required~~ to store user data even after accounts are marked as deleted. ~~In line with other companies affected by this regulation~~, we retain data for 10 years from the date of deletion.		Paragraph 33 of the [https://www.gov.im/media/470621/anti-moneylaunderingandcounteringthefinancingofterrorismcode2015.pdf Anti-Money Laundering and Countering the Financing of Terrorism Code 2015] requires Bittylicious to store user data for at least 5 years even after accounts are marked as deleted. Following common industry practice, we retain data for 10 years from the date of deletion.

	When the account is marked as deleted, we set a flag meaning the account can no longer be registered again. After 10 years, any sort of identifiable data, including uploaded data, will be automatically deleted.		When the account is marked as deleted, we set a flag meaning the account can no longer be registered again. After 10 years, any sort of identifiable data, including uploaded data, will be automatically deleted.

	~~Please see [[Data Retention]] for more specific information about why data needs to be kept for 10 years.~~

	==Cookíes==		==Cookíes==

Nicguana at 13:45, 11 July 2020

2020-07-11T13:45:16Z

← Older revision		Revision as of 13:45, 11 July 2020
Line 15:		Line 15:
	When the account is marked as deleted, we set a flag meaning the account can no longer be registered again. After 10 years, any sort of identifiable data, including uploaded data, will be automatically deleted.		When the account is marked as deleted, we set a flag meaning the account can no longer be registered again. After 10 years, any sort of identifiable data, including uploaded data, will be automatically deleted.

	~~''Update on 13th April 2020: Pending clarification from the ICO~~ about ~~the deletion of~~ data ~~vs MLR registration, the automatic deletion of accounts is temporarily suspended~~.''		Please see [[Data Retention]] for more specific information about why data needs to be kept for 10 years.

	==Cookíes==		==Cookíes==

Cocodude: /* Deletion of data */

2020-04-13T15:01:52Z

Deletion of data

← Older revision		Revision as of 15:01, 13 April 2020
Line 14:		Line 14:

	When the account is marked as deleted, we set a flag meaning the account can no longer be registered again. After 10 years, any sort of identifiable data, including uploaded data, will be automatically deleted.		When the account is marked as deleted, we set a flag meaning the account can no longer be registered again. After 10 years, any sort of identifiable data, including uploaded data, will be automatically deleted.

			''Update on 13th April 2020: Pending clarification from the ICO about the deletion of data vs MLR registration, the automatic deletion of accounts is temporarily suspended.''

	==Cookíes==		==Cookíes==

Cocodude: /* Deletion of data */

2020-01-30T11:15:32Z

Deletion of data

← Older revision		Revision as of 11:15, 30 January 2020
Line 11:		Line 11:
	==Deletion of data==		==Deletion of data==

	~~Bittylicious deletes or obfuscates information on a~~ user~~'s account, including uploaded files, at some point~~ after ~~the account has been~~ marked ~~for deletion~~. ~~Users can do~~ this ~~by choosing to delete their account on~~ the ~~profile page. This process is irreversible~~.		Owing to the [https://www.gov.uk/government/publications/money-laundering-and-terrorist-financing-amendment-regulations-2019 Money Laundering and Terrorist Financing Regulations 2019] being applicable to cryptoasset companies from 10th January 2020, we are required to store user data even after accounts are marked as deleted. In line with other companies affected by this regulation, we retain data for 10 years from the date of deletion.

	If the account ~~has never been used for any sort of trade, identifiable data, including uploaded data,~~ is deleted on the ~~next run~~. ~~This is typically within two days~~ of ~~the deletion request.~~		When the account is marked as deleted, we set a flag meaning the account can no longer be registered again. After 10 years, any sort of identifiable data, including uploaded data, will be automatically deleted.

	~~If the account has been used for a trade,~~ identifiable data, including uploaded data, is deleted one year after the deletion request. The rationale is that we need to keep this information in case of identified fraud on the account, which can be flagged up a significant time after the trade actually completed. Although banking practices are quite opaque, articles suggest that users can query transactions sometimes up to [http://www.telegraph.co.uk/finance/personalfinance/bank-accounts/6338659/Bank-payments-13-months-to-dispute-suspicious-transactions.html 13 months after the initial transaction], so this helps us identify fraud patterns.

	~~'''Note: From 10th January 2020, customer data~~ will be ~~stored for 10 years from the date of deletion due to compliance with money laundering regulations'''~~.

	==Cookíes==		==Cookíes==

Cocodude: /* Deletion of data */

2019-12-26T14:42:56Z

Deletion of data

← Older revision		Revision as of 14:42, 26 December 2019
Line 16:		Line 16:

	If the account has been used for a trade, identifiable data, including uploaded data, is deleted one year after the deletion request. The rationale is that we need to keep this information in case of identified fraud on the account, which can be flagged up a significant time after the trade actually completed. Although banking practices are quite opaque, articles suggest that users can query transactions sometimes up to [http://www.telegraph.co.uk/finance/personalfinance/bank-accounts/6338659/Bank-payments-13-months-to-dispute-suspicious-transactions.html 13 months after the initial transaction], so this helps us identify fraud patterns.		If the account has been used for a trade, identifiable data, including uploaded data, is deleted one year after the deletion request. The rationale is that we need to keep this information in case of identified fraud on the account, which can be flagged up a significant time after the trade actually completed. Although banking practices are quite opaque, articles suggest that users can query transactions sometimes up to [http://www.telegraph.co.uk/finance/personalfinance/bank-accounts/6338659/Bank-payments-13-months-to-dispute-suspicious-transactions.html 13 months after the initial transaction], so this helps us identify fraud patterns.

			'''Note: From 10th January 2020, customer data will be stored for 10 years from the date of deletion due to compliance with money laundering regulations'''.

	==Cookíes==		==Cookíes==

Cocodude at 15:15, 25 July 2019

2019-07-25T15:15:31Z

← Older revision		Revision as of 15:15, 25 July 2019
Line 17:		Line 17:
	If the account has been used for a trade, identifiable data, including uploaded data, is deleted one year after the deletion request. The rationale is that we need to keep this information in case of identified fraud on the account, which can be flagged up a significant time after the trade actually completed. Although banking practices are quite opaque, articles suggest that users can query transactions sometimes up to [http://www.telegraph.co.uk/finance/personalfinance/bank-accounts/6338659/Bank-payments-13-months-to-dispute-suspicious-transactions.html 13 months after the initial transaction], so this helps us identify fraud patterns.		If the account has been used for a trade, identifiable data, including uploaded data, is deleted one year after the deletion request. The rationale is that we need to keep this information in case of identified fraud on the account, which can be flagged up a significant time after the trade actually completed. Although banking practices are quite opaque, articles suggest that users can query transactions sometimes up to [http://www.telegraph.co.uk/finance/personalfinance/bank-accounts/6338659/Bank-payments-13-months-to-dispute-suspicious-transactions.html 13 months after the initial transaction], so this helps us identify fraud patterns.

	==~~Cookies~~==		==Cookíes==

	Cookies are essential to the use of this site for multiple reasons including maintaining user login sessions and aiding with our anti-fraud efforts.		Cookies are essential to the use of this site for multiple reasons including maintaining user login sessions and aiding with our anti-fraud efforts.

Cocodude at 15:10, 25 July 2019

2019-07-25T15:10:46Z

← Older revision		Revision as of 15:10, 25 July 2019
Line 16:		Line 16:

	If the account has been used for a trade, identifiable data, including uploaded data, is deleted one year after the deletion request. The rationale is that we need to keep this information in case of identified fraud on the account, which can be flagged up a significant time after the trade actually completed. Although banking practices are quite opaque, articles suggest that users can query transactions sometimes up to [http://www.telegraph.co.uk/finance/personalfinance/bank-accounts/6338659/Bank-payments-13-months-to-dispute-suspicious-transactions.html 13 months after the initial transaction], so this helps us identify fraud patterns.		If the account has been used for a trade, identifiable data, including uploaded data, is deleted one year after the deletion request. The rationale is that we need to keep this information in case of identified fraud on the account, which can be flagged up a significant time after the trade actually completed. Although banking practices are quite opaque, articles suggest that users can query transactions sometimes up to [http://www.telegraph.co.uk/finance/personalfinance/bank-accounts/6338659/Bank-payments-13-months-to-dispute-suspicious-transactions.html 13 months after the initial transaction], so this helps us identify fraud patterns.

			==Cookies==

			Cookies are essential to the use of this site for multiple reasons including maintaining user login sessions and aiding with our anti-fraud efforts.

			We also use cookies when analysing the traffic to the site via Google Analytics.

			Accepting these cookies is essential in order to use Bittylicious.

Cocodude: /* Deletion of data */

2017-07-26T23:06:54Z

Deletion of data

← Older revision		Revision as of 23:06, 26 July 2017
Line 15:		Line 15:
	If the account has never been used for any sort of trade, identifiable data, including uploaded data, is deleted on the next run. This is typically within two days of the deletion request.		If the account has never been used for any sort of trade, identifiable data, including uploaded data, is deleted on the next run. This is typically within two days of the deletion request.

	If the account has been used for a trade, identifiable data, including uploaded data, is deleted one year after the ~~last trade~~. The rationale is that we need to keep this information in case of identified fraud on the account, which can be flagged up a significant time after the trade actually completed. Although banking practices are quite opaque, articles suggest that users can query transactions sometimes up to [http://www.telegraph.co.uk/finance/personalfinance/bank-accounts/6338659/Bank-payments-13-months-to-dispute-suspicious-transactions.html 13 months after the initial transaction], so this helps us identify fraud patterns.		If the account has been used for a trade, identifiable data, including uploaded data, is deleted one year after the deletion request. The rationale is that we need to keep this information in case of identified fraud on the account, which can be flagged up a significant time after the trade actually completed. Although banking practices are quite opaque, articles suggest that users can query transactions sometimes up to [http://www.telegraph.co.uk/finance/personalfinance/bank-accounts/6338659/Bank-payments-13-months-to-dispute-suspicious-transactions.html 13 months after the initial transaction], so this helps us identify fraud patterns.