Privacy Policy

1. Who we are

Hallmark Financial Bank (“Hallmark”, “we”, “us”) provides multi-currency wallets, international transfers, payments, cards, statements and loan services through this website and app. We are responsible for the personal information described in this policy.

2. Information we collect

We collect only what we need to open and run your account and to meet our legal obligations:

• Identity and contact details: name, date of birth, nationality, address, email address and phone number.
• Verification documents: images of a government-issued ID and a selfie you upload during identity verification (KYC).
• Account and financial information: wallet balances, account and routing numbers, saved payees, cards, transactions, statements and loan applications.
• Device and usage information: sign-in times, browser type, IP address and how you use our services, collected for security and to keep the service working.
• Communications: messages you send us and the notification preferences you set.

3. How we use your information

• To create and manage your account and provide the services you request.
• To verify your identity and comply with anti-money-laundering, counter-terrorist-financing and sanctions requirements.
• To process transfers, payments and card activity, and to show your balances and statements.
• To assess loan applications and estimate your loan limit.
• To detect, prevent and investigate fraud, unauthorised access and other misuse.
• To send service messages, security alerts and, where you have opted in, product updates.
• To improve and maintain our services and meet our legal, accounting and regulatory obligations.

4. Legal bases for processing

Where data-protection law requires a legal basis, we rely on: performance of our contract with you; compliance with our legal and regulatory obligations; our legitimate interests in running a secure and reliable service, balanced against your rights; and your consent, for example for marketing or where you agree to identity verification. You can withdraw consent at any time without affecting earlier processing.

5. Who we share information with

We do not sell your personal information. We share it only where necessary with:

• Service providers that host our infrastructure, store data, verify identity, deliver email and SMS, or provide exchange-rate information, under contracts that require them to protect it.
• Payment networks, card issuers and partner banks needed to complete transactions you request.
• Regulators, law enforcement, courts and tax authorities where the law requires it.
• Professional advisers, and any successor business in the event of a merger or acquisition, subject to confidentiality.

6. International transfers

Your information may be processed in countries other than your own. Where that happens we use appropriate safeguards, such as standard contractual clauses, so that it remains protected to the standard required by applicable law.

7. How long we keep information

We keep your information for as long as your account is open and afterwards for as long as the law requires, typically at least five years after the relationship ends for financial-crime and record-keeping obligations. Identity documents are stored in private storage that only you and authorised staff can access, and are deleted when they are no longer required.

8. How we protect information

We use encryption in transit, access controls that restrict each customer to their own records, private storage for verification documents, and monitoring for suspicious activity. No system is completely secure, so please keep your sign-in email account secure and tell us immediately if you suspect unauthorised access.

9. Cookies and local storage

We use essential browser storage to keep you signed in and to remember display preferences. We do not use advertising cookies. Blocking essential storage may stop parts of the service from working.

10. Your rights

Depending on where you live, you may have the right to access, correct or delete your information, to object to or restrict certain processing, to receive a copy of your data in a portable format, and to withdraw consent. Some information must be kept to meet legal obligations even if you ask us to delete it. You can update most details yourself in Settings, or contact us to make a request. You also have the right to complain to your local data-protection authority.

11. Children

Our services are not intended for anyone under 18, and we do not knowingly collect information from children.

12. Changes to this policy

We may update this policy from time to time. If we make material changes we will notify you in the app or by email before they take effect. The effective date at the top shows when it was last revised.

13. Contact us

For questions about this policy or to exercise your rights, contact our support team through the app. We aim to respond within 30 days.