Privacy Policy

This Privacy Policy explains how Dealflow Capital Ltd. ("Dealflow Capital", "we", "us") collects, uses, discloses and safeguards personal information collected through this website (dfc-ltd.com) and in connection with our services.

Information we collect

We collect personal information you voluntarily provide through the contact form on this website. The contact form collects: full name, business email address, company name, country, subject line and the content of your message.

When you submit the contact form, our servers also record technical information necessary for security and abuse prevention: the IP address of your device and your browser's user-agent string. This information is used solely to enforce rate limits and detect automated submissions.

Business clients and transaction data

In the course of providing our services, we collect and process information about our business clients and their directors, shareholders and beneficial owners, including identification documents, proof of address and corporate records, as required for know-your-business and anti-money laundering checks. We also process transaction data relating to payments handled on behalf of our clients. This information is processed to perform our contracts, to prevent fraud and to comply with our obligations under the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA) and the Personal Information Protection and Electronic Documents Act (PIPEDA).

Planned individual Fiat-to-Crypto service

Dealflow Capital Ltd. is developing a Fiat-to-Crypto On-Ramp for eligible individual customers. If introduced, this service may require personal information such as identity and contact details, identification documents, risk-based verification information, payment and transaction data, and destination wallet information for onboarding, identity verification, AML and sanctions screening, transaction monitoring and fraud prevention. Applicable privacy disclosures and separate service terms will be provided before the service is introduced. This disclosure describes the planned service and does not state that customer data is currently being collected for it.

How we use your information

• To respond to your enquiry and communicate with you about it;
• To evaluate potential business relationships;
• To meet record-keeping and other obligations that apply to a Canadian FINTRAC Registered Money Services Business;
• To protect the website from abuse (rate limiting, spam prevention).

Legal basis

We rely on your consent when you submit the contact form, on our legitimate interest in operating and securing this website, and on compliance with legal obligations that apply to us as a FINTRAC Registered Money Services Business.

How website contact information is stored

Contact form submissions are stored in a database operated by our hosting provider. Access is restricted to authorised personnel and to server processes required to deliver your enquiry to us.

Data storage and international transfers

Client and transaction data is stored and processed in Ireland, within the European Union, through our technology provider. Where personal information is transferred outside Canada, we apply contractual and technical safeguards to protect it.

This disclosure concerns client and transaction data. The hosting location of website contact-form submissions has not been independently confirmed and is not represented as Ireland by this policy.

Sharing

We do not sell personal information.

Website contact-form information may be shared with website hosting and email service providers for the purposes of operating the website and handling enquiries.

Business-client, identity-verification and transaction information may be shared with relevant technology providers, acquiring partners and other service providers where necessary for payment processing, onboarding, compliance and applicable legal obligations.

We also share personal information where required by law or by a competent regulator.

Retention

Client identification and transaction records subject to PCMLTFA record-keeping requirements are retained for at least five years, or longer where required by applicable law.

Contact form submissions are retained for as long as reasonably necessary to respond to your enquiry and to comply with record-keeping obligations applicable to Dealflow Capital as a FINTRAC Registered Money Services Business.

Your rights

Subject to applicable law, you may request access to, correction of, or deletion of personal information we hold about you. To make a request, contact us at Office@dfc-ltd.com.

Security

We maintain administrative, technical and organisational safeguards designed to protect personal information, including encryption of data in transit, role-based access controls and audit logging. No method of transmission or storage is completely secure.

Contact

Dealflow Capital Ltd.
2-1130 Hachey Ave
Coquitlam, British Columbia
V3K 2H4, Canada

Questions about this Privacy Policy can be sent to Office@dfc-ltd.com.