Forest Pay Privacy Policy

1. Definitions

1.1 "Data Controller": Forest Pay entity responsible for your personal data, varying by jurisdiction:

1.2 "Forest Pay Partners": Third-party service providers including banks, payment processors, and clearing networks.

1.3 "Services": Payment processing, currency exchange, virtual cards, and acquiring services.

1.4 "Personal Information Export Standard Contract": Contract complying with China's data export regulations.

1.5 "Third-Party Beneficiary": Individuals entitled to rights under cross-border data transfer agreements.

2. Information We Collect

2.1 Information you provide:

• Registration details (name, phone, email)
• Payment information (recipient details, bank accounts)
• Compliance documents (for AML/KYC purposes)

2.2 Automated collection:

• Device information, IP addresses, and cookies

2.3 Transaction records:

• Amounts, currencies, exchange rates, beneficiary details

2.4 Third-party data:

• Fraud prevention and identity verification services

2.5 Communication records:

• Customer support interactions and surveys

3. Collection Methods

3.1 Direct collection through:

• Website/application usage
• Account registration (digital/paper forms)
• Customer communications

3.2 Automated technologies:

• Cookies and IP tracking (see Section 12)

4. Purposes of Processing

4.1 Account management and service delivery

4.2 Fraud prevention and regulatory compliance:

• AML/CTF screening
• Sanctions compliance

4.3 Service improvements and marketing:

• Customer surveys
• Product updates (opt-out available)

5. Data Sharing

5.1 No delegated processing to third parties

5.2 Limited sharing with:

• Regulatory authorities (when legally required)
• Forest Pay group companies
• Banking partners for payment processing
• Trusted service providers under confidentiality agreements

5.3 No data transfers except:

• During corporate restructuring
• With explicit consent

5.4 No public disclosures unless legally mandated

6. Data Storage

6.1 Security measures:

• Electronic storage with firewalls
• Access controls and antivirus protection
• Minimum 5-year retention for regulatory data

6.2 No absolute security guarantee for internet transmissions

7. Cross-Border Transfers

7.1 Data may be transferred to:

• United States
• Canada
• Hong Kong
• Mainland China

7.2 Chinese users' rights under Standard Contracts:

• 30-day opt-out period
• Right to request contract copies

8. Children's Privacy

8.1 No services targeted to minors (18 years)

8.2 Prompt deletion of accidentally collected child data

9. Your Rights

9.1 General rights:

• Data correction
• Deletion requests
• Access to information copies
• Processing restrictions

10. Jurisdiction-Specific Rights

10.1 California Residents:

• CCPA rights (access, deletion, opt-out)
• No data "sales" in past 12 months

10.2 PRC Residents:

• Access/correction via account portal
• Deletion rights (with exceptions)
• Account cancellation procedures
• Data portability options

11. Policy Updates

11.1 Notification of material changes:

• Website postings
• Email alerts (for significant changes)

12. Cookies & Tracking

12.1 Technologies used:

• Session cookies (temporary)
• Persistent cookies (analytics)
• Web beacons (campaign tracking)

12.2 Purposes:

• User authentication
• Service improvement
• Fraud prevention

13. Legal Provisions

13.1 Governing law: Hong Kong law

13.2 Arbitration:

• HKIAC-administered
• Seat: Hong Kong

14. Contact Information

For inquiries: noreply@forest-pay.com