{"id":2041,"date":"2025-10-10T06:53:19","date_gmt":"2025-10-10T06:53:19","guid":{"rendered":"https:\/\/otcandpartners.com\/?page_id=2041"},"modified":"2025-10-10T18:38:39","modified_gmt":"2025-10-10T18:38:39","slug":"privacy-policy-2","status":"publish","type":"page","link":"https:\/\/otcandpartners.com\/?page_id=2041","title":{"rendered":"Privacy &#038; Policy"},"content":{"rendered":"<div class=\"wpb-content-wrapper\"><p>[vc_row][vc_column css=&#8221;.vc_custom_1551758441950{padding-top: 112px !important;padding-bottom: 27px !important;}&#8221;][vc_row_inner][vc_column_inner ct_column_inner_class=&#8221;rm-padding-lg&#8221; css=&#8221;.vc_custom_1551756788335{padding-top: 0px !important;padding-right: 45px !important;padding-bottom: 0px !important;padding-left: 45px !important;}&#8221;][ct_heading text=&#8221;Privacy &amp; Policy&#8221; align_lg=&#8221;align-center&#8221; align_md=&#8221;align-center-md&#8221; align_sm=&#8221;align-center-sm&#8221; align_xs=&#8221;align-center-xs&#8221; font_size_sm=&#8221;24&#8243; font_size_xs=&#8221;24&#8243; font_weight=&#8221;&#8221; show_gap=&#8221;show&#8221; description_font_weight=&#8221;inherit&#8221; margin_bottom=&#8221;0&#8243;][vc_column_text css=&#8221;&#8221;]<\/p>\n<p><b>Effective Date:<\/b><span style=\"font-weight: 400;\"> 07 July 2025<\/span><\/p>\n<p><b>Last Reviewed<\/b><span style=\"font-weight: 400;\">:\u00a0 01 September 2025<\/span><\/p>\n<p><b>1. PURPOSE<\/b><\/p>\n<p><span style=\"font-weight: 400;\">This Privacy Policy (the \u201cPolicy\u201d) sets out the principles and procedures adopted by OTC &amp; Partners (\u201cOTC &amp; Partners\u201d, \u201cwe\u201d, \u201cus\u201d, or \u201cour\u201d) to ensure the proper handling of personal data (\u201cPersonal Data\u201d). The Policy applies to Personal Data that we collect, use, store, disclose, and protect when you:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">visit our website,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">interact with our team,<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">communicate with us through any channel,\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">engage with our legal services, or<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">use our onboarding application.\u00a0<\/span><\/li>\n<\/ul>\n<p><b>2. SCOPE<\/b><\/p>\n<p><span style=\"font-weight: 400;\">This Policy applies to all data referring to an identified or Identifiable Natural Person that is collected, received, stored, processed, or transmitted by OTC &amp; Partners in the course of its business operations and forms an integral part of our commitment to complying with the applicable data protection laws.\u00a0<\/span><\/p>\n<p><b>3. DEFINITIONS<\/b><\/p>\n<ul>\n<li style=\"list-style-type: none;\">\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Data Subject &#8211; <\/b><span style=\"font-weight: 400;\">The identified or Identifiable Natural Person to whom Personal Data relates. This includes, but is not limited to; visitors, clients, potential\u00a0 or partners.\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Identifiable Natural Person<\/b><span style=\"font-weight: 400;\"> &#8211; A natural living person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to his biological, physical, biometric, physiological, mental, genetic, economic, cultural or social identity.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Personal Data<\/b><span style=\"font-weight: 400;\"> &#8211; Any information referring to an identified or Identifiable Natural Person, this includes, but is not limited to; Identification documents (e.g., passports, national IDs); contact details (e.g., emails, phone numbers, addresses); and onboarding documents.\u00a0\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><b>Personal Data Breach<\/b><span style=\"font-weight: 400;\"> &#8211; A breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, Personal Data collected, received, transmitted, stored or otherwise processed. This includes, but is not limited to; unauthorized access by third parties or internal staff, accidental sending of data to the wrong recipient, loss or theft of devices or physical files containing Personal Data, or malware attacks, ransomware, or system intrusions affecting data integrity or availability.\u00a0<\/span><\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<ul>\n<li aria-level=\"1\"><b>Processing <\/b><span style=\"font-weight: 400;\">&#8211; Any operation performed on personal data which may include but is not limited to its collection, storage, use, transfer or deletion.<\/span><\/li>\n<\/ul>\n<p><b>4. DATA COLLECTION AND USE<\/b><\/p>\n<p><span style=\"font-weight: 400;\">4.1 We collect and process Personal Data only where the processing is lawful, fair, and necessary for one or more specific, explicit, and legitimate purposes; including, but not limited to:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Client Onboarding and Compliance;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Platform Access and Communication; or<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Identity verification (e.g., via tools like Sumsub)<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">4.2 We do not sell Personal Data under any circumstances. Data is not shared with third parties or used for any purpose outside the original scope, unless:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">The Data Subject has provided freely given, specific, informed, and unambiguous consent; or<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">The disclosure is otherwise permitted or required by applicable law, including for regulatory compliance, legitimate interests, or legal claims.<\/span><\/li>\n<\/ul>\n<p><b>5. DATA STORAGE AND SECURITY<\/b><\/p>\n<p><span style=\"font-weight: 400;\">We implement appropriate technical and organizational measures in order to safeguard personal data against any form of unauthorized access, alterations, loss or destruction which include, but are not limited to:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Encryption of Personal Data at rest and in transit;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Use of technical safeguards such as multi-factor authentication (MFA), secure access logs and intrusion detection systems;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Access control mechanisms based on roles, responsibilities and legitimate business needs;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Regular audits and reviews of data security practices; and<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"3\"><span style=\"font-weight: 400;\">Vetting and use of third-party service providers (such as Sumsub and Google Workspace) which implement security measures consistent with the applicable law and international standards.<\/span><\/li>\n<\/ul>\n<p><b>6. RETENTION PERIODS<\/b><\/p>\n<p><span style=\"font-weight: 400;\">6.1 We retain personal data only for as long as necessary for the purposes it was collected. Standard retention periods include:<\/span><\/p>\n<table>\n<tbody>\n<tr>\n<td><b>DATA TYPE<\/b><\/td>\n<td><b>RETENTION PERIOD<\/b><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Onboarding contracts<\/span><\/td>\n<td><span style=\"font-weight: 400;\">2 years after termination<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Identification Documents (e.g., KYC)<\/span><\/td>\n<td><span style=\"font-weight: 400;\">2 years after contract ends<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Job Applications<\/span><\/td>\n<td><span style=\"font-weight: 400;\">1 year from date of last contact<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Financial\/Tax Records<\/span><\/td>\n<td><span style=\"font-weight: 400;\">6 &#8211; 8 years (as per legal requirements)<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Communication Records<\/span><\/td>\n<td><span style=\"font-weight: 400;\">2 years (unless required longer by context)<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>&nbsp;<\/p>\n<p><span style=\"font-weight: 400;\">6.2 After the applicable retention period has expired, all Personal Data is either securely deleted, destroyed, or anonymized, ensuring that the data can no longer be accessed, reconstructed, or used to identify any individual.<\/span><\/p>\n<p><b>7. DATA ACCESS AND RIGHTS<\/b><\/p>\n<p><span style=\"font-weight: 400;\">7.1 We uphold the rights of Data Subjects and shall respond to all reasonable and lawful requests without undue delay and within one (1) month of receipt.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">a. Right of Access to Personal Data:<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Upon written request, a Data Subject has the right to obtain from OTC &amp; Partners, free of charge, a copy of the Personal Data undergoing processing in electronic form and any available information as to its source.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">b. Right to Rectification of Personal Data:<\/span><\/p>\n<p><span style=\"font-weight: 400;\">A Data Subject has the right to request the correction of inaccurate or otherwise outdated Personal Data in order to keep information truthful and current. We will ensure that the said data is rectified promptly upon receiving the valid request and any associated supporting documents as and when required.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">c. Right to Erasure of Personal Data:\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Upon request, a Data Subject has the right to require the firm to erase their Personal Data wherein:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">The Personal Data is no longer necessary for the purposes it was collected and\/or processed;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">A Data Subject has withdrawn consent to the processing where said consent was the legal basis for processing;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">The processing is unlawful or the erasure of Personal Data is required in order to comply with applicable laws and regulations; or<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">A Data Subject objects to the processing and there are no overriding legitimate grounds for us to continue processing.<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">d. Right to Transparency and Awareness of Data Use:<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Upon request, a Data Subject has the right to obtain written confirmation regarding:\u00a0<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Whether or not their Personal Data is being processed;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Purposes of such processing;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Categories of Personal Data involved; or<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Receiving party or category of the receiving party (including third parties or international organizations where applicable).<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">7.2 Such Requests by the Data Subject can be sent to: [<b>info@otcandpartners.com<\/b><\/span><span style=\"font-weight: 400;\">]<\/span><b>.\u00a0<\/b><\/p>\n<p><strong>8. PERSONAL DATA BREACHES<\/strong><\/p>\n<p><span style=\"font-weight: 400;\">In the event of a Personal Data Breach, we will take immediate and appropriate steps to:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Assess and contain the breach through identifying its nature, cause, scope and impact on Personal Data;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Mitigate any risks arising from the breach, including steps to protect and secure affected systems or data in order to prevent further unauthorized access;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Maintain a register of breaches which documents relevant details regarding the breach and any remedial actions taken; and<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Notify affected Data Subjects, where applicable and without undue delay.<\/span><\/li>\n<\/ul>\n<p><b>9. POLICY REVIEWS<\/b><\/p>\n<p><span style=\"font-weight: 400;\">This policy is reviewed annually and updated as needed to reflect changes in regulations or operational practices. Details of which are highlighted at the top of this document.<\/span><\/p>\n<p><b>Contact:<\/b><\/p>\n<p><span style=\"font-weight: 400;\">For questions or requests, please contact <\/span><b>[<\/b><b>info@otcandpartners.com<\/b><b>]. <\/b>[\/vc_column_text][\/vc_column_inner][\/vc_row_inner][\/vc_column][\/vc_row][vc_row][vc_column][\/vc_column][\/vc_row]<\/p>\n<\/div>","protected":false},"excerpt":{"rendered":"<p>[vc_row][vc_column css=&#8221;.vc_custom_1551758441950{padding-top: 112px !important;padding-bottom: 27px !important;}&#8221;][vc_row_inner][vc_column_inner ct_column_inner_class=&#8221;rm-padding-lg&#8221; css=&#8221;.vc_custom_1551756788335{padding-top: 0px !important;padding-right: 45px !important;padding-bottom: 0px !important;padding-left: 45px !important;}&#8221;][ct_heading text=&#8221;Privacy &amp; Policy&#8221; align_lg=&#8221;align-center&#8221; align_md=&#8221;align-center-md&#8221; align_sm=&#8221;align-center-sm&#8221; align_xs=&#8221;align-center-xs&#8221; font_size_sm=&#8221;24&#8243; font_size_xs=&#8221;24&#8243; font_weight=&#8221;&#8221; show_gap=&#8221;show&#8221; description_font_weight=&#8221;inherit&#8221; margin_bottom=&#8221;0&#8243;][vc_column_text css=&#8221;&#8221;] Effective Date: 07 July 2025 Last Reviewed:\u00a0 01 September 2025 1. PURPOSE This Privacy Policy (the \u201cPolicy\u201d) sets out the principles and procedures adopted by [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-2041","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/otcandpartners.com\/index.php?rest_route=\/wp\/v2\/pages\/2041","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/otcandpartners.com\/index.php?rest_route=\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/otcandpartners.com\/index.php?rest_route=\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/otcandpartners.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/otcandpartners.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2041"}],"version-history":[{"count":3,"href":"https:\/\/otcandpartners.com\/index.php?rest_route=\/wp\/v2\/pages\/2041\/revisions"}],"predecessor-version":[{"id":2116,"href":"https:\/\/otcandpartners.com\/index.php?rest_route=\/wp\/v2\/pages\/2041\/revisions\/2116"}],"wp:attachment":[{"href":"https:\/\/otcandpartners.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2041"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}