COCOS Inc. and its affiliates ("COCOS, we/us/our") are committed to safeguarding the privacy of our customers and users ("you/your") and the User Data you have entrusted to us. It is important for you to understand what User Data we will collect, how we will use it, and who may access it. User Data means information about an identifiable individual. It includes information that you have provided to us or was collected by us from other sources. It may include details such as your name and address, age and gender, personal financial records, identification numbers including your Social Insurance Number and personal references, to the extent permitted by local laws.

This Privacy Policy governs your use as a visitor and/or user to www.cocoscard.com and/or other websites managed by COCOS that reference the Privacy Policy (the "COCOS WebSites"). Please read the Privacy Policy carefully. By using, accessing, and/or visiting the COCOS WebSites, you accept and agree to the Privacy Policy. If you do not accept and agree to the Privacy Policy, you should immediately stop using, accessing, and/or visiting the COCOS WebSites.

Children’s Privacy. COCOS’s services are intended for general audiences and not for children under the age of 13. We do not knowingly collect personal information from children under the age of 13, and if we become aware of such collection, we will take reasonable steps to delete any such information as soon as practicable.

If you are an existing customer of ours, further details about how we use your User Data are set out in your customer contract with us. Further notices highlighting certain uses we wish to make of your User Data together with the ability to opt in or out of selected uses may also be provided when we collect User Data from you.

Our websites may contain links to other third-party websites. If you follow a link to any of those third-party websites, please note that they have their own privacy policies and that we do not accept any responsibility or liability for their policies or processing of your User Data. Please check these policies before you submit any User Data to such third-party websites.

This Privacy Policy covers:
(a) Data we may collect
(b) How we use your data
(c) Who we share your data with
(d) How we protect your data
(e) Your rights and communication preferences
(f) Cookies policy
(g) How we update this policy

(a) Data you provide (e.g., via contact forms)
(b) Records of correspondence
(c) Usage of our products/services
(d) Surveys you complete
(e) Promotions and contests
(f) Device/browser/location info
(g) Marketing preferences
(h) Cookies and tracking data
(i) SNS activity
(j) YouTube token access for Nexus (no personal data stored)

We use User Data based on:
- Consent
- Contract Performance
- Legal Obligations
- Legitimate Interests
- Legal Claims

Examples include:
(a) Service delivery and communication
(b) Sponsorships
(c) Product/service updates and marketing
(d) Service development and analysis
(e) Compliance and fraud monitoring
(f) Service/product updates
(g) Site optimization
(h) Business sales or reorganization
(i) Legal/regulatory obligations

We may tailor content, ads, and fraud detection using automated processing based on your usage and preferences. No biometric data is stored or shared.

We verify your identity using personal info or device-linked public key cryptography. COCOS does not access your biometric data directly. Failure to verify may result in account suspension.

Outside COCOS: Legal authorities, fraud prevention, or legal compliance
Within COCOS: Marketing, analytics, risk management
Business Transfers: During acquisitions or reorganizations
Third-Party Agents: For processing, analytics, and service provision under strict confidentiality terms

Users in the EEA may:
- Access, correct, or delete personal data
- Request data portability
- Object to or restrict processing
- Lodge complaints with their local supervisory authority
Email: [email protected]

Your COCOS Personal Information may be accessed by staff, suppliers, or others in, transferred to, and/or stored at a destination outside the European Economic Area (EEA), where data protection laws may differ. We safeguard all such data transfers as outlined in this Privacy Policy.

For transfers from the EEA to countries without European Commission adequacy decisions, we use appropriate legal safeguards such as the EU Commission-approved model contractual clauses or other legally approved measures.

If you live outside the EEA or California, we will endeavor to provide a similar level of data protection and control.

We use physical, electronic, and procedural measures to prevent unauthorized access, use, or disclosure of your data. Contracts with third-party service providers ensure shared data is protected and used only for specified service delivery.

While we apply industry-standard safeguards, absolute security over the Internet cannot be guaranteed. Information you provide is stored on secure servers. You are responsible for maintaining password confidentiality and adhering to any additional security instructions we provide.

We retain your personal data only as long as necessary for processing purposes or legal/regulatory obligations. When no longer needed, data will be anonymized or securely deleted. For example, transaction-related data may be held until claim periods expire.

We generally rely on legal grounds other than consent for processing. For Direct Marketing, we will obtain your consent if required. You may opt out of marketing communications or internal sharing of your data at any time.

Direct Marketing includes promotional content via email, mail, phone, or SMS, excluding essential updates about existing products or services.

We strive to maintain accurate personal information. Please inform us of any changes by using the contact methods provided in the "Contacting Us" section.

You may:
- Request access to, correction, or deletion of your data
- Withdraw consent
- Object to processing on legitimate interest grounds
- Request restrictions during disputes

We aim to respond to rights requests within one month, subject to legal limitations and balancing our interests.

If you have questions about this Privacy Policy or how your data is handled, please contact us through our support form or email our Data Protection Officer at [email protected].

Our use of cookies is described in our Cookies Policy.

As our services evolve, we may update this Privacy Policy and the Cookies Policy. Major changes will be clearly indicated on our site, and the modification date will be updated accordingly.