Privacy Notice USA

February 2024
Welcome to NALA INC (“NALA”, “we”,“our”, “us”)
This Privacy Notice describes how NALA collects, uses, discloses, and otherwise processes your personal information in connection with our services, including when you visit our website www.nala.com (the “Website”), our mobile application(s) (the “App”), contact our customer service agents, open our ads, receive or open our emails or text messages, or otherwise interact or communicate with us in relation to any of these services, or when you interact or use one of our products or services that link to this Privacy Notice , (all collectively referred to as the “Services”).
We reserve the right to change this Privacy Notice from time to time. When we make changes to this Privacy Notice, we will change the “Last Updated” date at the beginning of this Privacy Notice. If we make material changes to this Privacy Notice, we will notify you by email to your registered email address, by prominent posting on this website or our online services, or through other appropriate communication channels. All changes shall be effective from the date of publication unless otherwise provided.
REGION-SPECIFIC DISCLOSURES
We may choose or be required by law to provide different or additional disclosures relating to the processing of personal information about residents of certain countries, regions or states. Please refer below for disclosures that may be applicable to you:
The Service is controlled and operated from facilities in the United States and UnitedKingdom. NALA makes no representations that the Service is appropriate or available for use in other locations. Those who access or use the Service from other jurisdictions do so at their own volition and are entirely responsible for compliance with all applicable laws and regulations, including but not limited to export and import regulations. You may not use the Service if, and you represent and warrant that you will not use the Service if, you are a resident of a country embargoed by the United States or that has been designated by the United States government as a “terrorist supporting” country, or you are a foreign person or entity blocked or denied by the United States government. Unless otherwise explicitly stated, all materials found on theService are solely directed to individuals, companies, or other entities located in the United States.
1. What personal information do we collect from you?
We collect personal information about you in connection with your use of our Service. This collection includes information that you may provide in connection with the Service, information from third parties, and information that is collected automatically such as through the use of cookies and other technologies.
Information you give to us:
We may collect the following personal information from you when you use our Services—for example when you register for an account, when you transfer or receive money, or when you communicate with us. In such cases, we may ask you to provide us with one or more of the following pieces of information:

o Your full name
o Your residential address
o Your contact details (email address and your telephone number)
o Your date of birth
o Your social security number
o Your identification information, including a photo verification
o Your identity information including your image through a selfie verification
o Your payment information (bank, debit card or pre-paid card information including billing address, PAN and CVV details, the sender name as well as the sort code and account number)
o If you send high-value or high-volume transactions or as needed to comply with our anti-money laundering obligations under applicable law we may request additional commercial, personal and/or identification information.
o Account sign-in information, such as email address, username, and password.
o Communications you send to us (by telephone, email or otherwise), for example, to report a problem or to submit queries, concerns or comments regarding the Website, our service, or general comments.
Information  automatically collected:
When you use the Services, we may automatically collect and record certain information from your computer, web browser, and/or mobile device, including the following information, without limitation:

             - Device Technical information, including the Internet protocol(IP) address used to connect your computer to the Internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, operating system.
            - Information about your visit, including the full Uniform Resource Locators (URL) clickstream to, through and from the Website (including date and time); products you viewed or searched for; page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page and any phone number used to call our customer service number.
Information we receive from others:
         - Beneficiary Information.  If you are an individual who is the intended recipient of a money transfer (the “beneficiary”), the individual making the transfer will provide us with your name, phone number, bank account, and purpose of payment. We may also give you the ability to invite people you know to use the Services, including by importing your address book or manually entering their contact information. You are responsible for ensuring your sharing of this personal information with us is compliant with applicable laws. This may require you to get permission from the people you invite before you share their information.

         - Single Sign-On Account Login. We may also obtain information about you when you log in using single sign-on (“SSO”) through a third-party social network or authentication service, such as Google or Apple. We do this by using OAuth authentication, a secure mechanism to give NALA access to your account data without letting us know your password. We have access to certain information from those third parties in accordance with the authorization procedures determined by those third parties, including, for example, your username, password, name, email address, and profile picture.

       - Referrals. We may also get personal information from you about other prospective NALA users, such as through our referral program, or when an existing NALA user adds you to their list of contacts within the app. We process this personal information to help you and your contacts connect through our Services. If you want to remove personal information stored by us, follow any instructions in the Service or see Control Over Your Information below.

       - Social Media. When you interact with us through a social media site or third party service, such as when you like, follow, or share NALA content on Facebook, Twitter, Instagram, or similar sites, we may receive information from the social network, including your profile information, picture, user ID associated with your social media account, and any other information you permit the social network to share with third parties, The data we receive from these third-party sites is dependent upon that third party’s policies and your privacy settings on that third-party site. You should always review and, if necessary, adjust your privacy settings on third-party websites and services before linking or connecting them to our Services. If you make a comment or post other content on our Social Media pages, please be aware that you are providing information directly to the social media network subject to their Privacy Notice and terms of use. As with other third party sites, we have no control over and are not responsible for their privacy practices.

       - Service Providers and Business Partners. We are also working closely with third parties (including, for example, service providers, business partners, sub-contractors in technical, payment and delivery service providers, advertising networks, analytics providers, search information providers, credit reference agencies) and may receive information about you from them.

If we combine or associate information from other sources with your information that we collect through the Services, we will treat the combined information in accordance with this Privacy Notice, the Terms, and applicable law.
2. Access to contact list information
We may also collect and process your contact list information on your mobile device but only with your express permission.This information may include names, phone numbers, email addresses, images associated with the contacts etc.

This is to make it easier for the recipient data to be pre-filled and enable transactions to be processed faster and free of apparent errors.We shall only access your contact list with your explicit consent and only share applicable information with third parties solely for the purpose of processing the transaction.

We shall not send any information to your contacts or make use of any of the collected data for any other purpose apart from what is provided here.
3. How do we use your data?
We use your personal data for the following purposes:
4. Who does NALA share your information with and why?
In order to deliver our services, your personal data may also be transferred to the following third parties:
5. How long will we keep your data for?
We retain personal data about you for as long as necessary for the purposes set out in these Disclosures, unless a longer period is required under applicable law or is needed to resolve disputes or protect our legal rights.. This means that we will retain your personal data for as long as we have an active contract or business relationship with you, and after this, we will only keep your data for as long as is necessary for the purposes which it is stored and for legal/regulatory requirements. We will take reasonable measures to delete your personal information if you delete your account, however, you acknowledge that we will retain some information after you have closed, or we have deleted, your account with us where necessary to enable us to meet our legal/regulatory obligations or to exercise, defend, or establish our rights.

In some cases, we may be required to retain your personal data for a longer period where applicable laws or regulations require or allow us to do so. Where possible, we aim to anonymise the information or remove unnecessary identifiers from records that we may need to keep for longer periods beyond the specified retention period.

In case of any questions relating to data retention, please contact us at: privacy@nala.money.
6. How do we protect your information?
We have implemented, and will maintain current, reasonable physical, technical, and organizational security measures to protect your personal information from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. However, no security system is impenetrable, and we cannot guarantee the 100% security of our systems. In the event that any information under our control is compromised as a result of a breach of security, we will take reasonable steps to investigate the situation and, where appropriate, notify those individuals whose information may have been compromised and take other steps, in accordance with applicable laws and regulations. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our services, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.
7. How we use clickstream data
NALA may collect and use clickstream data to profile your behaviour on our website and to understand how you interact with our online presence. This data is collected through the use of web analytics software, and may include information about the websites and pages you visit, as well as the actions you take on those pages.

We use this data to improve our website and to better understand our users' needs and preferences. We may also use this data to personalise your experience on our website and to show you relevant content and offers.

We take the protection of your personal data seriously and have implemented appropriate technical and organisational measures to ensure that your data is collected, used, and stored in compliance with the General Data Protection Regulation (GDPR) and other relevant local legislation in our various countries of operation. We also ensure that your data is only used for legitimate business purposes and is not shared or sold to third parties without your consent.

You have the right to access, correct, and delete any personal data that we collect about you. If you wish to exercise any of these rights, please contact us at privacy@nala.money
8. What cookies and similar technologies do we use?
Please see our https://www.nala.com/cookies-policy for more information on why we use them and how you can better control their use through your browser settings and other tools.
9. Control Over Your Information
                        - Modifying Account Information. Once you have registered for a NALA account, you may update or correct your profile information at any time by accessing your profile page through the Site.

                        - Deactivating Your Account. We do not delete information about you upon deactivation of your account. Although your deactivated status is reflected promptly in our user databases, we may retain the information you submit for a variety of purposes including legal/regulatory, compliance, backups and archiving, prevention of fraud and abuse, and analytics. Upon deactivation, you will no longer receive emails from us and links to third party financial accounts, and Services will automatically terminate. If you have a money transfer transaction pending at the time you deactivate your account, your link to this service will terminate but your pending transfer will continue to completion.

                        - Email Communications. From time to time, we may send you emails regarding updates to our Service, notices about our company, or information about the Services we offer. If you wish to unsubscribe from such emails, simply click the “unsubscribe” link provided at the bottom of the email communications. Note that you cannot unsubscribe from certain service-related email communications (e.g., account verification, technical or legal notices).
10. Children’s Personal Information
Our websites and online services are not directed to, and we do not intend to, or knowingly, collect or solicit personal information from children under the age of 13. If you are under the age of 13, please do not use our website or online services or otherwise provide us with any personal information either directly or by other means. If a child under the age of 13 has provided personal information to us, we encourage the child’s parent or guardian to contact us to request we remove the personal information from our systems. If we learn that any personal information has been provided by a child under the age of 13, we will promptly delete that personal information.
11. Third Party Websites
Our websites and online services may include links to third-party websites, plug-ins and applications. Except where we post, link to, or expressly adopt or refer to this Privacy Notice, this Privacy Notice does not apply to, and we are not responsible for, any personal information practices of third-party websites and online services or the practices of other third parties. To learn about the personal information practices of third parties, please visit their respective privacy notices.
12. How can you contact NALA?
If you have questions regarding your privacy and rights, please let us know how we can help.
- Email: privacy@nala.money· 
- Post mail: International House, 64 Nile Street, London, N1 7SR
ADDITIONAL EUROPEAN ECONOMIC AREA, UNITED KINGDOM, AND SWITZERLAND PRIVACY DISCLOSURES
NALA maintains operations in the United Kingdom and may direct our Services to individuals located in the EEA, United Kingdom, and Switzerland, including through our Site (collectively, our “European Services”). The following disclosures apply to our personal data in connection with our European Services.

NALA is the data controller responsible for the processing of personal data in connection with our European Services. This means that we determine and are responsible for how your personal data is used.

Personal Data: When we use the term “personal data” in this section, we mean information relating to an identified or identifiable person.

Legal Bases for Processing

In connection with our European Services, we will only collect, use, share, or otherwise process your personal data in accordance with one of the below lawful bases:
Data Retention
We retain personal data about you for as long as is necessary for the purposes set out in these Disclosures, unless a longer period is required under applicable law or is needed to resolve disputes or protect our legal rights.The criteria used to determine the period for which personal data about you will be retained varies depending on the legal basis under which we process the personal data:
In all cases, in addition to the purposes and legal bases, we consider the amount, nature and sensitivity of the personal data as well as the potential risk of harm from unauthorized use or disclosure of your personal data.
Your Privacy Rights
In accordance with applicable privacy law, you may exercise the following rights in respect of your personal data that we hold:
You have the right to complain to a data protection authority about our collection and use of your personal information if you feel that we have not been complying with our obligations on data protection law. For more information, please contact the Information Commissioner’s Office (ICO) or your applicable local data protection authority. A list of European data protection authorities is available here: https://edpb.europa.eu/about-edpb/board/members_en.

You can exercise any of your rights by contacting us via the details in Section “How can you contact NALA”. Please note that we may need to verify your identity before complying with any of the above requests.

We respond to all requests we receive from users in accordance with applicable data protection laws. In some cases, we may reject requests for certain reasons (for example, if the request is unlawful or if it may infringe on trade secrets or intellectual property or the privacy of another user).

1. How do we send information outside of your country?

The personal data we collect may be transferred and stored in countries outside of the jurisdiction you are in where we and our third party service providers have operations. If you are located in the EEA, United Kingdom, or Switzerland, your personal data may be processed outside of those regions, including in the United States.

In the event of such a transfer, we ensure that: (i) the personal data is transferred to countries recognized as offering an equivalent level of protection; or (ii) the transfer is made pursuant to appropriate safeguards, such as standard contractual clauses adopted by the European Commission.

You may request further information on the measures used for international transfers at privacy@nala.money.
Electronic Fund Transfers (EFTs) and Account Balances. NALA partners with financial services software company Sila Inc. (“Sila”) and banking services provider Evolve Bank & Trust (“Evolve”), member FDIC, to offer you electronic fund transfers (“EFTs”). When you create a NALA Account, link a bank account, or initiate an EFT, you are authorizing us to share your identity and banking information with Sila and Evolve to support your account. You are also agreeing to the terms of Sila’s privacy policy, https://silamoney.com/privacy-policy/, Evolve’s privacy policy, https://www.getevolved.com/privacy-policy/, and Evolve’s communications consent and disclosure, https://silamoney.com/evolve-electronic-communications-consent-and-disclosure/ (the “Partner Terms”). It is your responsibility to make sure the data you provide us is accurate and complete, which is necessary for our partners to process EFTs on your behalf. The Partner Terms may be modified from time to time, and the governing versions are incorporated by reference into this Privacy Policy. Any term not defined in this section but defined in the Partner Terms assumes the meaning as defined in the Partner Terms. IT IS YOUR RESPONSIBILITY TO READ AND UNDERSTAND THE PARTNER TERMS BECAUSE THEY CONTAIN TERMS AND CONDITIONS CONCERNING YOUR NALA ACCOUNT, INCLUDING BUT NOT LIMITED TO USE OF YOUR PERSONAL INFORMATION.