Privacy Policy

Last Updated: January 2024

1. Introduction

IBAN Verify ("Company," "we," "us," "our," or "Service") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

IBAN Verify is a global account validation company serving clients in the European Union, United States of America, and internationally. We provide bank account verification, IBAN validation, BIC/SWIFT code lookup, routing number validation, and other financial account validation services.

2. Information We Collect

2.1 Personal Data

Account information (name, email, phone, company name, business address)
Billing information (payment method, invoice details)
Usage data (API calls, validation queries, transaction history)
Device information (IP address, browser type, operating system)
Communication records (emails, support tickets, chat logs)

2.2 Financial Account Information

IBANs, bank account numbers, and routing numbers (for validation purposes only)
Payment method details (credit card, bank account information)
Transaction history and billing records

2.3 Cookies and Tracking Technologies

We use cookies, web beacons, and similar technologies to enhance your experience, remember your preferences, and analyze site usage. You can control cookie preferences through your browser settings.

3. How We Use Your Information

We use collected information to:

Provide, maintain, and improve our services
Process subscriptions, payments, and billing
Verify accounts and prevent fraud
Communicate service updates, security alerts, and support messages
Comply with legal obligations and regulations
Analyze usage patterns and improve user experience
Send marketing communications (with your consent)
Respond to inquiries and provide customer support

4. Legal Basis for Processing (GDPR)

Under GDPR, we process your personal data based on:

Contract Performance: Processing necessary to provide services you've contracted for
Legal Obligation: Compliance with EU, UK, and US financial regulations
Legitimate Interest: Fraud prevention, security, and service improvement
Consent: Marketing communications and optional features (with explicit opt-in)

5. Data Retention

We retain personal data for as long as necessary to provide services, comply with legal obligations, resolve disputes, and enforce agreements. Typically:

Account data: Duration of account + 7 years (for regulatory compliance)
Transaction records: 7 years (financial regulatory requirements)
Marketing data: Until unsubscribe or 2 years of inactivity
Support tickets: 2 years after resolution

6. Data Sharing and Disclosure

6.1 Third-Party Service Providers

We may share data with service providers who assist with hosting, payment processing, analytics, and customer support. All third parties are contractually obligated to protect your data.

6.2 Legal Requirements

We may disclose information when required by law, court order, government request, or to protect our rights and safety.

6.3 Business Transfers

If IBAN Verify is acquired, merges with another company, or sells assets, your data may be transferred as part of that transaction. We will notify you of any such change.

6.4 Data NOT Shared

We do NOT sell, rent, or trade your personal information to third parties for marketing purposes.

7. International Data Transfers

Since we operate globally, your data may be transferred to, stored in, and processed in countries outside your country of residence, including the United States. These countries may have different data protection laws.

For transfers from the EU to the US, we rely on:

Standard Contractual Clauses (SCCs) approved by the EU Commission
Data Processing Agreements (DPAs) compliant with GDPR
Adequacy Decisions (if applicable)

8. Your Privacy Rights

8.1 GDPR Rights (EU and UK Residents)

Right to Access: Request a copy of your personal data
Right to Rectification: Correct inaccurate information
Right to Erasure: Request deletion of your data ("right to be forgotten")
Right to Restrict Processing: Limit how we use your data
Right to Data Portability: Receive your data in a structured format
Right to Object: Opt-out of marketing and certain processing
Right to Lodge a Complaint: Contact your data protection authority

8.2 California Privacy Rights (CCPA/CPRA)

California residents have the right to know, delete, and opt-out of the sale of personal information. Please submit requests via our contact form.

8.3 How to Exercise Your Rights

To exercise any of these rights, please contact us at [email protected] or use our contact form. We will respond within 30 days (or as required by law).

9. Data Security

We implement industry-standard security measures to protect your data, including:

SSL/TLS encryption for data in transit
AES-256 encryption for data at rest
Regular security audits and penetration testing
Access controls and role-based permissions
Multi-factor authentication for accounts
Compliance with ISO 27001 and SOC 2 standards

While we strive to protect your information, no security system is impenetrable. We are not responsible for unauthorized access due to circumstances beyond our control.

10. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect data from children. If we become aware of such collection, we will promptly delete it.

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for their privacy practices. Please review their privacy policies before providing personal information.

12. Cookies and Tracking

Types of Cookies We Use:

Essential: Required for site functionality
Analytics: Help us understand user behavior (Google Analytics)
Preference: Remember your settings and preferences
Marketing: Enable targeted advertising (with consent)

13. Complaint and Dispute Resolution

If you have concerns about our privacy practices, please contact us first. If we cannot resolve the issue, EU residents can lodge a complaint with their data protection authority:

EU: Contact your national data protection authority
UK: Information Commissioner's Office (ICO)
USA: Contact your state attorney general or FTC

14. Contact Us

For privacy-related inquiries, please contact:

IBAN Verify - Privacy Team
Email: [email protected]
Website: www.ibanverify.com
Contact Form

15. Changes to This Policy

We may update this Privacy Policy periodically. The "Last Updated" date at the top indicates the most recent revision. Significant changes will be communicated via email or prominent notice on our website.