1. Scope and controller
This notice applies to personal data processed through www.canopusbank.com, website-related email communications and pre-launch stakeholder engagement. It does not describe future banking customer processing, which will require separate and more detailed notices before services are offered.
For website privacy enquiries, contact privacy@canopusbank.com.
2. Applicable framework
Personal data protection in Seychelles is governed by the Data Protection Act 2023 and overseen by the Information Commission. We intend to apply the principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, retention control, security and accountability.
3. Personal data we may collect
Depending on how you interact with us, we may collect:
- identity and contact data, such as name, email address, organisation, role, country and telephone number;
- enquiry and correspondence data, including the content and history of communications;
- stakeholder classification, such as investor, partner, future customer, adviser, media or other contact;
- technical data ordinarily produced by web servers, such as IP address, browser, device, requested page, timestamp and security logs;
- preference data, including your essential cookie or browser-storage choice;
- due-diligence information only where a separate, appropriate process and notice has been established.
Please do not send passwords, private keys, full identity documents, payment credentials or unnecessary sensitive personal data through general website email channels.
4. Sources of data
We collect data directly from you, from your organisation or authorised representatives, from technical website logs, and from lawful public or professional sources where relevant to a legitimate pre-launch discussion. We do not purchase consumer marketing lists for this website.
5. Purposes and legal grounds
We may process personal data to:
- respond to enquiries and manage stakeholder communications;
- consider potential investor, partner, supplier or customer-research discussions;
- operate, secure, diagnose and improve the website;
- prevent fraud, impersonation, abuse and cyber threats;
- maintain records, manage legal risk and comply with applicable obligations;
- send requested updates or communications where you have consented or where otherwise lawful.
Depending on the context, processing may be based on consent, steps requested before a possible relationship, legitimate interests, legal obligation or the establishment and defence of legal rights. Where consent is relied upon, you may withdraw it without affecting earlier lawful processing.
7. International transfers
The project and its stakeholders are international. Personal data may therefore be accessed or processed outside Seychelles. Where this occurs, we will seek to use a lawful transfer basis and protections appropriate to the nature, destination and risk of the transfer.
8. Retention
We retain personal data only for as long as reasonably necessary for the relevant purpose, legal obligations, security, audit and dispute management. Typical pre-launch correspondence may be retained for the duration of the project and an appropriate period afterwards. Unsuccessful or inactive contact records should be reviewed and deleted or minimised when no longer needed.
9. Security
We use organisational and technical measures appropriate to the nature of the website data, including access control, least privilege, secure configuration, logging, backup and incident management. No internet system can be guaranteed absolutely secure.
If you believe your information or the website has been compromised, contact security@canopusbank.com.
10. Your rights
Subject to the Data Protection Act 2023 and applicable conditions, you may have rights to be informed, access personal data, request correction, request erasure or restriction, object to certain processing, withdraw consent, and complain to the Information Commission.
To exercise a right, email privacy@canopusbank.com. We may need to verify identity and clarify the request. We will not ask for more verification information than is reasonably necessary.
11. Communications and marketing
We will not treat a general website enquiry as unlimited permission to send marketing. Where updates are offered, communications should identify the sender and provide a practical way to opt out. Service, legal, security or transaction-specific communications may still be sent where necessary.
12. Children
This website is directed to business and institutional audiences and is not designed for children. We do not knowingly seek personal data from children through the website.
13. Changes to this notice
We may update this notice as the project, website, providers or legal requirements evolve. The effective date at the top identifies the current version. Material changes should be communicated appropriately.
14. Questions and complaints
Privacy questions may be sent to privacy@canopusbank.com. You may also have the right to contact the Seychelles Information Commission.