This policy is being finalized. Jurisdiction-specific details — the exact data subject rights, cross-border transfer mechanisms, breach notification deadlines and retention periods that apply — are still being confirmed as we complete our regulatory review. Everything described on this page reflects how we handle personal information today.

One Prime Limited (“One Prime”, “we”, “us”) is committed to protecting the personal information of visitors to this website, our business customers (Merchants) and their End Users. This policy explains what information we collect, why we collect it, who we share it with, and how we protect it.

How this policy is organized

We handle personal information in two distinct contexts. Because the amount of information involved differs substantially, this policy addresses them separately.

Read this policy together with our User Data Policy and Terms of Service.

Part 1 — Visitors to this website

1.1 Cookies and analytics

• This corporate website does not use cookies.
• This corporate website has no analytics, advertising or behavioural tracking of any kind (including Google Analytics).
• Simply browsing this website therefore does not give us information that identifies you.

1.2 Contact form

If you submit the contact form, we collect:

• We use this information only to respond to your enquiry and to follow up on it.
• We do not add you to marketing mailing lists without your consent.
• The form includes a field that is hidden from ordinary visitors, used to detect automated submissions. Submissions that complete it are treated as automated.

Where form submissions go

Your enquiry reaches us through the following processors:

• Amazon Web Services (AWS) — serverless processing that receives the submission and delivers it to our team by email. Processing records are retained in AWS logging services.

1.3 Third-party requests

• This website loads no fonts, scripts, stylesheets or images from third-party servers. All assets, including our typeface, are served from our own infrastructure.
• Viewing this website therefore does not disclose your IP address to any third party on our behalf.

1.4 Server access logs

• Access logging is not currently enabled on the infrastructure serving this website.

Part 2 — Merchants and End Users of the Service

2.1 Information we may collect

Personal information is any information that can identify an individual, directly or indirectly. Depending on your relationship with us, this may include:

2.2 How we use this information

• To provide and operate the Services, including processing deposits, performing stablecoin conversion and delivering settlement.
• To verify identity and meet legal, regulatory and compliance obligations (see our AML / KYC Policy).
• To contact you about your account, the Services, potential issues or security alerts, and to respond to your enquiries.
• To detect, prevent and investigate fraud, abuse and other prohibited activity.
• To maintain, improve and develop our websites, products and Services.

We do not use personal information beyond these purposes. If we add a purpose, we will give notice or obtain consent as required by law.

2.3 Sharing your information

We may share personal information with:

• service providers acting on our behalf, including our institutional Custody Provider and collection / payment partners, to the extent needed to operate the Service;
• banks and financial-infrastructure providers involved in processing transactions; and
• authorities, regulators or law enforcement where required by law or to prevent unlawful activity.

We do not sell personal information.

2.4 How long we retain information

• Retention periods depend on the nature and type of the information and on legal and regulatory requirements in the jurisdictions where you and your End Users are located (for example, record-keeping obligations under anti-money-laundering rules).
• We delete or anonymize personal information once it is no longer needed for a legitimate business or legal purpose.

Applies to both

3.1 Security

• We apply organizational and technical measures designed to protect personal information against unauthorized access, loss, destruction, alteration or disclosure, and review those measures periodically.
• Access to personal information is limited to personnel and processors who need it to do their work.

3.2 International transfers

• One Prime Limited is registered in the British Virgin Islands and works with processors located in several countries. Personal information may therefore be transferred outside the country in which it was collected.
• Where we transfer personal information across borders, we take steps intended to ensure an appropriate level of protection.

3.3 Your rights

• Subject to applicable law, you may have rights to access, correct, delete or restrict the use of your personal information, and to object to certain processing.
• To exercise any right, contact us at support@oneprime-global.com. We will verify your identity before responding and will act in accordance with applicable law.

3.4 Children

• The Service is offered to businesses and is not intended for use by minors.
• We do not knowingly collect personal information from minors. If we learn that we have, we will delete it as required by law.

3.5 Data breaches

• If personal information is lost, disclosed or altered without authorization, we will act to limit the impact, investigate the cause and, where required by law, notify the relevant authorities and the individuals affected.

3.6 Automated decision-making

• We may use automated checks as part of fraud detection and compliance screening.
• Where a transaction would be declined solely on the basis of an automated check, you may contact us to request human review.

3.7 Changes to this policy

• We may update this policy from time to time. We will announce material changes on this website or by other appropriate means, and revise the “Last updated” date above.

3.8 Contact

For privacy questions or requests, contact One Prime Limited at support@oneprime-global.com.