Read how KYC2020 empowers
Canadian MSBs to stay FINTRAC-ready.

Privacy Policy

Home/Privacy Policy

Last Updated: 28-May-2025

KYC2020 | PRIVACY POLICY

This Privacy Policy outlines how KYC2020 (“we”, “our”, or “us”) collects, uses, maintains, and discloses information from individuals (“Users”) who visit, interact with, or use our website at https://kyc2020.com (the “Site”), as well as any related services, features, or content we provide.

At KYC2020, we treat privacy as an important part of our product and service design. Our goal is to comply with data protection laws such as GDPR and CCPA. KYC2020 holds the SOC 2 Type 2 certification, establishing rigorous standards for auditing, secure storage, and processing.

SOC 2 Type II

KYC2020 complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension, and the Swiss-U.S. DPF. We retain personal data only for as long as instructed by the Data Controller or as necessary to fulfil legal obligations.

Individuals in the EU, UK, and Switzerland with inquiries or complaints regarding our handling of personal data should first contact KYC2020 at: privacy@kyc2020.com.

For the purposes of applicable data regulation

I. KYC2020 is a Data Processor

When we process personal data on behalf of Users for AML/CTF services:

  • Processing data containing personal information of Users’ end-users.

II. KYC2020 is a Data Controller (Direct Collection)

When we collect information directly from you:

  • Individuals visiting the Site.
  • Business contacts, employees, vendors, and partners.

III. KYC2020 is a Data Controller (Public Sources)

When collecting public data for watchlists:

  • Sanctions, warnings, fitness & probity
  • Politically exposed persons (PEPs)
  • Adverse media
  • Corporate registry information

Information We Collect and Use

Job Applicants

DescriptionData CollectedPurposeLegal Basis
Contact & assess candidatesName, CV/Resumes, ReferencesEvaluate applicationConsent

Website Visitors

DescriptionData CollectedPurposeLegal Basis
Collect browsing data via cookiesPage views, IP address, device specsAnalyze traffic, improve UXConsent (Cookie Banner)

AML/CTF Screening Data

DescriptionData CollectedPurposeLegal Basis
Public data from official sourcesSanctions, PEPs, Adverse Media, Corporate RegistryBuild watchlists for compliance screeningLegal Obligation (AML/CTF)

GDPR Rights Applicability (Watchlist Database)

GDPR RightApplicability
Right of AccessYes (Subject to anti-tipping-off limitations)
Right to RectificationNot applicable (Data from official public sources)
Right to ErasureGenerally overridden by legal obligations

To exercise your rights per GDPR, please contact us at privacy@kyc2020.com.

Data Security

We implement appropriate technical and organizational measures to safeguard Users’ personal data. Sensitive data exchange happens over HTTPS/SSL secured channels.

Data Retention

We retain personal data only for as long as instructed by the Data Controller or as necessary to fulfil legal obligations.

Cookies

We use Necessary, Performance, and Targeting cookies. Users have the option of blocking cookies via our banner.

Contact Information

For questions or concerns, please contact us via email at:
privacy@kyc2020.com

KYC2020 has the discretion to update this privacy policy at any time. We encourage Users to frequently check this page for any changes.