Privacy Policy

Effective 14 September 2026

EFT RAILS INC ("EFT Rails", "we", "us" or "our") is a British Columbia company building payment infrastructure. This Privacy Policy explains how we collect, use, disclose and protect personal information collected through our website and related communications.

Questions about this policy or our handling of personal information may be directed to our Privacy Officer at support@eftrails.com.

Our Terms of Service are also available.

Personal information we collect

Contact forms

When you contact us through our website, we collect your email address so that we can respond to you. You may also choose to provide your name, telephone number and other information in your message.

We may also record the page from which you submitted the form and technical information such as your IP address. We use this information to operate the form, prevent spam and automated submissions, investigate abuse and secure our systems.

Website visits

Our hosting and content-delivery infrastructure automatically processes standard technical information associated with requests to our website. This may include your IP address, the page or resource requested, the date and time of the request, and your browser's user-agent string.

We use this information to deliver, operate, troubleshoot and secure the website.

Cookies and tracking

We do not currently use advertising or behavioural-tracking cookies on this website.

We do not sell personal information or use personal information collected through this website to create advertising or marketing profiles.

Why we collect and use personal information

We collect and use personal information only for purposes that are reasonably appropriate in the circumstances, including:

• responding to enquiries and communicating with you;
• providing and administering our services;
• operating, maintaining and securing our website and systems;
• detecting and preventing spam, fraud, abuse and security incidents;
• maintaining appropriate records of enquiries and communications; and
• meeting legal, regulatory and compliance obligations that apply to us.

If we wish to use personal information for a materially different purpose, we will obtain consent where required by law.

Service providers and disclosure

We use service providers to operate our website and communications systems, including the hosting of our systems and the delivery of email and text messages.

Our service providers may process personal information on our behalf in order to provide these services.

Depending on the service and infrastructure involved, personal information may be processed or stored outside British Columbia or Canada. Information processed in another jurisdiction may be subject to the laws of that jurisdiction and may be accessible to courts, law-enforcement agencies or other governmental authorities in accordance with applicable law.

We do not sell personal information or disclose it to third parties for their own advertising or marketing purposes.

We may disclose personal information where required or permitted by law, including in response to valid legal process, or where reasonably necessary to protect our systems, users, rights or property.

Mobile numbers and text messaging

Where account access or verification by text message is available, you may provide us with a mobile telephone number. We use that number to send one-time verification codes and other messages necessary to establish, verify or recover access to your account.

No mobile numbers will be shared with third parties or affiliates for marketing or promotional purposes.

Text messaging originator opt-in data and consent will not be shared with any third parties.

Messages are delivered through a messaging service provider, which does not share end user phone numbers with third parties for marketing or promotional purposes.

Service providers that deliver messages on our behalf receive only the information necessary to deliver them, act on our instructions, and are not third parties for the purposes of the statements above.

We may retain records of your consent and verification messages for security, troubleshooting, fraud prevention and compliance purposes.

You may stop text messages by replying STOP. If you do so, we may be unable to send verification codes to that telephone number, which may prevent you from using text-message-based account setup or recovery. Other account-security or recovery methods may be available.

Message and data rates may apply. Message frequency varies. Reply HELP for help.

Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and for applicable legal, security, regulatory and compliance requirements.

As a general practice:

• contact-form enquiries and related correspondence may be retained for up to 24 months after our last interaction with you;
• routine website and server logs are generally retained for up to 90 days, although relevant records may be retained longer where necessary to investigate security incidents, fraud or abuse; and
• records relating to account verification, including text-message consent and verification records, may be retained for up to 24 months after the associated account relationship or verification activity ends.

We may retain information for longer where required or permitted by law, where necessary to establish, exercise or defend legal claims, or where applicable regulatory or compliance requirements require a longer retention period.

When personal information is no longer reasonably required, we will destroy, erase or anonymize it as appropriate.

Your privacy rights

Subject to applicable law, you may request access to personal information about you that is under our control. You may also ask how that information has been used and to whom it has been disclosed.

You may request correction of personal information that you believe is inaccurate or incomplete.

You may also ask us to delete personal information that we no longer require, although we may retain information where we are required or permitted to do so by law or for legitimate legal, security, regulatory or compliance purposes.

Requests should be made in writing to support@eftrails.com. We may need to verify your identity before responding to a request.

You may also withdraw consent to certain collections, uses or disclosures of your personal information, subject to legal or contractual restrictions and reasonable notice. We will explain the consequences of withdrawing consent where applicable.

Complaints

If you have a question or complaint about how we handle personal information, please contact our Privacy Officer first so that we can investigate and respond.

If you are not satisfied with our response, you may contact the Office of the Information and Privacy Commissioner for British Columbia.

Security

We use reasonable administrative, technical and physical safeguards appropriate to the nature and sensitivity of the personal information in our custody or control.

These measures include access controls, encryption of information in transit, restricted access to systems containing personal information, and security and access logging where appropriate.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Changes to this policy

We may update this Privacy Policy as our business, services and legal or regulatory obligations change.

When we make changes, we will update the effective date at the top of this page. Where appropriate, we may provide additional notice of material changes.

Contact

Privacy Officer EFT RAILS INC support@eftrails.com