Privacy Policy

This Policy explains what personal data Fenri Cards collects when you use the Platform, why we collect it, and what rights you have.

1. Data we collect

You give us: your email address, your password (stored only as a cryptographic hash), and — where identity verification is required — your name, date of birth, country, address and identity document.

You generate by using the Platform: top-ups, invoices, Balance movements, Card purchases and rentals, and Card transaction records received from the issuer.

We collect automatically: IP address, browser and device information, timestamps of sign-in and of sensitive actions such as viewing Card credentials.

2. Why we use it

2.1. To create and operate your Account and to provide the Platform.

2.2. To process payments, maintain your Balance, and keep accurate financial records.

2.3. To detect and prevent fraud, abuse and unauthorised access.

2.4. To meet legal obligations, including anti-money-laundering and sanctions requirements.

2.5. To respond to your support requests.

We do not sell personal data, and we do not use it for advertising.

3. Legal bases

We rely on performance of our contract with you (operating your Account), our legal obligations (financial crime and record-keeping rules), and our legitimate interests (security, fraud prevention and service improvement).

4. Who we share it with

4.1. Card issuers and payment partners, to the extent needed to issue and operate Cards.

4.2. Service providers that host our infrastructure and send our email, under contract and only on our instructions.

4.3. Authorities and regulators, where we are legally required to disclose.

4.4. We do not share identity documents except where required under 4.1 or 4.3.

5. How we protect it

5.1. Card credentials and identity data are encrypted at rest. Access to decrypted values is limited to the specific action that requires it, and each access is recorded.

5.2. Passwords are stored only as salted hashes and cannot be recovered by us or by our staff.

5.3. Access to production systems is restricted and logged.

6. How long we keep it

6.1. Account and transaction records are retained for as long as your Account is open and afterwards for the period required by financial record-keeping law.

6.2. Identity verification records are retained for the period required by anti-money-laundering law.

6.3. Technical logs are retained for a shorter period appropriate to security investigation.

7. Your rights

Depending on where you live, you may have the right to access the personal data we hold about you, to correct it, to request its deletion, to object to or restrict certain processing, and to receive it in a portable format. Some of these rights are limited where we are legally required to retain data.

Requests may be sent to support@fenricards.com. We may ask you to verify your identity before acting on a request.

8. International transfers

Where personal data is transferred outside your country, we use providers that offer an adequate level of protection and appropriate safeguards.

9. Cookies

We use cookies that are strictly necessary to keep you signed in and to protect the Platform. We do not use advertising or third-party tracking cookies.

10. Changes

We may update this Policy. The current version is always published on the Platform, and material changes are announced before they take effect.

11. Contact

Questions about this Policy may be sent to support@fenricards.com.