Who We Are
QuickTransfer is powered by Belmoney S.A., an authorized payment institution supervised by the National Bank of Belgium (NBB), registered at Avenue Louise 54, 1050 Ixelles, Belgium (company number 0540.745.997). Belmoney is the data controller for all personal data collected through our Services.
What Data We Collect
We collect the following categories of personal data: • Identity data: full name, date of birth, nationality, government-issued ID (passport / national ID), selfie video for liveness check • Contact data: email address, phone number, postal address • Financial data: bank account / IBAN, card data tokenised by our PCI-DSS-certified payment processor (we never store full card numbers), transaction history, source of funds, beneficiary details • Technical data: IP address, browser type, device identifiers (iOS / Android device ID), app version, push-notification token, app crash and diagnostic logs • KYC / AML data: identity verification results, document images, liveness-check outcomes, sanctions / PEP / adverse-media screening results • Mobile-specific data: biometric authentication is performed locally on your device (Face ID / Touch ID / Android biometrics) — biometric templates never leave the device and are not transmitted to our servers
How We Use Your Data
We use your personal data to: • Provide and operate our money transfer services • Verify your identity and comply with KYC/AML regulations • Process and execute your transactions • Communicate with you about your account and transfers • Detect and prevent fraud, money laundering, and other illegal activities • Comply with legal and regulatory obligations • Improve and develop our services
Legal Basis for Processing
We process your personal data on the following legal bases: • Contract performance: to provide the services you have requested • Legal obligation: to comply with AML/CFT, PSD2, and other applicable laws • Legitimate interests: to prevent fraud and improve our services • Consent: where we have obtained your explicit consent (e.g., marketing)
Data Sharing
We may share your data with: • Belmoney's network of payout partners and agents to execute transfers • Identity verification providers (Sumsub) to complete KYC and liveness checks • Payment processors (PayCross / BeGateway) and card networks for funding transactions • Push notification gateways (Apple Push Notification Service, Firebase Cloud Messaging) — used to deliver transaction status alerts only • Cloud infrastructure providers (Render, Vercel, MongoDB Atlas, Upstash Redis) hosting our application within the EEA or under EU SCCs • Regulatory authorities, law enforcement, and courts as required by law We do not sell your personal data to third parties. We do not use your data for advertising or share it with advertising networks.
International Transfers
Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When this occurs, we ensure appropriate safeguards are in place, such as EU Standard Contractual Clauses (SCCs), to protect your data in accordance with GDPR.
Data Retention
We retain your personal data for as long as necessary to provide our services and comply with legal obligations. Under AML regulations, transaction records and identity verification data are typically retained for a minimum of 5 years after the end of the business relationship.
Your Rights
Under GDPR, you have the following rights regarding your personal data: • Right of access: obtain a copy of your personal data • Right to rectification: correct inaccurate or incomplete data • Right to erasure: request deletion (subject to legal obligations) • Right to restrict processing: limit how we use your data • Right to data portability: receive your data in a structured format • Right to object: object to processing based on legitimate interests • Right to withdraw consent: where processing is based on consent To exercise your rights, contact us at support@quicktransfer.world. You may also request account deletion via the in-app "Delete Account" option or by following the instructions at /delete-account.
Cookies
We use cookies and similar technologies to operate our web services, remember your preferences, and analyse usage. You can manage cookie preferences through your browser settings. Essential cookies required for the service to function cannot be disabled.
Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or damage. These include: • TLS 1.2+ encryption for all data in transit between your device, our servers, and partner systems • Authentication tokens stored in HttpOnly, Secure, SameSite cookies (web) and the operating system Keychain (mobile) • Short-lived access tokens with rotating refresh-token sessions tracked server-side, allowing instant revocation of compromised sessions • Rate-limiting and account-lockout on authentication endpoints • HMAC verification on all third-party webhooks (KYC, payments) • Encryption-at-rest for all stored personal data • Periodic security reviews and dependency vulnerability scanning • Strict role-based access controls for our internal team However, no method of transmission over the Internet is 100% secure. If you suspect any security incident involving your account, contact us immediately at support@quicktransfer.world.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of material changes via email or through our app. Continued use of the Services after notice constitutes acceptance.
Contact Us
For any questions about this Privacy Policy or your personal data, contact: Data Protection Officer Belmoney S.A. Avenue Louise 54, 1050 Ixelles, Belgium Email: support@quicktransfer.world You also have the right to lodge a complaint with the Belgian Data Protection Authority (APD/GBA) at www.dataprotectionauthority.be.
Belmoney S.A. · Avenue Louise 54, 1050 Ixelles, Belgium · GDPR Compliant · NBB Authorized