Privacy Policy

1. Introduction

Quickstop and its affiliates (“Quickstop”, “we”, “our”, or “us”) are committed to protecting the privacy and security of personal information entrusted to us by our customers, website visitors, and business partners. We operate financial services businesses in multiple jurisdictions and coordinate privacy governance through CRNCY Group.

This Privacy Policy explains how personal information is collected, used, stored, and protected when individuals interact with Quickstop services, including our websites, financial products, customer support channels, and payment platforms. By using our services, you acknowledge that your personal information will be handled as described in this policy.

2. Who We Are & Scope

This policy applies to Quickstop, its affiliates, subsidiaries, successors, and related entities operating under the Quickstop brand in jurisdictions including Belize, Barbados, and Panama. A current list of relevant legal entities is available upon request from the CRNCY Group Privacy Office.

Where local laws impose additional requirements, we comply with those requirements.

3. Information We Collect

We collect personal information necessary to provide our services, operate our business, and comply with regulatory obligations. The information we collect includes:

Information you provide: full name; date of birth; residential address; telephone number; email address; government-issued identification numbers; employment or income information; loan application information; and customer account details.
Payment information: payments made through our platforms are processed by secure third-party payment providers that comply with the Payment Card Industry Data Security Standard (PCI DSS). Quickstop does not store payment card numbers or sensitive authentication data. We receive only limited transaction details needed to confirm and record payments (e.g., transaction status or truncated card details).
Information collected automatically: IP address; device and browser information; website usage data; and cookies or similar technologies when you interact with our digital services.

4. How We Use Personal Information

Processing and servicing applications for financial products and transactions
Verifying identity and conducting Know-Your-Customer (KYC) and anti-money laundering (AML) checks
Preventing, detecting, and investigating fraud and other financial crimes
Managing customer accounts and providing support
Processing payments through authorized payment providers
Improving our services, products, and digital platforms (including analytics and service quality)
Complying with legal, regulatory, and reporting obligations

We only use personal information where necessary to provide our services or meet regulatory requirements.

5. Legal Bases for Processing

Depending on the activity and the jurisdiction, we rely on one or more of the following legal bases:

Performance of a contract with the customer (e.g., to provide a loan or process a payment)
Compliance with legal and regulatory obligations (e.g., AML/CTF and financial regulations)
Legitimate interests (e.g., fraud prevention, network and information security, improving our services)
Consent, where applicable (e.g., certain marketing or cookies)

6. Sharing & Disclosure of Personal Information

We do not sell personal information. We share personal information only as necessary with trusted third parties, subject to appropriate confidentiality and security obligations, including:

Payment processing providers
Financial institutions or banking partners
Identity verification and fraud prevention services
Technology and cloud service providers
Professional advisors (e.g., auditors, legal counsel, compliance consultants)
Regulatory authorities and law enforcement where required by law

7. Third-Party Payment Processing

Payment information entered on payment pages is processed directly by our payment providers in accordance with PCI DSS. Quickstop does not have access to full card numbers or sensitive authentication data. Your use of these services may also be subject to the payment provider’s own terms and privacy policy.

8. Data Security

We implement technical, administrative, and organizational safeguards designed to protect personal information from unauthorized access, loss, misuse, or disclosure. These controls may include access controls and identity management, encryption of sensitive information, secure network architecture and monitoring, logging of system activity, and staff confidentiality obligations and security training. Our security practices are aligned with recognized frameworks such as the NIST Cybersecurity Framework.

9. Cookies & Similar Technologies

Our websites use cookies and similar technologies to improve functionality and understand how visitors interact with our services. Depending on your location, we may rely on consent for non-essential cookies. You can manage cookie preferences via your browser settings or in our cookie banner where available.

Types of cookies we may use include: strictly necessary (security and session management), functional (remembering preferences), performance/analytics (understanding usage and improving services), and advertising/marketing (where permitted by law). Retention periods vary by cookie type and purpose. Where we use third-party analytics, those providers may set their own cookies subject to their privacy notices.

10. Data Retention

We retain personal information only for as long as necessary to provide services, comply with legal and regulatory obligations, meet recordkeeping requirements, and resolve disputes. As a guide: (a) customer and transaction records are typically retained 5–7 years after the end of the relationship; and (b) KYC/AML records are typically retained at least 5 years after account closure or the completion of a transaction, unless a longer period is required by law. We maintain an internal retention schedule that we apply to the information we hold.

11. International Data Transfers

We may use technology or cloud service providers that process personal information outside the country where it was collected. When we do so, we take appropriate steps to protect personal information, such as using contractual safeguards (for example, standard contractual clauses where applicable), limiting access on a need-to-know basis, and applying encryption and other security controls.

12. Your Privacy Rights

Depending on your location, you may have rights to: (i) request access to personal information we hold about you; (ii) request correction of inaccurate or incomplete information; (iii) request deletion where legally permissible; (iv) object to or restrict certain processing; and (v) withdraw consent where processing is based on consent. These rights may be limited where we must retain information to comply with legal or regulatory obligations or to prevent fraud and financial crime.

13. How to Submit a Data Subject Access Request (DSAR)

To exercise your rights, contact the CRNCY Group Privacy Office at [email protected]. Please provide sufficient information to verify your identity and to help us locate the relevant records. We may request additional verification to protect your privacy and prevent unauthorized disclosure. Once verified, we will respond without undue delay and generally within 30 calendar days, or as required by applicable law. Where requests are complex or numerous, we may extend this period and will inform you of any extension and the reasons for it.

If you are not satisfied with our response, you may have the right to lodge a complaint with your local data protection authority. We can provide contact details upon request.

14. Children’s Privacy

Our services are intended for individuals aged 18 and over. We do not knowingly collect personal information from children. If we become aware that information has been collected from a child, we will take appropriate steps to delete it and, if necessary, close the related account.

15. Automated Decision-Making

Where we use automated processes to support decisions related to our services (for example, to help assess eligibility), such processing will include appropriate safeguards. Where required by law, you may request human review of a decision, express your point of view, and contest the decision.

16. Changes to This Privacy Policy

We may update this policy to reflect changes in our services, legal requirements, or regulatory obligations. The most current version will be posted on our website with the updated effective date. Continued use of our services after an update constitutes acceptance of the revised policy.

17. Contact Us

Privacy inquiries and Data Subject Requests are managed through CRNCY Group, which coordinates privacy governance for Quickstop and its affiliates. CRNCY Group serves as the central point of contact for privacy governance and data protection matters relating to Quickstop and its affiliates.

Email: [email protected]

Corporate Website: https://crncy-group.com/our-companies/