Privacy

Last updated: 16 July 2026

Your privacy is important to us. It is the policy of ZooFi Labs Limited, a company incorporated in Hong Kong ("PingBusiness", "we", "us"), to respect your privacy and comply with applicable law and regulation regarding any personal information we may collect about you across our website, dashboard, checkout pages, and related services (the "Services").

PingBusiness is a platform that lets sellers of digital products ("Clients") accept payments from their customers ("Buyers") and receive settlement in stablecoins. We are the platform operator — we are not the seller of the products offered by Clients.

Information we collect

Information you provide to us:

Account details — name, email, phone number, and business or company information (for company accounts: the company's legal name, registration number, and tax details);
Identity verification details — government-issued ID, a selfie for verification, date of birth, and address;
Tax information — your tax residency self-certification and tax identification number;
Settlement details — your wallet address and settlement preferences (or bank details if you choose a fiat option).

Information collected automatically: log and device data such as IP address, browser type, pages visited, and cookies.

Buyers: when you purchase from a Client through our checkout, we and our payment partners process your name, email, billing country, payment details (card numbers are handled by our licensed payment partner, not stored by us), and the transaction details. Please also review the privacy policy of the Client you purchase from.

How we use your information

We only collect and use your personal information where we have a legitimate reason to do so, and only as reasonably necessary to:

provide and operate the Services, including processing payments, settlements, and refunds;
verify your identity and review your account before and during your use of the Services;
carry out sanctions screening, due diligence, and know-your-customer checks, at onboarding and on an ongoing basis, including screening of wallet addresses using blockchain analytics;
collect tax information and, where required by law, report it to the Hong Kong Inland Revenue Department for exchange with tax authorities in other jurisdictions;
prevent fraud and monitor transactions for suspicious activity;
communicate with you about the Services, and (with the ability to opt out at any time) tell you about our own products and features;
comply with our legal obligations and enforce our terms.

We do not sell your personal information. Potential screening matches and account declines are reviewed by our staff — they are not decided by machines alone.

We share personal information only with:

our payment partners and their banking partners, to process fiat payments and handle disputes;
our settlement partner, a money services business registered with FINTRAC in Canada, to convert funds and effect stablecoin settlement (including information required under Canadian law for virtual-currency transfers);
compliance providers that perform identity verification, sanctions and PEP screening, and blockchain analytics on our behalf;
service providers such as cloud hosting and customer-support vendors acting under our instructions;
regulators, tax authorities, courts, and law enforcement, where required or permitted by law;
a buyer or successor if our business or assets are acquired.

Please note: settlement transactions are recorded on public blockchains. Wallet addresses and on-chain transaction amounts are public by design and cannot be deleted by us.

International transfers

Depending on the services used, personal information may be stored and processed in Hong Kong, Canada, or where our partners and providers maintain facilities. Whenever we transfer your information internationally, we do so in accordance with applicable law and protect it to the standards of this policy, using appropriate safeguards (such as standard contractual clauses for EEA/UK data).

How long we keep it

We keep personal information only as long as needed. Because we are subject to anti-money-laundering and tax rules, identity verification, screening, tax, and transaction records are kept for at least 6 years after your relationship with us ends — we cannot delete these earlier, even on request. Other account information is deleted or anonymized when no longer required.

Security

We protect your personal information using measures including encryption, access controls, and segregated storage for identity documents. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security. You are responsible for keeping your password secure.

Your rights

You may request access to and correction of the personal information we hold about you, and opt out of marketing at any time, by contacting us at the address below. If you are in the EEA or UK, you additionally have rights to erasure, restriction, portability, and objection under the GDPR, and the right to complain to your supervisory authority. Legal retention obligations described above may limit some of these rights.

If you have a complaint, contact us first and we will respond as soon as we can. You may also contact the Office of the Privacy Commissioner for Personal Data, Hong Kong (pcpd.org.hk).

Cookies

We use essential cookies to make the Services work (login, security, fraud prevention) and, where you consent, analytics cookies to understand how the Services are used. You can decline non-essential cookies in your browser or our cookie banner.

Children

The Services are not directed at persons under 18, and we do not knowingly collect their information.

Changes to this policy

We may update this policy from time to time and will post changes at this page. If changes are significant, we will notify you by email or dashboard notice, and where required by law, ask for your renewed consent.