Privacy Policy

1. Scope and Application of Policy

1.1. Coda Payments Pte. Ltd. (“Coda Singapore”) and/or its affiliates or subsidiaries (collectively referred to as “Coda” and “we”, “us”, or “our”) only collect and process personal data from you where it is necessary for us to do so or where it is relevant to our dealings with you. This Privacy Policy (the “Policy”) sets out our privacy practices in respect of the collection, processing, use, disclosure, transfer, retention, storage, and disposal of your Personal Data when we provide you with our services (“Coda Services”).

1.2. When you accept this Policy, you agree to the collection, processing, use, disclosure, transfer, retention or storage, and disposal of your Personal Data in the manner described below.

1.3. “Personal Data” shall refer to your personal information as an individual, whether true or not, from which you can be identified, either by itself or together with other information to which we have or are likely to have access. The Personal Data that we collect and process may include:

(a) Your first name and last name;

(b) Email address;

(c) Mobile number (or MSISDN);

(d) Merchant affiliation and/or IP address;

(e) Cookies and/or statistical/analytical data, such as your browsing behaviour, to the extent that you may be identified through these;

(f) Documentation that may help us to verify the accuracy of the information you have provided, such as proof of identity;

(g) Your social media links or public profiles, and any personal information that may be visible thereon, which you may provide to us in the course of customer support dealings;

(h) Details in your curriculum vitae or resume, which you may provide to us in the course of applying for job openings;

(i) Account passwords that you may create; and

(j) Any other personal information that you may provide to us in the course of using the Coda Services.

1.4. This Policy only applies to Personal Data which is in our possession or under our control.

1.5. Please refer to the Additional Provisions below for versions of this Policy in both English and select local languages, as well as additional matters that may apply to the jurisdiction where you reside.

1.6. We collect and process your Personal Data to enable you to make purchases from us, your mobile network operator, or the relevant third-party payment channel operator (the “Payment Channels”), or a merchant or publisher of digital products (the “Publishers”) via Coda’s mobile platform, server or database applications, or websites at www.codapayments.com and www.codashop.com (the “Platform”).

1.7. We reserve the right to amend this Policy from time to time without any prior notice to you. Any amendments will be made available and published on our Platform and will take effect on the effective date below. You may determine if any revision has taken place by referring to the date that this Policy was last updated, set out below. We recommend that you check this Policy periodically to review the latest version. Your continued use of the Coda Services after an amendment constitutes your acknowledgement and acceptance of such changes.

Last updated: 15 April 2024

2. Collection of Personal Data

2.1. We collect your Personal Data when you use the Coda Services or communicate with us. In these instances, you may provide your Personal Data to us directly, or it may be shared with us by our affiliates or subsidiaries, the Payment Channels, or the Publishers, pursuant to your consent given to these third parties.

2.2. You may also submit Personal Data to us via other methods, including:

(a) in response to our communications;

(b) through social media or online forums;

(c) through participation in an offer, program or promotion conducted by us;

(d) while applying to any job opportunity via the “Careers” page on www.codapayments.com or https://jobs.lever.co/codapayments;

(e) when you sign up for our newsletter;

(f) when you fill in the Partnerships and Marketing enquiry form on our website www.codapayments.com; and/or

(g) When you sign into Coda Services with asocial login or your credentials from a third party platform (for example, Facebook, Gmail). We collect the Personal Data that you have agreed to share via the social media site or third party platform in question.

2.3. We also collect transaction information, such as purchase amount, date of purchase, information about the digital content, goods and/or services that you are purchasing (“Transaction Data”), in order to pursue our legitimate interests and to abide by our contractual obligation to provide you access to the Coda Services and/or our Platform. In most cases, these are not considered as Personal Data since your identity will not be apparent from them. However, to the extent that your identity may be determined from the Transaction Data, they will be considered and processed as Personal Data under this Policy. You agree to our collection of such Transaction Data from you when you use the Coda Services and/or our Platform.

2.4. You must provide us with information which is accurate and not misleading. In this connection, we reserve the right to request for documentation to verify the information that you provide to us.

3. Use and Disclosure of Personal Data

3.1. Your data shall be processed for the following purposes:

(a) Transaction processing and content delivery;

(b) Marketing and promotional campaigns; and

(c) Other permitted uses and disclosures.

3.2. Transaction Processing and Content Delivery

3.2.1. As a payment channel aggregator, online distributor of digital content, and provider of related services, Coda will use your Personal Data and share it with third parties, including our affiliates or subsidiaries, the Payment Channels, and Publishers, for the purpose of providing you with the Coda Services, or where it is a necessary part of doing business with you.

3.2.2. In particular, your Personal Data may be processed for the following:

(a) Facilitating your use of the Coda Services;

(b) Processing and verifying your online transactions and payments on our Platform;

(c) Resolving any disputes in relation to your transaction;

(d) Mitigating fraud;

(e) Protecting our legitimate interests;

(f) Enforcing our contractual rights; and

(g) Providing you with information which you have requested from us.

3.2.3. Your Personal Data may also be shared for the above purposes between Coda and:

(a) The Publisher from whom you are purchasing content; and

(b) The Payment Channel that you have selected as your method of payment.

3.3. Marketing and Promotional Campaigns

3.3.1. From time to time, we run marketing and promotional campaigns where we reward our users for being top spenders on our Platform in a particular country, for a particular Publisher, or in other various categories. To this end, we may analyse your Transaction Data and use your Personal Data to contact you, in order to award you with the prizes offered for such promotional campaigns, which typically would be free Publisher or Payment Channel credits, or other free gifts. These promotional campaigns are conducted by Coda, and your Personal Data will not be shared with any third party for such purposes. If you would like to opt out of receiving gifts and other prizes from our promotional events, please contact us.

3.3.2. If you opt in to receiving marketing and promotional communications, we may use your Personal Data to notify you about marketing and promotional campaigns relating to any of the Coda Services, or those conducted jointly, in partnership, or in connection with any Publishers, Payment Channels, or third parties, and we may share your name, email address, and/or mobile number with them for this purpose. If you would like to opt out of receiving marketing and promotional communications or having your Personal Data disclosed for this purpose, please contact us. You may also opt-out of any such marketing and promotional emails by clicking the unsubscribe button provided in that email.  

3.4. Other Permitted Uses and Disclosures

3.4.1. You accept that we may also use your Personal Data for the following purposes:

(a) Maintaining and securing any user accounts that you may have with Coda;

(b) Notifying you of matters relating to your account or your transactions that may require your attention;

(c) Processing service requests, resolving concerns, and responding to queries or feedback that you may communicate to us;

(d) Managing or complying with our internal security or risk management mechanisms;

(e) Conducting statistical analysis or market and customer research, including surveys to ensure customer satisfaction. Please note that we may share your Personal Data with our third party service providers for such purposes;

(f) Improving your experiences with our customer care services; and

(g) Notifying you of material changes to this Policy or to our Terms and Conditions as may be necessary.

3.4.2. You understand and accept that we may also disclose your Personal Data to our affiliates or subsidiaries, Publishers, Payment Channels, or other parties as permitted or required by applicable law, such as government authorities or regulators, or other necessary persons, for the following purposes:

(a) For or in connection with the negotiation of any merger, sale of company stock or assets, financing, acquisition, divestiture, or dissolution of all or a portion of our business; or

(b) If we believe that disclosure is reasonably necessary to (i) comply with any applicable law, regulation, legal process, or governmental request; (ii) assist in any investigations or proceedings; and (ii) protect the security or integrity of the Coda Services, us, or any of our users or the public from harm or illegal activities.​

4. Your choices, rights and exceptions

4.1. You have the right to have your Personal Data removed or withdraw consent to its processing, where we are processing your Personal Data solely on the basis of your consent. If you wish to have your Personal Data removed, or do not wish to have your Personal Data used or processed for the purposes above, please contact us. However, please note that if your Personal Data is removed or you withdraw your consent for any of the purposes stated above, depending on the nature of your request, we may not be in a position to continue providing the Coda Services to you, or process and complete the transactions you wish to make on our Platform.

4.2. You have the right to access, update, or request correction of the Personal Data that you have provided to us at any time. If you would like to access the Personal Data that we have on file about you or request that we update or correct your Personal Data, you may contact us. Depending on the nature of your request, we may charge a reasonable administration fee, of which we will inform you as soon as reasonably practicable.

5. Retention and Disposal of Data

Your Personal Data will be retained for as long as is necessary to fulfil or complete the purpose for which it was collected and until it is no longer necessary for any other legal or business purposes. Thereafter, we dispose of your Personal Data in a manner that prevents further access or processing, including but not limited to deletion or irreversible anonymization. ​

6. Security

Coda makes reasonable efforts to safeguard your Personal Data, in order to protect against loss, misuse, modification, unauthorised or accidental access or disclosure, alteration, or destruction. Unfortunately, no data transmission or storage over the Internet can be guaranteed as totally secure. Nonetheless, we have adopted and currently practice administrative, organizational, technical, and physical security measures to protect your Personal Data to the best of our reasonable capacity, including but not limited to the following:

(a) Limiting Personal Data access to authorized and/or necessary personnel;

(b) Implementing technical solutions to ensure information security;

(c) Continuous monitoring and review of Personal Data protection measures; and

(d) Other security measures, as may be required by the laws and regulations applicable in the country where you are located.

7. International Transfer of Data

7.1.1. Coda operates internationally. You therefore accept and understand that we may store your data in different countries depending on applicable data localisation regulations, or share your Personal Data with recipients (such as the Publishers, Payment Channels, or Coda affiliates/subsidiaries) who are located in countries other than the country in which your Personal Data was originally collected, in order to provide the Coda Services to you, process and complete the transactions you wish to make on our Platform, or for any other purposes set out in this Policy.

7.1.2. In such circumstances, we take steps to ensure that overseas recipients shall provide a standard of protection to the Personal Data transferred that is comparable to the protection under the EU General Data Protection Regulations as well as the local data protection laws applicable in your jurisdiction.  

8. Collection of Statistical Data

8.1. We collect, and also allow third parties (including but not limited to Amazon Web Services, Facebook, and Google) to collect statistical information relating to your website use and online activities as you interact with our Platform, using “cookies” and similar technologies. Such statistical information is anonymous in nature and does not identify who you are. They include page visits, access times and dates, and browser type. This information is collected for analysis and evaluation to help us improve our Platform and the Coda Services.

8.2. “Cookies” are a feature on your Internet browser which store small amounts of data on your computer when you visit a website. They allow us to recognise a particular device or browser so that we can personalise and curate content to your preferences and make our services and Platform more useful to you. “Cookies” do not tell us who you are unless you specifically give us personally identifiable information. You may be able to manage and delete “cookies” by selecting certain options on your browser.

8.3. Your statistical data may be shared with our third-party partners: (i) with whom we advertise; (ii) who help us deliver or optimize our services; (iii) who wish to market their goods or services, which may be of interest to you; or (iv) who wish to improve their goods or services to be provided to you.

9. Use by Minors​

9.1. The Coda Services are not directed to persons under the age of majority in your country (a “minor”). If you are a minor, you may use the Coda Services and/or our Platform only with the consent, permission, and supervision of your parent or guardian, subject to the specific age restrictions on digital content that may be imposed by the government in your country.

9.2. If you are a parent or guardian supervising a minor who wishes to use the Coda Services, and you accept this Policy on their behalf, you consent to the processing of their Personal Data in accordance with this Policy.

10. Links to Other Web Sites

Our Platform may contain links to other websites which are not maintained by us. Therefore, when visiting these third-party websites, you should read their respective privacy policies, which will apply to your use of their websites. We are not responsible for the content, use, or privacy practices of these websites.

11. Contact Us

11.1. To contact us on any aspect of this Policy or your Personal Data, including but not limited to withdrawing consent, opting out of receiving gifts and prizes, opting out of receiving marketing and promotional communications, requesting access to your Personal Data, requesting an update or correction to your Personal Data, or exercising any of your rights under this Policy or applicable data protection laws, you may contact our Data Protection Officer by submitting a request using this link.

11.2. For any other issues, please visit our Help Center.

12. Additional Provisions

In addition to the foregoing provisions, the following additional provisions (“Additional Provisions”) apply to users in the following countries. You may access a copy of the Policy, including the Additional Provisions as applicable to your country, in both English and the respective local languages below.

European Union (EU)/European Economic Area (EEA)/Switzerland/United Kingdom (UK)

Read the Privacy Policy for the EU/EEA, Switzerland, and UK here.

Dansk: Læs vilkårene og betingelserne på dansk her.

Deutsch: Hier können Sie die Datenschutzrichtlinie auf Deutsch lesen.

Español: Lea la Política de privacidad en español aquí.

Francais: Lisez la Politique de confidentialité en français ici.

Italiano: Leggere l’Informativa sulla privacy in italiano qui.

Magyar: Olvassa el a Használati Adatvédelmi szabályzat magyar nyelven itt.

Nederland: Lees hier het Privacybeleid in het Nederlands.

Norsk: Les vilkårene på norsk her.

‍Polski: Polityka ochrony prywatności w języku polskim jest dostępna tutaj.

Português: Leia os Política de Privacidade em português aqui.

Svenska: Läs villkoren på svenska här.

Australia

Read the Privacy Policy for Australia here.

Brazil

Leia a Política de privacidade em português aqui.

1. Scope of application. If you are residing in or located in Brazil, these provisions (the “Brazil Provisions”) shall govern the collection and processing of your Personal Data, in addition to the foregoing Policy.

2. International transfer of Personal Data. We take steps to ensure that any Personal Data transferred in accordance with the Policy shall be provided a standard of protection that is comparable to the protection under the LGPD, as well as its relevant amendments and rules, regulations, guidelines, issuances, etc.

3. Governing law and dispute resolution. These Terms shall be governed by and construed according to the laws of the Federative Republic of Brazil without regard to its conflicts-of-law provisions. We shall endeavor to amicably resolve any disputes that arise out of or in connection with this Policy (including any question regarding its existence, validity, or termination), but in the event that such efforts shall fail, such disputes shall be referred to the jurisdiction of the courts of the City of São Paulo, State of São Paulo, to the exclusion of all courts in any other venue.

4. Additional Personal Data point. Please note that we collect Cadastro de Pessoas Físicas, [sepeˈɛfi] (“CPF”) also known as Natural Persons Register as we are legally obligated to collect such Personal Data.

Malaysia

Baca Dasar Privasi dalam Bahasa Melayu di sini.

1. Scope of application; controller of Personal Data. If you are residing in or located in Malaysia, these provisions (the “Malaysia Provisions”) shall govern the collection and processing of your Personal Data, in addition to the foregoing Policy. You understand and accept that this Policy shall be effective and binding between you and Aplikasi Coda Sdn. Bhd. (“Coda Malaysia”), the local subsidiary in Malaysia. You also understand that Coda Malaysia acts as the controller of your Personal Data, and Coda Singapore is the processor, performing processing on behalf of the former.

2. International transfer of Personal Data. We take steps to ensure that any Personal Data transferred in accordance with the Policy shall be provided a standard of protection that is comparable to the protection under Act 709 or the Personal Data Protection Act 2010, as well as its relevant amendments, guidelines, enforcement rules, etc.

3. Governing law. This Policy shall be governed by and construed according to the laws of Malaysia, without regard to its conflicts-of-law provisions. We shall endeavour to amicably resolve any disputes that arise out of or in connection with this Policy (including any question regarding its existence, validity or termination), but in the event that such efforts shall fail, such dispute shall be referred to and finally resolved by arbitration administered by the Asian International Arbitration Centre (“AIAC”) under the Arbitration Rules of the AIAC for the time being in force, which rules are deemed to be incorporated by reference into this section. The seat of arbitration shall be Kuala Lumpur, and the Tribunal shall consist of one (1) arbitrator. All arbitration proceedings shall be in the English language. The decision of the arbitrator shall be final and binding.

4. We will use your email address or phone number to add cashbacks to your codashop account if you’ve consented to the same while making a purchase on our Platform.

New Zealand

Read the Privacy Policy for New Zealand here.

Pakistan

We collect an additional Personal Data point from users in Pakistan i.e., the Computerised National Identity Card (“CNIC”) since we are legally obligated to collect this.

Philippines

1. Scope of application; controller of Personal Data. If you are residing in or located in the Philippines, these provisions (the “Philippines Provisions”) shall govern the collection and processing of your Personal Data, in addition to the foregoing Policy. You understand and accept that this Policy shall be effective and binding between you and Coda Payments Philippines Inc. (“Coda Philippines”), the local subsidiary in the Philippines. You also understand that Coda Philippines acts as the controller of your Personal Data, and Coda Singapore is the processor, performing processing on behalf of the former.

2. International transfer of Personal Data. We take steps to ensure that any Personal Data transferred in accordance with the Policy shall be provided a standard of protection that is comparable to the protection under Republic Act No. 10173 or the Data Privacy Act of 2012, its Implementing Rules and Regulations, as well as any relevant amendments or circulars, advisories, or other issuances from the National Privacy Commission.

3. Governing law. This Policy shall be governed by and construed according to the laws of the Republic of the Philippines, without regard to its conflicts-of-law provisions. We shall endeavour to amicably resolve any disputes that arise out of or in connection with this Policy (including any question regarding its existence, validity or termination), but in the event that such efforts shall fail, such dispute shall be referred to and finally resolved by arbitration administered by the Philippines Dispute Resolution Center Inc. (“PDRCI”) under the Arbitration Rules of the PDRCI for the time being in force, which rules are deemed to be incorporated by reference into this section. The seat of arbitration shall be Makati City, the Philippines, and the Tribunal shall consist of one (1) arbitrator. All arbitration proceedings shall be in the English language. The decision of the arbitrator shall be final and binding.

Saudi Arabia

الشروط والأحكام باللغة العربية هنا.‍

1. Scope of application; controller of Personal Data. If you are residing in or located in the Kingdom of Saudi Arabia, these provisions (the “KSA Provisions”) shall govern the collection and processing of your Personal Data, in addition to the foregoing Policy. You understand and accept that this Policy shall be effective and binding between you and Coda Arabia for Information Technology (“Coda KSA”), the local subsidiary in the Kingdom of Saudi Arabia. You also understand that Coda KSA acts as the controller of your Personal Data, and Coda Singapore is the processor, performing processing on behalf of the former.

2. Disclosure of Personal Data. You accept and understand that your Personal Data will be shared between Coda KSA and Coda Singapore for the purposes described in Section 3 of the Policy.

3. International transfer of Personal Data. We take steps to ensure that any Personal Data transferred in accordance with the Policy shall be provided a standard of protection that is comparable to the protection under the Royal Decree M/19 of 9/2/1443H (16 September 2021) approving Resolution No. 98 dated 7/2/1443H (14 September 2021) known as the Personal Data Protection Law, as well as its relevant regulations, amendments, guidelines, enforcement rules etc.

4. Governing law and dispute resolution. This Policy shall be governed by and construed according to the laws of the Kingdom of Saudi Arabia without regard to its conflicts-of-law provisions. We shall endeavor to amicably resolve any disputes that arise out of or in connection with the provisions of this Policy (including any question regarding its existence or validity), but in the event that such efforts shall fail, such disputes shall be referred to the jurisdiction of the courts of Riyadh, to the exclusion of all courts in any other venue except for complaints filed by users classified under the law as consumers, who may file such complaints with the court with jurisdiction over their domicile.

Singapore

1. Scope of application. If you are residing in or located in Singapore, these provisions (the “Singapore Provisions”) shall govern the collection and processing of your Personal Data, in addition to the foregoing Policy.

2. Use of mobile number for marketing purposes. By accepting the purposes stated in the Marketing and Promotional Campaigns section of this Policy, or by opting into receiving marketing and promotional communications, you accept and understand that the mobile number that you have provided to us may be used, contacted, and disclosed to third parties as described in the section on Marketing and Promotional Campaigns.

South Korea

이곳에서 한국어 개인정보처리방침을 확인하실 수 있습니다.

1. Scope of application; controller of Personal Data. If you are residing in or located in South Korea, these provisions (the “Korea Provisions”) shall govern the collection and processing of your Personal Data, in addition to the foregoing Policy. You understand and accept that this Policy shall be effective and binding between you and Coda Payments Korea Ltd. (“Coda Korea”), the local subsidiary in South Korea. You also understand that Coda Korea acts as the controller of your Personal Data, and Coda Singapore is the processor, performing processing on behalf of the former.

2. Specific kinds of Personal Data. We do not collect your resident registration number, bank account information, or credit card information. However, in the event that you voluntarily provide such information to us in the course of availing of the Coda Services, Coda shall ensure the security and confidentiality of these items of Personal Data in accordance with the relevant laws.

3. International transfer of Personal Data. We take steps to ensure that any Personal Data transferred in accordance with the Policy shall be provided a standard of protection that is comparable to the protection under the Personal Information Protection Act of 2020, as well as its relevant amendments, guidelines, enforcement rules, etc.

4. Governing law and dispute resolution. This Policy shall be governed by and construed according to the laws of South Korea without regard to its conflicts-of-law provisions. We shall endeavour to amicably resolve any disputes that arise out of or in connection with this Policy (including any question regarding its existence, validity or termination), but in the event that such efforts shall fail, such disputes shall be referred to the court with competent jurisdiction over Coda Korea’s registered address, to the exclusion of all courts in any other venue.

5. Data Protection Officer

Name: Kedar Deshpande
Designation: Data Protection Officer
Email address: dpo@codapayments.com
Telephone number: +82 70 8835 0128

Thailand

อ่านนโยบายความเป็นส่วนตัวในภาษาไทยได้จากที่นี่

1. Scope of application; controller of Personal Data. If you are residing in or located in Thailand, these provisions (the “Thailand Provisions”) shall govern the collection and processing of your Personal Data, in addition to the foregoing Policy. You understand and accept that this Policy shall be effective and binding between you and Coda Payments (Thailand) Co., Ltd. (“Coda Thailand”), the local subsidiary in Thailand. You also understand that Coda Thailand acts as the controller of your Personal Data, and Coda Singapore is the processor, performing processing on behalf of the former.

2. International transfer of Personal Data. We take steps to ensure that any Personal Data transferred in accordance with the Policy shall be provided a standard of protection that is comparable to the protection under the Personal Data Protection Act B.E. 2562, as well as its relevant regulations, amendments, guidelines, enforcement rules, etc.

3. Governing law and dispute resolution. These Terms shall be governed by and construed according to the laws of Thailand without regard to its conflicts-of-law provisions. We shall endeavor to amicably resolve any disputes that arise out of or in connection with these Terms (including any question regarding its existence, validity, or termination), but in the event that such efforts shall fail, such disputes shall be referred to the jurisdiction of the courts of Thailand, to the exclusion of all courts in any other venue.

4. Data Protection Officer

Designation: Data Protection Officer
Email address: dpo@codapayments.com
Telephone number: (+66) 02-161-4567

Turkey

Türkçe Gizlilik Politikasını buradan okuyun.

1. Scope of application. If you are residing in or located in Turkey, these provisions (the “Turkey Provisions”) shall govern the collection and processing of your Personal Data, in addition to the foregoing Policy. You understand and accept that this Policy shall be effective and binding between you and Coda Turkey Elektronik Hizmetleri ve Ticaret Anonim Sirketi (“Coda Turkey”), the local subsidiary in Turkey. You also understand that Coda Turkey acts as the controller of your Personal Data, and Coda Singapore is the processor, performing processing on behalf of the former.

2. International transfer of Personal Data. We take steps to ensure that any Personal Data transferred in accordance with the Policy shall be provided a standard of protection that is comparable to the protection under the Law on the Protection of Personal Data, as well as its relevant amendments and rules, regulations, guidelines, issuances, etc.

3. Governing law and dispute resolution. These Terms shall be governed by and construed according to the laws of the Republic of Turkey without regard to its conflicts-of-law provisions. We shall endeavor to amicably resolve any disputes that arise out of or in connection with this Policy (including any question regarding its existence, validity, or termination), but in the event that such efforts shall fail, such disputes shall be submitted to the Turkish Personal Data Protection Authority for resolution.

4. Coda Singapore’s Representative in Turkey

Legal entity name: IPTECH Legal Dan. Ltd. Sti.
Designation: Data Controller Representative (In Turkey)
Address: Barbaros Mahallesi Begonya Sokak No: 1/2 Ataşehir İstanbul, Turkey
E-mail address: dpo@codapayments.com

United Arab Emirates

الشروط والأحكام باللغة العربية هنا.

1. Scope of application; controller of Personal Data. If you are residing in or located in the United Arab Emirates, these provisions (the “UAE Provisions”) shall govern the collection and processing of your Personal Data, in addition to the foregoing Policy. You understand and accept that this Policy shall be effective and binding between you and Coda Payments Middle East FZ LLC (“Coda UAE”), the local subsidiary in UAE. You also understand that Coda UAE acts as the controller of your Personal Data, and Coda Singapore is the processor, performing processing on behalf of the former.

2. International transfer of Personal Data. We take steps to ensure that any Personal Data transferred in accordance with the Policy shall be provided a standard of protection that is comparable to the general protection stipulated in UAE Federal Laws, most relevant is UAE Federal Law no. 15 of 2020 on Consumer Protection (“CPL”), as well as its relevant amendments, guidelines, enforcement rules, etc.

3. Governing Law. This Policy and the UAE Provisions shall be governed by and construed according to the laws of UAE, without regard to its conflicts-of-law provisions. We shall endeavour to amicably resolve any disputes that arise out of or in connection with this Policy (including any question regarding its existence, validity or termination), but in the event that such efforts fail, such dispute shall be referred to and finally resolved by arbitration administered in accordance with the Arbitration Rules of the DIFC‐LCIA Arbitration Centre (Arbitration Rules), which rules are deemed to be incorporated by reference into this clause. The number of arbitrators shall be one (1), who shall be appointed in accordance with the Arbitration Rules. The seat, or legal place of the arbitration, shall be the Dubai International Financial Centre. The arbitration proceedings and award shall be conducted in the English language. The decision of the arbitrator shall be final and binding.

United States (US)

Read the Privacy Policy for the US here.

Vietnam

Đọc Chính sách Quyền riêng tư bằng tiếng Việt tại đây.

1. Scope of application. If you are residing in or located in Vietnam, these provisions (the “Vietnam Provisions”) shall govern the collection and processing of your Personal Data, in addition to the foregoing Policy.

2. Processing of Personal Data of children under 18. The Coda Services are not directed to persons under the age of eighteen (18) in Vietnam (“minors”). As such, we do not knowingly collect Personal Data from such minors. We can only collect a minor’s Personal Data with the consent, permission, and supervision of their parent or guardian. If you are a parent or guardian supervising a minor, and you accept this Policy on their behalf so that they may use the Coda Services, you understand that you consent to the processing of the minor’s Personal Data in accordance with this policy.

3. Governing law and dispute resolution. This Policy shall be governed by and construed according to the laws of the Socialist Republic of Vietnam without regard to its conflicts-of-law provisions. We shall endeavor to amicably resolve any disputes that arise out of or in connection with this Policy (including any question regarding its existence, validity, or termination), but in the event that such efforts shall fail, such disputes shall be referred to the jurisdiction of the courts of Ho Chi Minh City, to the exclusion of all courts in any other venue.

Pakistan

We collect an additional Personal Data point from users in Pakistan i.e., the Computerised National Identity Card (“CNIC”) since we are legally obligated to collect this.