Illustration of protected data flows, privacy safeguards and secure cross-border data transfers

Compliance

Privacy Protection Policy

ETR Pay is committed to protecting users' personal data and privacy to the highest international standards. We rigorously follow global data protection best practice to ensure that, throughout cross-border financial services, your data is treated with full respect and safeguarded securely.

Privacy Protection Policy

Data Governance

Managing data through international standards and data minimisation

We refer to the data governance principles set out by the Committee on Payments and Market Infrastructures (CPMI) and ISO 20022 international standards, and apply advanced encryption together with strict access controls to protect data during transmission, storage and processing. We also follow the risk-based approach of the Financial Action Task Force (FATF), including Recommendation 16 on payment transparency and its 2025 revision, alongside guidance from the Office of the Privacy Commissioner of Canada (OPC) and the Personal Information Protection and Electronic Documents Act (PIPEDA), collecting only the minimum data required to provide services and meet international compliance obligations.

Cross-Border Transfers

Maintaining trust through recognised protection frameworks

All cross-border data transfers follow internationally recognised protection frameworks, and we continually review and refine our privacy management system to preserve users' long-term trust in the platform.

Key Commitments

How we put privacy protection into practice

  • Clearly explain why data is collected and how it is used
  • Safeguard users' rights of access, correction and withdrawal of consent
  • Carry out regular privacy impact assessments and independent third-party reviews
  • Use end-to-end encryption and layered security controls

Ongoing Commitment

Safeguarding your privacy through transparent governance and continual improvement

We are committed to regularly reviewing and enhancing our privacy protection measures, ensuring that our data management practices consistently meet the highest international standards and provide trustworthy privacy safeguards for every user.