Privacy notice
Version 1.0 · 24 October 2026
Applies to DITC Business and DITC Personal: the application forms and the client portal.
Who we are
DITC Wallet is run by D.I.T.C. LLC, 601 Brickell Key Drive, Suite 700, Miami, FL 33131, United States ("DITC", "we"). We decide how your personal data is used, so we are its controller. Questions about your data: privacy@ditc.io.
What we collect
- Who you are: name, date of birth, nationality, address, e-mail, phone, tax number, your passport or ID card and proof of address, and a selfie or short video if the identity check asks for one.
- Your company (Business): company details and documents, and the directors, owners and controllers, with the share each owner holds.
- Money: where your money comes from, what you expect to do with the account, your balances, payments, exchanges, beneficiaries and crypto addresses.
- Use of the portal: sign-in times, IP address, browser, security events and what you accept. We use only the cookies needed to keep you signed in. We use no advertising or analytics cookies.
Most of this comes from you. Some comes from identity and screening checks (sanctions, politically exposed persons, adverse media) and from the banks that handle your payments.
Why we use it, and on what legal basis
| Why | Legal basis |
|---|---|
| Open and run your account, make your payments and exchanges | Our contract with you, or steps you ask for before it |
| Check identity and ownership, screen for sanctions, prevent money laundering and fraud, report to authorities | Legal obligation |
| A selfie or video for the identity check | Your explicit consent, given in the check itself |
| Keep the portal secure and records of what you accepted | Our legitimate interest in a safe service that we can prove |
| Answer complaints and questions | Contract and legal obligation |
If you don't give us what the law requires us to check, we cannot open your account. We do not sell your data, and we do not use it for marketing without your consent. Every decision to open, refuse or close an account is made by a person.
Who we share it with
Only what each one needs, under contract and confidentiality:
- identity-verification and screening providers;
- the regulated payment, banking and crypto custody partners that hold your money and carry out your payments (they also check you under their own legal duties);
- our electronic-signature provider;
- our hosting and e-mail providers;
- auditors and professional advisers;
- regulators, the police and courts, when the law requires it.
Transfers outside the UK and the EU
DITC is in the United States, and some of our partners are in other countries. When your data leaves the UK or the EU, we protect it with the European Commission's standard contractual clauses (and the UK addendum), or we send it to a country with an adequacy decision. Write to us for a copy of the safeguards.
How long we keep it
For as long as you are a client, and then five years after the account is closed or the application ends, as anti-money-laundering law requires; longer only if a law or an investigation requires it. The identity-check selfie or video is kept by the verification provider only as long as the check needs it.
Your rights
You can ask us for a copy of your data, to correct it, to delete it, to limit how we use it, to move it to someone else, and to object to how we use it. Where you gave consent, you can take it back at any time. Some rights are limited while the law makes us keep records. Write to privacy@ditc.io; we answer within one month.
If you are not happy with how we handled your data, tell us first, please. You can also complain to the Information Commissioner's Office in the UK (ico.org.uk, 0303 123 1113) or to the data protection authority in your EU country.
Changes
When we change this notice, we put the new version here and tell clients in the portal. The portal records which version you saw when you applied.