Loading content...
Loading...
Legal Document
Last Updated: January 14th, 2026
The privacy provisions of the Gramm-Leach-Bliley Act ("GLBA") and implemented by Regulation P set specific requirements for financial institutions regarding the disclosure of consumer and customer information to nonaffiliated third parties. The GLBA requires financial institutions to provide disclosures to consumers, both at the establishment of a customer relationship and annually thereafter, explaining how their non-public personal information ("NPI") will be used and shared with nonaffiliated third parties. The GLBA also provides consumers with the right to opt out certain information sharing practices.
BIEASES INC (DBA as "BIEASES" or "the Company") recognizes the importance of satisfying the requirements of the GLBA when engaging in activities related to the collection and sharing of consumer information. While offering and providing its services, the Company collects and maintains certain personal information including NPI. BIEASES shares NPI to facilitate transactions requested by customers, for legal reasons (Such as fraud prevention or in response to a subpoena), and for its own marketing purposes. BIEASES may also share NPI with other financial companies for joint marketing purposes, or with nonaffiliates for their marketing purposes. The Company does not share information with affiliates about consumer transactions, experiences, and creditworthiness for everyday business purposes as part of providing financial services with its affiliates. It is the policy of BIEASES to maintain the privacy and confidentiality of consumer personal information in full accordance with the requirements of the GLBA that apply to its business activity, and as amended from time to time.
This Policy directs Management to develop appropriate procedures to ensure compliance with the GLBA and its implementing regulations, and controls to prevent any violations of law, regulation, statute, or other requirements. This Policy describes what personal information is collected by BIEASES and the way the Company may use and share BIEASES personal information. This Policy also sets forth the options available to consumers if they seek to limit the use and sharing of their NPI.
This Policy will refer to both the GLBA and Regulation P as "Regulation P."
BIEASES has appointed the CCO to oversee this Policy and its related procedures, ensuring that this Policy is properly adopted, implemented, and updated as often as required. This CCO will coordinate with the Management to ensure that all departments are aware of and have taken the necessary steps to implement this Policy.
At least annually, the CCO will review this Policy and recommend appropriate changes to the Board of Directors. The review will include feedback on the effectiveness of this Policy and will consider the results of any internal or external audits or examinations. And interim changes to this Policy must be submitted to the CEO to determine if the changes are material enough to require approval from the Board of Directors.
No part of this Policy should be interpreted as contravening or superseding any other legal or regulatory requirement imposed on BIEASES. Any conflicts between the standards of this Policy and BIEASES' other legal and compliance obligations should be escalated immediately to the CEO for further evaluation. If necessary, the CEO will engage internal/external legal counsel for interpretations of BIEASES obligations.
Regulation P broadly defines "financial institution" as any entity significantly engaged in activity that is financial in nature, incidental to financial activity, or complimentary to financial activity. Because the Company offers prepaid account products and remittance transfers services to consumers, BIEASES is a financial institution as defined by Regulation P and must adhere to its privacy requirements.
This Policy governs BIEASES’ operations and thus applies to:
Regulation P sets specific definitions for the term’s “consumer” and “customer,” and establishes separate requirements for the treatment of each. BIEASES does not permit individuals to use its platform or financial products and services without first establishing a customer relationship with the Company. Therefore, this Policy refers to the collection and use of customer information only.
An affiliate is any company that controls, is controlled by, or is under common control with another company. For purposes of this Policy, BIEASES' affiliates are BIEASES LTD (UK, London), BIEASES LTD (China, Shanghai), BIEASES Limited (Hong Kong).
An individual who obtains or has obtained a financial product or service from BIEASES that is to be used primarily for personal, family, or household purposes, or that individual's legal representative.
A consumer who has a customer relationship with BIEASES.
A continuing relationship between a consumer and BIEASES under which the Company provides one or more financial products or services to the consumer that are to be used primarily for personal, family, or household purposes.
A nonaffiliated third party is any person except BIEASES' affiliate, or a person employed jointly by BIEASES and any company that is not BIEASES' affiliate. BIEASES may interact with several non-affiliated third parties including, but not limited to, its third-party vendors, service providers, and partner financial institutions.
Non-public personal information ("NPI") refers to personally identifiable financial information, and any list, description, or other grouping of consumers (and publicly available information pertaining to them) that is derived using any personally identifiable financial information that is not publicly available.
NPI does not include publicly available information (except as described below), or any list, description, or other grouping of consumers (and publicly available information pertaining to them) that is derived without using any personally identifiable financial information that is not publicly available.
NPI includes any list of individuals' names and street addresses that is derived in whole or in part using personally identifiable financial information that is not publicly available, Such as account numbers. NPI does not include any list of individuals' names and addresses that contains only publicly available information, is not derived in whole or in part using personally identifiable financial information that is not publicly available, and is not disclosed in a manner that indicates that any of the individuals on the list is a consumer of a financial institution.
BIEASES collects, retains, and uses both NPI and PII in order to administer its business, to provide its products and services to consumers, to process consumer transactions, and to properly identify and validate the identities of consumers.
Personally identifiable information ("PII") is any information that a consumer provides to BIEASES to obtain a financial product or service from the Company, resulting from any transaction involving a financial product or service between the Company and a consumer, or the Company otherwise obtains about a consumer in connection with providing a financial product or service to that consumer. PII does not include information that is available from public sources, Such as telephone directories or government records.
Publicly available information means any information that BIEASES has a reasonable basis to believe is lawfully made available to the general public from Federal, State, or local government records, widely distributed media, or disclosures to the general public that are required to be made by federal, state, or local law. BIEASES must have a reasonable basis to believe that the information is lawfully made available to the general public. The Company is considered to have established a reasonable basis if it has taken steps to determine that the information is of the type that is available to the general public, and determined whether an individual can direct that information is not made available to the general public and, if so, that BIEASES' consumer has not done so.
BIEASES may collect NPI about consumers from the following sources:
BIEASES may collect and use your mobile phone number to provide SMS text messaging services for multi-factor authentication (MFA), security alerts, account notifications, and other service-related communications. By providing your mobile phone number and agreeing to receive SMS messages, you consent to receive automated text messages from BIEASES at the phone number associated with your account.
To the extent that BIEASES collects certain NPI about consumers while offering and facilitating its services, BIEASES will not disclose NPI to any unauthorized individual or entity, except as permitted by the below exceptions provided under Regulation P.
BIEASES is permitted to provide NPI to a nonaffiliated third party to perform services or functions on the Company's behalf if:
The services a nonaffiliated third party performs for BIEASES under this exception may include marketing BIEASES' products and services or marketing of financial products or services offered pursuant to joint agreements between BIEASES and one or more financial institution. A joint marketing agreement is a written contract pursuant to which BIEASES and one or more financial institutions jointly offer, endorse, or sponsor a financial product or service.
Marketing Disclosures
BIEASES may share information about consumer transactions and experiences with its bank partners and program managers for its prepaid account products and remittance transfer services. This type of personal information sharing will be addressed in the contracts BIEASES establishes with these partners and is disclosed to consumers in the Company's Privacy Notice.
In addition, BIEASES may disclose the personal information it collects, as described above, to its financial distribution partners (e.g., bank partners, payment processors, etc.) or other companies that perform marketing services on its behalf. These third parties sign agreements with BIEASES that contain confidentiality and non-disclosure provisions.
BIEASES is permitted to provide NPI to a nonaffiliated third party as necessary to effect, administer, or enforce a transaction that a consumer requests or authorizes, or in connection with:
BIEASES may engage in certain types of information-sharing, including disclosures for purposes of preventing fraud, responding to judicial process or a subpoena, or complying with Federal, State, or local laws. The following are examples of appropriate information disclosures under this exception, among others:
BIEASES will provide a clear and conspicuous notice that accurately reflects the Company's privacy policies and practices to customers not later than when BIEASES establishes a relationship with the customer. BIEASES is considered to have established a customer relationship when the Company and a consumer enter a continuing relationship.
BIEASES will provide a clear and conspicuous notice to customers that accurately reflects the Company's privacy policies and practices not less than annually during the continuation of the customer relationship. Annually means at least once in any period of 12 consecutive months during which that relationship exists. BIEASES may define the 12-consecutive-month period but must apply it to the customer on a consistent basis.
BIEASES is not required to deliver an annual privacy notice to existing customers if:
BIEASES is not required to provide an annual notice to former customers.
BIEASES will not, directly or through an affiliate, disclose any NPI about a customer to a nonaffiliated third party other than as described in the initial notice the Company provided to that customer, unless:
BIEASES may provide a joint notice from BIEASES and one or more of the Company's affiliates or other financial institution, as identified in the notice, if the notice is accurate with respect to BIEASES and the other institutions.
BIEASES will provide any privacy notice required by Regulation P so that each customer can reasonably be expected to receive the actual notice in writing, or if the customer agrees to receive notices electronically and the Company has complied with the Electronic Signatures in Global and National Commerce Act ("E-Sign").
It is the policy of BIEASES to post the Company's privacy notice on its website and to require customers to acknowledge receipt of the notice as a necessary step to obtaining a particular financial product or service.
Regarding the delivery of annual notices, BIEASES may reasonably expect that the customer will receive actual notice of the Company's annual privacy notice if:
If BIEASES changes its information sharing practices to the extent that a revised privacy notice is required, the Company will ensure that it is updated on its website for consumers to view at any time. In addition, customer may request an updated privacy statement by calling the telephone number available on the Company's website or emailing the company at compliance@bieases.com.
You may opt out of receiving SMS messages from BIEASES at any time by:
Please note that opting out of SMS messages may affect your ability to receive important security alerts and account notifications. Message and data rates may apply. BIEASES will retain your mobile phone number and SMS communication records in accordance with applicable legal and regulatory requirements.
BIEASES will provide all initial, annual, and revised notices so that the customer can retain them or obtain them later in writing, or, if the customer agrees, electronically.
The Company's current privacy notice is made available to customers on its website.
The initial, annual, and revised privacy notices that BIEASES provides will include each of the following items, in addition to any other information the Company wishes to provide that applies to the customers who receive privacy notices:
If BIEASES discloses NPI to third parties as permitted under the exception for processing and servicing transactions, and other exceptions provided under Regulation P and as described above, the Company is not required to list those exceptions in the initial or annual privacy notices.
When describing the categories with respect to those parties, it is sufficient to state that BIEASES makes disclosures to other nonaffiliated companies 1) for everyday business purposes and list all that apply (Such as to process transactions, maintain accounts, respond to court orders and legal investigations, or report to credit bureaus), or 2) as permitted by law.
The Company's notice may include categories of NPI that BIEASES reserves the right to disclose in the future, but does not current disclose, as well as categories of affiliates or nonaffiliates to whom the Company reserves the right in the future to disclose, but to whom BIEASES does not currently disclose NPI.
Regulation P provides model privacy notices that meet the notice content requirements set forth above. It is the Company's policy to use the model privacy notices.
The Company's Privacy Policy is posted in a clear and conspicuous manner on a page on its website, without requiring a login or similar steps or conditions to access the notice. The Privacy Notice contains the Company's contact information for the consumer to inquire about the Company's policy.
When applicable, BIEASES will provide a clear and conspicuous notice to each customer that accurately explains their right to opt out. The notice will state:
BIEASES will provide adequate notice that the consumer can opt out of the disclosure of NPI to a nonaffiliated third party if BIEASES:
BIEASES provides a reasonable means to exercise an opt out right if the Company:
BIEASES does not provide a reasonable means of opting out if:
BIEASES may require each consumer to opt out through a specific means, as long as that means is reasonable for that consumer.
BIEASES may provide the opt out notice together with or on the same written or electronic form as the initial notice the Company provides.
If BIEASES provides the opt out notice later than required for the initial notice, the Company will also include a copy of the initial notice with the opt out notice in writing or, if the consumer agrees, electronically.
When two or more consumers jointly obtain a single product or service from BIEASES, Regulation P allows the Company to provide only one notice, provided certain conditions are met. At present, BIEASES does not offer products or services that can be jointly obtained by two or more consumers. Should this practice change, BIEASES will modify this Policy and the Company's opt out notices accordingly.
BIEASES must comply with a consumer's opt out direction as soon as reasonably practicable after the Company receives it. A consumer may exercise the right to opt out at any time. A consumer's direction to opt out under Regulation P is effective until the consumer revokes it in writing or, if the consumer agrees, electronically.
When a customer relationship terminates, the customer's opt out direction continues to apply to the nonpublic personal information that BIEASES collected during or related to that relationship. If the individual subsequently establishes a new customer relationship with the Company, the opt out direction that applied to the former relationship does not apply to the new relationship.
When BIEASES is required to provide opt out notices, the Company must do so in accordance with the timing and delivery method requirements for initial, annual, or revised privacy notices.
Regulation P provides model opt out notices that meet the notice content requirements set forth above. It is the Company's policy to use the model form to ensure safe harbor.
BIEASES restricts access to NPI about consumers to its employees and partners who have a business reason to know BIEASES information (e.g., to process transactions or provide services). The Company maintains physical, electronic, and procedural safeguards that align with federal standards to guard consumer information. To ensure the protection of this information, BIEASES will implement an information security program that is compliant with the GLBA Safeguards rule in accordance with Section 15 USC §6801(b):
For more information on how BIEASES complies with the GLBA's Safeguards Rule, refer to the Company's Information Security Policy.
In general, the legal standards set forth by Regulation P supersede State law. However, in cases where State law offers more protections to consumers than Federal law, State law will prevail. To ensure all State privacy requirements and considerations are adequately addressed, the CEO will engage legal counsel as necessary.
Enacted in 2018, the California Consumer Privacy Act ("CCPA") provides consumers with more control over the personal information that businesses collect about them. Under the CCPA, residents of California may exercise any of the following:
BIEASES provides consumers with an Online Privacy Notice informing them of the Company's privacy and information sharing practices, and includes special disclosures related to California residents' rights under the CCPA. Refer to BIEASES' Online Privacy Notice for more information.
BIEASES will maintain all documentation related to this Privacy Policy for a period of at least five years, including but not limited to all policies, procedures, communications, and training.
Failure to comply with the regulatory requirements set forth in this Policy may result in civil liability and penalties and/or criminal liability.