PRIVACY POLICY
General
This privacy policy (“Privacy Policy”) governs the manner in which Awards Media Group Inc., a legal entity under the laws of Canada (“GIM PRO”, “we”, “us”, or “our”), collects, uses, processes, stores, and discloses information received from users of our application (“Application”) and/or website gim.pro (“Website”) in order to provide users with services available through Application (the “Services”).
The Services available through the Application may include services provided by GIM PRO as well as services provided by third-party service providers, including payment service providers, banks, and financial institutions. GIM PRO does not itself provide regulated payment or financial services unless explicitly stated otherwise.
Awards Media Group Inc., as the data controller, processes your personal data in accordance with The Personal Information Protection and Electronic Documents Act, PIPEDA, and The Privacy Act and other applicable legislation governing the storage, processing and use of personal data. If you are located in the European Economic Area (“EEA”), the United Kingdom, or Switzerland, we process your Personal Data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and other applicable data protection laws.
We collect and process Personal Data to provide Services to you, ensure the proper functioning of Services, identify you, and ensure the security of Services.
We process Personal Data on the following legal bases: (a) performance of a contract, where processing is necessary to provide the Services to you; (b) compliance with legal obligations, including AML/CFT, KYC, fraud prevention, tax, accounting, and regulatory obligations; (c) legitimate interests, including fraud prevention, security of the Application and Website, improvement of the Services, support, analytics, and protection of our legal rights; and (d) your consent, where required by applicable law, including for marketing communications, non-essential cookies, push notifications, and certain device permissions.
This Privacy Policy applies to the Application, the Website, the Services, and products offered by GIM PRO.
By using the Application, the Website, the Services, and products offered by GIM PRO, you acknowledge that you have read and understood this Privacy Policy.
This Privacy Policy is an integral part of GIM PRO Platform Terms & Conditions.
If you have any questions regarding this Privacy Policy or your Personal Data, please contact our Data Protection Officer at dataprotection@gim.pro or contact support@gim.pro for general inquiries. Our address is: 18 King Street East, Suite 1400, Toronto, Ontario, M5C 1C4, Canada.
Personal Data collection and use
We collect the following Personal Data:
Personal Data that you provide us for registration, including:
your contact details, surname, name, address, email address, telephone number, instant messenger, and social media contact details;
your identification (tax) number, date of birth.
Know Your Customer (KYC) Personal Data from you, third parties, or publicly available sources, including:
passport or other identity document;
your photo and selfie captured or uploaded for identity verification purposes;
documents establishing your source of funds;
results of KYC or Politically Exposed Person (PEP) checks, including information collected by our service providers.
Personal Data we receive for AML/CFT (Anti-Money Laundering / Countering The Financing Of Terrorism) purposes.
Personal Data you provide as part of your Account with GIM PRO, including:
password;
login;
marketing preferences.
Personal Data relating to your use of Services, including:
your orders and instructions submitted through the Application;
your transactions initiated through your Account with GIM PRO and executed by third-party service providers, including your accounts with third-party banks and financial institutions, payment card details, including PAN, IBAN, SWIFT/BIC, beneficiary bank name, PayPal email address, cryptocurrency wallet addresses, GIM partner identifier, beneficiary name, beneficiary postal address, country, state or province, city, postal code, street address, the amount, originator, or beneficiary, and time and date of the transfers you make or receive;
information about the digital device through which you access Services, such as device type, operating system, screen resolution, unique device identifiers, or mobile network system;
IP address and name of the city nearest to you at the time of registration and at the time of the last login to the Application;
date and time of login and requests;
push notification tokens and related device identifiers used to deliver service notifications through Firebase Cloud Messaging or similar tools.
Personal Data in your correspondence with us by email, telephone, messaging, online chats, social media, or otherwise, including:
whether you have clicked on links in electronic communications from us, such as the URL clickstream to our Website;
Personal Data that you provide in response to our surveys.
Personal Data that we collect from third parties to register you as a customer or provide you with Services:
Personal Data related to payments to or from your accounts provided by payment processing services, banks, card schemes, and other financial service firms;
Personal Data from credit reference agencies or fraud prevention agencies.
Personal Data that we collect through your use of our Application or Website, including:
device information;
hardware and browser settings;
date and time of visits;
the pages you visit, the length of the visit, your interactions with the page, methods to browse away from our Website, and search engine terms you use;
IP address;
Application usage events, screen views, install and launch events, crash reports, non-fatal error reports, diagnostic data, and stack traces collected through Firebase Analytics, Firebase Crashlytics, or similar application analytics and diagnostics tools.
Personal Data relating to third-party recipients. If you save or enter details of a recipient, beneficiary, or counterparty, we may process Personal Data relating to such third party, including name, payment details, bank account details, wallet address, PayPal email address, and postal address. By providing such data, you represent and warrant that you have the right to provide it to us for the purposes of using the Services and that such data is accurate and provided for lawful purposes.
We may use your Personal Data as follows:
We may use Personal Data that you provide to register with us to:
process your registration request;
on-board you as a customer;
provide Services;
manage and administer Services;
administer your Account in the Application;
communicate with you about your Account in the Application and Services;
send personalized offers of services and products where permitted by applicable law or where you have provided consent.
We may use Know Your Customer (KYC) Personal Data to:
carry out regulatory checks and meet obligations to the regulators;
help us ensure that our customers are genuine and to prevent and detect crime, such as fraud, money laundering, terrorist financing, and other offenses, including those involving identity theft.
We may use Personal Data that you provide as part of your Account with GIM PRO to:
manage and administer your Account;
communicate with you about your Account and Services.
We may use Personal Data relating to your use of Services to:
manage and administer Services and systems;
check if you are in a location or using a device consistent with our records in order to help prevent fraud;
develop and improve Services based on analyzing this information, the behaviors of our users, and the technical capabilities of our users;
ensure effective communication with customers and train our personnel;
send push notifications, including security, transactional, operational, and service-related notifications, where permitted by applicable law and your device settings.
We may use Personal Data that we collect from third parties to:
register you as our customer;
provide Services to you;
manage and administer Services and systems;
prevent and detect fraud.
We may use Personal Data that we collect through your use of our Application and/or Website to:
develop new Services;
identify and eliminate issues with the Application and Website;
monitor the way our Application, Services, and Website are used in order to determine the locations they are accessed from, devices they are accessed from, places where our customers have come from online (e.g., links on other websites or advertising banners); and to understand and analyze peak usage times, the functionality and information that are the most and least accessed, the structure of our customers, the ways that our Application and Website are used by different groups of users, and what attracts our customers to our Application, Website and Services;
collect and analyze application usage, diagnostics, crash reports, and performance data through Firebase Analytics, Firebase Crashlytics, or similar tools.
Rights of the Personal Data subject
You have the following rights with respect to your Personal Data:
Right to be informed – You have the right to be informed about the collection and use of your Personal Data and the following information: who has collected and processed Personal Data; the purposes for processing your Personal Data; retention periods for Personal Data; and who Personal Data will be shared with, etc.
Right to access – You have the right to obtain confirmation from us as to whether or not your Personal Data is being processed, the purposes of the processing, the categories of Personal Data collected, the recipients to whom the Personal Data has been or will be disclosed, etc.
Right to rectification – You have the right to obtain from us rectification of inaccurate Personal Data concerning you as well as the right to have incomplete Personal Data completed.
Right to erasure (“right to be forgotten”) – You have the right to ask for the deletion of your Personal Data if the Personal Data is no longer necessary in relation to the purposes for which it was collected or otherwise processed or if there is no other legal ground for the processing or storage.
Right to restriction of processing – You have the right to ask us to restrict further processing of your Personal Data, so that in each case the data may be processed only with separate consent from you or as otherwise provided by data protection laws.
Right to data portability – You have the right to receive your Personal Data in a structured, commonly used, and machine-readable format and the right to transmit that data to another controller where technically feasible.
Right to object – You have the right to object at any time, on grounds relating to your particular situation, to the processing of your Personal Data if there are no legitimate grounds for processing it which override your interests, rights, and freedoms or for the establishment, exercise, or defense of legal claims.
Right to withdraw – You can withdraw your consent to your Personal Data being processed if you believe that we do not have the proper rights to do so.
Right to delete your Account in the Application - You can delete your Account in the Application as well as delete your Personal Data according to Section 14 herein.
Right to lodge a complaint - If you are located in the EEA, the United Kingdom, or Switzerland, you have the right to lodge a complaint with your local data protection supervisory authority. In the United Kingdom, this is the Information Commissioner’s Office (ICO). In the EEA, you may contact the supervisory authority in your country of residence, place of work, or place of the alleged infringement.
To exercise your rights, please contact our Data Protection Officer at dataprotection@gim.pro.
Direct marketing
Please note that if you have given explicit consent to marketing communications, this can be withdrawn at any time. You can also unsubscribe from our marketing communications. We will only send marketing communications where permitted by applicable law or where you have provided consent.
Please be aware that from time to time we may need to contact you regarding Application and/or Website operation issues or to adhere to the performance requirements of GIM PRO Platform Terms & Conditions.
Legal requirements
We need to collect certain types of Personal Data to comply with legal requirements relating to our anti-fraud, anti-money-laundering, counter-terrorist financing, and Know Your Customer obligations. If this Personal Data is not provided, we cannot provide Services to you.
Your Personal Data may also be processed if it is necessary on reasonable request by a law enforcement or regulatory authority, body, or agency or in the defense of a legal claim. We will not delete Personal Data if relevant to an investigation or dispute. It will continue to be stored until the investigation is complete or the dispute is fully resolved.
Special categories of Personal Data
We do not collect or store any information about children under 18. Minors and children should not use our Application and Services. By using our Application and Services, you represent that you have the legal capacity to enter into a binding agreement.
We may process certain categories of sensitive Personal Data where required for compliance with legal obligations, including AML/CFT and KYC requirements, or where otherwise permitted by applicable law. Such data may include identity documents, photographs, selfie images, verification data, and information generated during sanctions, PEP, fraud prevention, or identity verification checks. We process such data only where necessary and subject to appropriate safeguards.
The Application may support biometric authentication, such as Face ID, Touch ID, or Android fingerprint authentication. All biometric matching is performed locally on your device by the operating system, including Apple Local Authentication or Android BiometricPrompt. We do not collect, transmit, or store your biometric template, image, or biometric identifier for this purpose.
Security of Personal Data
We use a variety of physical, technical, and administrative security measures to ensure the confidentiality of your Personal Data and protect your Personal Data from loss, theft, unauthorized access, misuse, alteration, or destruction, as well as from other illegal actions of third parties.
We implement security measures such as data encryption when in transit and storage, data storage diversification, strict physical access controls to buildings and files, anonymization technology, asset diversification, strict physical access by a minimal number of individuals, using multisign access tools, and compliance with confidentiality commitments.
We make sure that we regularly review our information security policies and measures and, where necessary, improve them.
Sharing your Personal Data
We do not sell, trade, or rent our users’ Personal Data to any third parties. We may transfer certain Personal Data of users (such as your contact and/or identification information) to third-party financial institutions in exceptional cases, when required by the rules and policies of such financial institutions, in order to identify users and provide them with Services.
Users acknowledge and consent that we can transfer their Personal Data to third parties that carry out KYC checks and fraud database checks. Such third parties have been assessed by us and guarantee compliance with legislation on the processing of personal data and with this Privacy Policy.
We may engage third-party service providers who act as processors or service providers on our behalf and process Personal Data only in accordance with our instructions and applicable data protection laws. Such service providers may include KYC providers, payment processors, banks, financial institutions, fraud prevention providers, cloud hosting providers, analytics providers, crash reporting providers, communication providers, and notification providers.
We use third-party KYC and identity verification providers, such as AML Bot, to perform identity verification, document verification, selfie checks, sanctions screening, PEP checks, fraud prevention checks, and other KYC/AML procedures. Such providers may process your identity documents, photographs, selfie images, verification results, and related Personal Data for these purposes.
We use services provided by Google LLC, including Firebase Analytics, Firebase Crashlytics, and Firebase Cloud Messaging. These services may process certain Personal Data, including device identifiers, usage events, screen views, install and launch events, crash logs, diagnostic data, stack traces, and push notification tokens, as processors or service providers on our behalf.
We may also disclose Personal Data to our affiliates and associated companies where necessary to provide, support, administer, improve, secure, or enforce the Services, provided that such recipients are subject to appropriate confidentiality and data protection obligations.
Retention of Personal Data
We retain your Personal Data only for those periods necessary to fulfill the various purposes outlined in this Privacy Policy unless a longer retention period is required or allowed by law.
For the purposes of complying with our legal obligations and the world industry standards for Personal Data storage, you give us consent and permission to keep records of such information throughout the term of your Account as well as for Personal Data indicated in item 14.3 herein for five (5) years after the closure or deletion of your Account.
We may retain Personal Data for longer periods where required or permitted by applicable law, including where necessary to comply with legal, regulatory, tax, accounting, AML/CFT, fraud prevention, dispute resolution, investigation, or legal claim obligations.
Unless a longer retention period is required or permitted by law, we generally apply the following retention periods:
KYC, AML/CFT, identity verification, sanctions, PEP, fraud prevention, transaction history, balance, and payment-related records: for the term of your Account and for five (5) years after closure or deletion of your Account, or longer where required by applicable law or necessary for an investigation, dispute, or legal claim;
Firebase Crashlytics crash reports and diagnostic data: up to ninety (90) days, unless a longer period is required to investigate security, technical, legal, or compliance issues;
Firebase Analytics usage events and analytics data: up to fourteen (14) months, unless a shorter or longer period is configured in the relevant analytics settings or required by applicable law;
push notification tokens: until you uninstall the Application, disable notifications, sign out, delete your Account, or the token is otherwise invalidated;
support correspondence and customer service communications: up to twenty-four (24) months after the matter is closed, unless a longer period is required for compliance, dispute resolution, or legal claims;
authentication tokens stored on your device: until sign-out, uninstall, token revocation, or Account deletion.
Personal Data disclosure
We may disclose some of your Personal Data to our partners and/or our affiliated and associated companies ("Partners") who provide services to you or work with us to provide you with the Services if they are bound by an obligation to ensure an adequate level of protection of your Personal Data. We provide such data to Partners with the limited purpose of providing and offering services and/or Services for you.
We may disclose your Personal Data in accordance with the law or court order, in court proceedings, and/or based on requests from government authorities in or outside the territory of your country of residence. We may also disclose your Personal Data if we determine that such disclosure is necessary or appropriate for national security and/or law enforcement.
We may also disclose your Personal Data if we determine that the disclosure is necessary to enforce the GIM PRO Platform Terms & Conditions or protect our activities and our users.
Personal Data transfers
We may transfer to, and store your Personal Data we collect in, countries other than the country in which the data was originally collected, including countries outside the European Economic Area (“EEA”), the United Kingdom, and Switzerland. Those countries may not have the same data protection laws as the country in which you provided the data. When we transfer your Personal Data to other countries, we will protect the data as described in this Privacy Policy and comply with applicable legal requirements providing adequate protection for the transfer of data to countries outside the EEA, the United Kingdom, and Switzerland.
If you are located in the EEA, the United Kingdom, or Switzerland, we will only transfer your Personal Data if:
the country to which the Personal Data will be transferred has been granted a European Commission adequacy decision; or
we have put in place appropriate safeguards in respect of the transfer, for example, we have entered into EU standard contractual clauses and required additional safeguards with the recipient, or the recipient is a party to binding corporate rules approved by an EU, UK, or Swiss supervisory authority.
where required, we implement appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission, the UK International Data Transfer Agreement or Addendum, and supplementary technical and organizational measures where necessary.
Cookies
Cookies are text files placed on your computer to collect standard internet log information and visitor behavior information. When you visit our Website, we may automatically collect information about you using cookies or similar technology. For more information on cookies, you may visit www.allaboutcookies.org.
We use cookies in a variety of ways to improve your experience with our Website, including:
enabling you to stay logged in;
understanding how you use our Website;
analyzing the behavior and interests of our Website visitors.
We use the data we receive from the cookies on our Website to generate reports. We analyze these reports to make changes to the operation of the Website that will improve the client and user experience.
There are several kinds of cookies. Our Website uses the following categories of cookies, where applicable:
Functional – We use these cookies so that we can recognize you on our Website and save your previously selected settings, which may include your preferred language and location.
Analytics – We use these cookies to understand how users interact with our Website and to improve the Website and Services.
Advertising – If we use advertising cookies, we use them to collect information about your visits to the Website, the content viewed, the links you followed, and information about your browser, device, and IP address. If the Website does not use advertising cookies, this category will not apply.
Where advertising cookies are used, we may sometimes transfer some of this data to third parties for advertising purposes. We may also transfer data collected through cookies to newsletter service providers. This means that when you visit another Website, you may be shown advertisements based on your views on our Website.
You can set your browser so that it does not accept cookies. Visit www.allaboutcookies.org to learn how to delete cookies from your browser. However, in such cases, some Website features may not work.
We use Google Analytics, a web analytics tool that helps us understand how users engage with our Website. Like many services, Google Analytics uses first-party cookies to track user interactions. In our case, they are used to collect information about how users use our Website. This information is used to compile reports and to help us improve our Website. These reports disclose Website trends without identifying individual visitors.
Where required by applicable law, including in the EEA and the United Kingdom, we will obtain your prior consent before placing or using non-essential cookies, including analytics and advertising cookies. You can manage your cookie preferences through the cookie consent tool available on our Website, where applicable.
Account security measures, camera permission
To gain access to the Account, the user must provide their valid email address and confirm it by using the link provided in the email sent to the specified address. This process ensures the security and confidentiality of the user's Account, confirming that only the owner of the email address has access to the Account.
For additional Account protection, we offer users the following features:
The ability to set up two-factor authentication (2FA);
The option to utilize biometric authentication, such as Face ID, Touch ID, or Android fingerprint authentication, where supported by your device.
To complete identity verification (KYC), the Application requires access to the user's device camera to capture an image of a government-issued identity document and a selfie. The camera is activated only when the user initiates the KYC flow and is not used at any other time.
During identity verification, the Application may request access to the user's device photo library so that the user can select and upload an existing image of their identity document instead of taking a new photo.
The Application may use the camera to scan QR codes, including cryptocurrency wallet addresses that the user wants to add to the Application. The camera is activated by the user when the user selects the option to scan the QR code. The camera stops working when the user closes the QR scan screen or successfully scans the cryptocurrency wallet address. The camera will not work outside the Application.
Biometric authentication is used only to help you unlock or access the Application more securely. All biometric matching is performed locally on your device by the operating system. We do not collect, store, or transmit your biometric template, biometric image, or biometric identifier.
The Application may request permission to send push notifications. Push notifications may be used for security, transactional, operational, account, and service-related communications. You may manage or disable push notifications through your device settings.
Account and Personal Data deleting
You have the right to delete your Account in the Application as well as certain Personal Data stored by GIM PRO at any time upon completion of all pending transactions in which you participate, payment of applicable fees and fulfillment of all other obligations arising from use of the Services.
To delete an Account in the Application and if you have any technical problems, including but not limited to the lack of access to your Account, you can contact our Data Protection Officer at dataprotection@gim.pro.
Together with the Account, we also undertake to delete your Personal Data, with the exception of the following information:
Personal data provided by you during registration, including:
surname, first name, residential address, e-mail address, telephone number;
your identification (tax) number, date of birth.
Know Your Customer (KYC) Personal Data;
Personal Data we receive for AML/CFT purposes;
Information about your balance and transaction history, payment instructions, beneficiary details, recipient data, and other records required for AML/CFT, fraud prevention, accounting, tax, regulatory, or legal compliance purposes.
We store your Personal Data specified in item 14.3 herein, because the storage of such information is necessary to prevent and detect crimes and fulfill our obligations to prevent and detect crime, such as fraud, money laundering, terrorist financing, and other offenses.
Your Personal Data defined in item 14.3 herein may be necessary for a certain investigation or dispute. We will not delete Personal Data if it is necessary for any investigation or dispute. They will be retained until the investigation is complete or the dispute is fully resolved.
Privacy policy of other sites and applications
Our Website and Application may contain links to other websites and applications. Our Privacy Policy only applies to our Website and Application, so if you follow a link to another website or application, you should check their privacy policy.
Changes to the Privacy Policy
We reserve the right to amend the Privacy Policy at our discretion and at any time.
Any changes to this Privacy Policy will take effect from the moment it is published in the Application and/or on the Website unless otherwise stipulated herein.
You shall regularly review the Privacy Policy and pay attention to its revisions.
Your continued use of our Application, Website, and Services following the posting of changes constitutes your acceptance of the amended Privacy Policy.
This Privacy Policy was last amended on May 11, 2026.