Privacy Notice
Effective October 2026
D.I.T.C. LLC operating as DITC.io · www.ditc.io · Version 1.0
This is the notice shown in the DITC Wallet portal, with one addition for the forms on this website. It applies to www.ditc.io and to DITC Wallet (DITC Business and DITC Personal): the application forms and the client portal. It replaces the Privacy Policy version 4.0 of 1 August 2026.
Who we are
DITC.io and DITC Wallet are run by D.I.T.C. LLC, 601 Brickell Key Drive, Suite 700, Miami, FL 33131, United States (“DITC”, “we”). We decide how your personal data is used, so we are its controller. Questions about your data: privacy@ditc.io.
What we collect
- Who you are: name, date of birth, nationality, address, e-mail, phone, tax number, your passport or ID card and proof of address, and a selfie or short video if the identity check asks for one.
- Your company (Business): company details and documents, and the directors, owners and controllers, with the share each owner holds.
- Money: where your money comes from, what you expect to do with the account, your balances, payments, exchanges, beneficiaries and crypto addresses.
- Use of the portal: sign-in times, IP address, browser, security events and what you accept. We use only the cookies needed to keep you signed in. We use no advertising or analytics cookies.
- Website forms: what you send us through the forms on www.ditc.io (name, company, e-mail, phone, your message and any files), and which link or page brought you to us. The website sets no advertising or analytics cookies; a form you have not sent yet may be kept in your own browser until you send it.
Most of this comes from you. Some comes from identity and screening checks (sanctions, politically exposed persons, adverse media) and from the banks that handle your payments.
Why we use it, and on what legal basis
| Why | Legal basis |
|---|---|
| Open and run your account, make your payments and exchanges | Our contract with you, or steps you ask for before it |
| Check identity and ownership, screen for sanctions, prevent money laundering and fraud, report to authorities | Legal obligation |
| A selfie or video for the identity check | Your explicit consent, given in the check itself |
| Keep the portal secure and records of what you accepted | Our legitimate interest in a safe service that we can prove |
| Answer complaints and questions | Contract and legal obligation |
| Answer what you send us through the website | Steps you ask for before a contract, or our legitimate interest in replying |
If you don’t give us what the law requires us to check, we cannot open your account. We do not sell your data, and we do not use it for marketing without your consent. Every decision to open, refuse or close an account is made by a person.
Who we share it with
Only what each one needs, under contract and confidentiality:
- identity-verification and screening providers;
- the regulated payment, banking and crypto custody partners that hold your money and carry out your payments (they also check you under their own legal duties);
- our electronic-signature provider;
- our hosting and e-mail providers;
- auditors and professional advisers;
- regulators, the police and courts, when the law requires it.
Transfers outside the UK and the EU
DITC is in the United States, and some of our partners are in other countries. When your data leaves the UK or the EU, we protect it with the European Commission’s standard contractual clauses (and the UK addendum), or we send it to a country with an adequacy decision. Write to us for a copy of the safeguards.
How long we keep it
For as long as you are a client, and then five years after the account is closed or the application ends, as anti-money-laundering law requires; longer only if a law or an investigation requires it. The identity-check selfie or video is kept by the verification provider only as long as the check needs it.
Your rights
You can ask us for a copy of your data, to correct it, to delete it, to limit how we use it, to move it to someone else, and to object to how we use it. Where you gave consent, you can take it back at any time. Some rights are limited while the law makes us keep records. Write to privacy@ditc.io; we answer within one month.
If you are not happy with how we handled your data, tell us first, please. You can also complain to the Information Commissioner’s Office in the UK (ico.org.uk, 0303 123 1113) or to the data protection authority in your EU country.
Changes
When we change this notice, we put the new version here and in the portal, and tell clients in the portal. The portal records which version you saw when you applied.