Privacy Policy

ClickExchange is a currency exchange business with three branches in the Montréal area, Québec, Canada. We are registered as a Money Services Business (MSB) with the Financial Transactions and Reports Analysis Centre of Canada (FINTRAC).

This Privacy Policy applies to personal information collected through our website — including the online reservation service — and at our branches. It explains what we collect, why, how we protect it, and what rights you have.

We collect personal information in three contexts. We do not accept or process any payment online — no payment card or banking information is ever collected through our website.

• Online reservation form: your name, email address or phone number, preferred currency and amount, chosen branch, and appointment date and time.
• In-branch transaction: government-issued photo identification (required by federal law), the currencies and amounts exchanged, and the transaction date and branch.
• Website visit: device type, browser, pages viewed, approximate location, IP address, and referral source — collected automatically via cookies and analytics tools.

We collect personal information only for specific, legitimate purposes:

• To process your online reservation and confirm your appointment.
• To verify your identity and complete your currency exchange transaction.
• To comply with our legal obligations under the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA) and FINTRAC regulations.
• To report large cash transactions (over $10,000 CAD) and suspicious transactions as required by federal law.
• To improve our website and understand how visitors use it.
• To respond to inquiries you send us.

We do not sell, rent, or trade your personal information. We share it only when required:

• FINTRAC and law enforcement: we are legally required to report certain transactions and respond to lawful requests from regulatory authorities.
• Service providers: companies that help us run our website (e.g., web hosting, analytics). These providers are contractually required to protect your information and may not use it for their own purposes.
• Our branches: to fulfill your online reservation.

ClickExchange is registered with FINTRAC as a Money Services Business (Registration No. M17831726) and licensed by Revenu Québec (Licence No. 12347). As a federally registered MSB, we are required by the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA) to:

Verify the identity of customers conducting certain transactions using valid government-issued photo identification.

Keep records of customer identification and transactions for a minimum of five (5) years.

Report large cash transactions of $10,000 CAD or more to FINTRAC within 24 hours.

Report suspicious transactions where we have reasonable grounds to suspect money laundering or terrorist financing.

These legal obligations take precedence over our general privacy practices and cannot be waived by customers.

Retention periods depend on the type of information:

• Transaction records and identification documents: 5 years from the date of the transaction, as required by the PCMLTFA.
• Online reservation data (if no transaction completed): 12 months, then permanently deleted.
• Website analytics data: up to 26 months.
• Email and phone communications: 2 years.

Under Quebec's Act Respecting the Protection of Personal Information in the Private Sector (Law 25) and the federal Personal Information Protection and Electronic Documents Act (PIPEDA), you have the following rights:

• Access: request a copy of the personal information we hold about you.
• Correction: ask us to correct inaccurate or incomplete information.
• Deletion: request that we delete your information, subject to legal retention obligations.
• Portability: receive your information in a structured, commonly used format.
• Withdrawal of consent: withdraw consent to non-essential uses of your information at any time.
• Complaint: file a complaint with the Commission d'accès à l'information du Québec (CAI) or the Office of the Privacy Commissioner of Canada.

We take reasonable precautions to protect your personal information from unauthorized access, use, or disclosure. These include secure HTTPS connections on our website and restricted access to branch transaction records.

No method of data transmission or storage is completely secure. If we become aware of a data breach that creates a real risk of significant harm, we will notify affected individuals and the Commission d'accès à l'information (CAI) within the timeframes required by law.

Our website uses cookies. Please see our Cookie Policy for full details on what cookies we use, why, and how to control them.

Our website and services are intended for individuals 18 years of age or older. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from a person under 18, please contact us so we can delete it.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The date of the latest revision is shown at the top of this page. We encourage you to review this policy periodically.

For questions about this policy, to exercise your rights, or to report a privacy concern:

ClickExchange — Montréal, Québec, Canada Email: info@clickexchange.ca Phone: +1 (514) 665-8328

Person in Charge of the Protection of Personal Information (as required by Quebec Law 25): Compliance Officer, ClickExchange

We aim to respond to all privacy inquiries within 30 days.