Privacy policy

Privacy Policy

Privacy and data security have an enormously high priority for wCARD. It is very important to us that you feel safe during your visit to our website and while using our services as well as over the course of all other business transactions with us. As soon as you make use of products and/or services of wCARD, you entrust us with the processing of your personal data. wCARD wants to give you the best possible experience with our platform to ensure that you enjoy the usage of our products and services now and in the future. That’s why we want to understand the user behavior on our platform in order to continuously improve it.

Therefore, in this Privacy Notice, we want to transparently inform you which personal data we collect from you and why and who might receive it. Furthermore, we would like to inform you which precautions we take to protect your personal data, which rights you have in this context and to whom you can turn for data protection concerns.

Regarding the terms used in this Privacy Notice, such as “Processing” or “Controller”, we refer to the definitions of the GDPR.

We have put together this privacy policy to let you know:

• Who we are
• When we collect your personal data
• How we collect your personal data
• What personal data we collect about you
• Why we process your personal data
• With whom we share your personal data
• For how long we store your personal data
• How do we protect your data?
• What your rights are
• Contact and complaints
• Changes to this privacy policy

Who we are

wCard Finance, UAB is a company organized under the laws of Lithuania with registration number 306288861 and having its registered address at Didžioji g. 18, LT-01128, Vilnius, Lithuania (“wCARD”, “we”, “us”, “our”).

wCARD has created the App and the https://wcard.finance/ web portal (jointly the “Platform”) through which customers in the European Economic Area can access and use virtual and physical card services for the purpose of, among other things, enabling transactions with electronic money.

We have partnered with Intergiro Intl AB (“Intergiro”), a Swedish fintech company that provides electronic money account services and payment card services. Intergiro provides payment services, and we provide you with a first class Platform through which you access and use the payment services.

You sign up with wCARD and within our Platform you apply to become a customer of Intergiro to utilize the payment services. Generally, you are provided with a payment account and a payment card. You can read more about the payment services in the Payment Services Terms and Conditions of Intergiro. You need to accept the Payment Services Terms and Conditions and if you are onboarded as a customer of Intergiro in accordance with such terms and conditions, you will be able to access and use the payment services using our Platform. When you use the payment services within our Platform, Intergiro will process your personal data.

Intergiro is the controller and responsible for the processing of your personal data when you use the payment services, as further described in Intergiro’s privacy policy.

When we collect your personal data

wCARD will start processing your personal data when you access this website and/or the APP.

How we collect your personal data

We collect personal data about you from different sources, including:

1. personal data received from you, such as when you sign up for a platform account, including contact information;
2. personal data about you received from external sources, e.g. social media platforms like facebook; as well as information service providers like  Intercom;
3. personal data that is shared with us by Intergiro, mainly customer support information which we need to be able to assist you with customer support matters but also personal data related to your use of Intergiro’s payment services;

What personal data we collect

We have divided the personal data we process into the following categories:

1. Contact information – such as name and other information about yourself (e.g. address, telephone number, e-mail address, etc.).
2. Information about how you interact with wCARD – for example how you use the platform account.
3. Device information – for example IP address, language settings, browser settings, time zone, operating system, platform and screen resolution.
4. Customer support information – information that you provide to our customer support so we can help you with resolving your enquiries.

Why we process your personal data

According to the GDPR we need to have a purpose and a legal basis for the processing of your personal data. Read more about our purpose for processing your personal data below.
At wCARD, the legal basis for processing your personal data is either:

1. the agreement you have, or is about to enter into, with us by accepting our terms and conditions or, the agreement you have, or is about to enter into, with the Intergiro by accepting Intergiro’s terms and conditions.
2. legal obligations we are bound by, such asv anti-money laundering regulations.
3. our legitimate interest, such as providing customer support or keeping you informed about product updates.

In very rare cases we may also process your personal data if we have received your explicit consent to do so. In such a case you can always withdraw your consent at any time.

We use the personal data we collect for the following purposes:

• the administration and management of our relationship with you, such as reviewing your application to become wCARD’s customer, setting up your platform account, conducting performance analytics and keeping you informed about product updates.
  • The legal basis for such processing is (i) the agreement you have entered into, or is about to enter into, with us or (ii) our legitimate interest. Our view is that keeping you up to date on the products and services available to you creates meaningful knowledge to you.
• Provision of our services.
  • The legal basis for the provision of our services is the agreement you have entered into with us.
• Accounting and auditing requirements.
  • The legal basis for such processing is mandatory law, such as the REPUBLIC OF LITHUANIA ACCOUNTING LAW and the LAW OF THE REPUBLIC OF LITHUANIA ON FINANCIAL REPORTING BY UNDERTAKINGS.
• Business development, such as compiling statistics and analysing the data in order to improve our services.
  • The legal basis for such processing is our legitimate interest in maintaining our relationship with you and to improve our services. Our view is that you as our customers benefit from improvements to the services.
• Assess or defend legal claims against us or to protect ourselves from fraud and in connection with a reorganisation, transfer of business, merger, IPO or acquisition.
  • The legal basis for such processing is our legitimate interest to defend us against legal claims, to protect you and our company from fraud, and to be able to reorganise or scale-up our business.

With whom we share your personal data

We may share your personal data with our affiliates and trusted third party service providers in order to be able to provide our services. These trusted third party service providers may include services of delivery of goods, search engine facilities, advertising and marketing. In some cases, the third parties may require access to some or all of your personal data. Where any of your personal data is required for such a purpose, we undertake steps to ensure that your personal data is processed in accordance with the requirements of the applicable data protection laws.

• We also share data with our other trusted third party service providers, who act as our processors:
• Suppliers of payment processing services;
• Payment card personalisation bureau (if you have applied for a physical payment card);
• Suppliers of identification services;
• Suppliers of screening services to prevent anti-money laundering, fraud and similar crimes; and
• Suppliers of IT systems and cloud services.

We have carefully reviewed our service providers and secured that their processing of your personal data is compliant with EU standards and the GDPR.

Your personal data will also, when applicable, be shared with the following parties which themselves are data controllers of the processing of personal data:

• Intergiro, for the purposes of providing the second line customer support to you
• The legal basis is the agreement you have entered into with Intergiro
• Intergiro, for any specific purpose as further described in Intergiro’s Payment Services General Terms and Conditions and Intergiro’s privacy policy
• The legal basis is the agreement you have entered into with Intergiro

We are sometimes required to share personal data with parties operating outside the EU. In these cases, we ensure that the data is transferred in accordance with the applicable requirements of the GDPR, primarily the standard contract clauses (SCC) and complementary safety measures, or if available, other means in compliance with the GDPR.
If wCARD engages in a merger, acquisition, reorganisation or sale of some or all of wCARD’s assets or shares, financing, initial public offering or similar transactions or proceedings, or steps in contemplation of such activities (such as due diligence), wCARD may share personal data with third parties, subject to standard confidentiality arrangements.

For how long?

We store your personal data for the purposes set out above during the term of our contractual relationship with you, for as long as we otherwise have a meaningful contact with you or as may otherwise be required by law.

When the purpose for which your personal data was collected is no longer relevant, we will stop processing your personal data and either delete or anonymise it in a secure manner. We may retain your personal data for a longer period of time to the extent required by law, by our automated disaster recovery backup systems or if we deem it necessary to assess or defend legal claims.

Under mandatory law, we are required to keep your personal data due to:

• Bookkeeping legislation, for a period of 10 years according to REPUBLIC OF LITHUANIA ACCOUNTING LAW and the LAW OF THE REPUBLIC OF LITHUANIA ON FINANCIAL REPORTING BY UNDERTAKINGS.

How do we protect your data?

We take appropriate security measures in order to maintain the required security of your personal data and ensure its confidentiality, integrity and availability, and to protect it against unauthorised or unlawful processing, and to mitigate the risk of loss, accidental alteration, unauthorised disclosure or access.

Your rights

As a data subject, you have the right to request access to and information about the personal data that we process about you. Additionally, you may also request that we correct (rectify), complete, erase or restrict the processing of personal data regarding you. You also have the right to request a copy of the personal data we process regarding you free of charge.

Where wCARD processes your personal data on the legal ground of consent or fulfilment of contract, you have the right to data portability which means that you can receive the personal data in a commonly used, structured and machine-readable format and you have the right to transfer it to another controller.

You have an absolute right to object to personal data processing done for the purposes of direct marketing.

Do we use online tracking and online advertising techniques?

We use various techniques on our website that allow us and third parties engaged by us to recognize you during your use of our website, and possibly to track you across several visits. This Section informs you about this.

In essence, we wish to distinguish access by you (through your system) from access by other users, so that we can ensure the functionality of the website and carry out analysis and personalization. We do not intend to determine your identity, even if that is possible where we or third parties engaged by us can identify you by combination with registration data.  However, even without registration data, the technologies we use are designed in such a way that you are recognized as an individual visitor each time you access the website, for example by our server (or third-party servers) that assign a specific identification number to you or your browser (so-called «cookie»).

We use these technologies on our website and may allow certain third parties to do so as well. However, depending on the purpose of these technologies, we may ask for consent before they are used. You can also set your browser to block or deceive certain types of cookies or alternative technologies, or to delete existing cookies. You can also add software to your browser that blocks certain third-party tracking. You can find more information on the help pages of your browser (usually with the keyword «Privacy») or on the websites of the third parties set out below.

We distinguish the following categories of «cookies» (including other technologies such as fingerprinting):

• Essential cookies:

Some cookies are necessary for the functioning of the website or for certain features. For example, they ensure that you can move between pages without losing information that was entered in a form. They also ensure that you stay logged in. These cookies exist temporarily only («session cookies»). If you block them, the website may not work properly. Other cookies are necessary for the server to store options or information (which you have entered) beyond a session (i.e. a visit to the website) if you use this function (for example language settings, consents, automatic login functionality, etc.). These cookies have an expiration date of up to 24 months (more details can be found in the Cookie Consent Banner).

• Functional cookies:

In order to optimize our website and related offers and to better adapt them to the needs of the users, we use cookies to record and analyze the use of our website, potentially beyond one session. We use third-party analytics services for this purpose. We have listed them below. Before we use such cookies, we ask for your consent. Performance cookies also have an expiration date of up to 24 months. Further details as to the processing can be found on the websites of the third-party providers (see also Cookie Consent Banner).

• Marketing Cookies:

We and our advertising partners have an interest in targeting advertising as precisely as possible, i.e. only showing it to those we wish to address. We have listed our advertising partners below. For this purpose, we and our advertising partners – if you consent – use cookies that can record the content that has been accessed or the contracts that have been concluded. This allows us and our advertising partners to display advertisements that we think will interest you on our website, but also on other websites that display advertisements from us or our advertising partners. These cookies have an expiration period of a few days to 12 months, depending on the circumstances. If you consent to the use of these cookies, you will be shown related advertisements. If you do not consent to them, you will not see less advertisements, but simply any other advertisement.
In addition to marketing cookies, we use other technologies to control online advertising on other websites and thereby reduce advertising wastage. For example, we may transmit the e-mail addresses of our users, customers and other persons to whom we wish to display advertisements to operators of advertising platforms (for example social media). If these persons are registered with them with the same e-mail address (which the advertising platforms determine by a matching process), the providers display our advertisements specifically to these persons. The providers do not receive personal e-mail addresses of persons who are not already known to them. In case of known e-mail addresses, however, they learn that these persons are in contact with us and the content they have accessed.

We may also integrate additional third-party offers on our website, in particular from social media providers. These offers are deactivated by default. As soon as you activate them (for example by clicking a button), these providers can determine that you are using our website. If you have an account with that social media provider, it can assign this information to you and thereby track your use of online offers. These social media providers process this data as separate controllers.
More details can be found in the Cookie Consent Banner.

We currently use offers from the following service providers and advertising partners (where they use data from you or cookies set on your computer for advertising purposes):

Google Ads
A cookie that shows us how effective our wCard ad campaigns are by tracking how many users click through to our website from a particular ad, and the demographic of those users.

Google Analytics
Allows us to see how many users are on the wCArd website, which pages they are visiting and track how many visitors joined Revolut.

Google Tag Manager
This cookie controls other cookies on the website.

Careers Analytics
A cookie that allows us to understand when a candidate has applied for a job on the wCard website after clicking on one of our job listings on another site.

Microsoft Ads Pixel
Helps us decide which of our products, services and offers may be relevant for you based on your browsing history, as well as to tailor and measure how effective our ads on Bing are.

AppsFlyer Onelink API
Allows us to generate personalised links to help us understand the advertisements users have clicked on before joining wCard.

Contacts and Complaints

If you have any cause for complaint about wCARD’s processing of your personal data, please contact us using the details provided in this Privacy Policy and we will do our best to address your concerns. Customer support is accessible via email on info@wcard.fince. Customer support is available in the English language.

Please be informed that you have the possibility to lodge a complaint with a supervisory authority if you are not satisfied with our processing of your personal data. You may find your local supervisory authority by following this link:

https://edpb.europa.eu/about-edpb/board/members_en

Changes to this privacy policy

This Privacy Notice is not part of a contract with you. We can change this Privacy Notice at any time. The version published on this website is the current version.

Last updated: 23.08.2025