Privacy Policy

1. Information We Collect

When you use our payment gateway services, submit enquiries through our website, or interact with our platform, we may collect the following categories of information:

Information You Provide

• Contact details (name, email address, phone number)
• Business information (company name, registration details, website URL)
• Financial data required for merchant onboarding (bank account details, processing history)
• Identity verification documents as required by applicable regulations
• Communications you send to us (support requests, enquiries)

Information Collected Automatically

• Device and browser information (IP address, browser type, operating system)
• Usage data (pages visited, time spent, referral source)
• Cookies and similar tracking technologies (see Section 5)
• Transaction metadata processed through our gateway infrastructure

2. How We Use Your Information

We process your personal data for the following purposes:

• Service delivery — to provide, maintain, and improve our payment gateway and merchant account services
• Onboarding and compliance — to verify your identity, assess risk, and fulfil regulatory obligations including KYC and AML requirements
• Communication — to respond to enquiries, send service notifications, and provide technical support
• Security and fraud prevention — to detect, investigate, and prevent fraudulent transactions and unauthorized access
• Analytics — to understand how our services are used and to improve platform performance
• Legal obligations — to comply with applicable laws, regulations, and lawful requests from authorities

3. Legal Basis for Processing

We process personal data under the following legal bases:

• Contractual necessity — processing required to fulfil our service agreement with you
• Legal obligation — processing required to comply with applicable financial regulations
• Legitimate interests — processing necessary for fraud prevention, service improvement, and business administration
• Consent — where you have explicitly opted in to marketing communications or non-essential cookies

4. Data Sharing and Disclosure

We do not sell your personal data. We may share information with:

• Acquiring banks and payment networks — as necessary to process transactions and maintain merchant accounts
• Regulatory authorities — when required by law or in response to lawful requests
• Service providers — trusted third parties who assist with hosting, analytics, fraud detection, and compliance (bound by data processing agreements)
• Professional advisors — legal, accounting, and auditing professionals under confidentiality obligations

All third-party recipients are contractually required to protect your data to standards consistent with this policy.

5. Cookies and Tracking

Our website uses cookies and similar technologies to:

• Ensure the website functions correctly (essential cookies)
• Remember your preferences and settings
• Analyse website traffic and user behaviour (analytics cookies)
• Measure the effectiveness of our content and marketing

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect website functionality.

6. Data Retention

We retain personal data for as long as necessary to fulfil the purposes described in this policy, unless a longer retention period is required by law. Specifically:

• Active merchant account data is retained for the duration of the business relationship plus any legally mandated retention period
• Transaction records are retained in accordance with financial regulatory requirements (typically 5–7 years)
• Marketing contact data is retained until you withdraw consent or request deletion
• Website analytics data is retained in anonymised form

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

• Encryption of data in transit (TLS 1.2+) and at rest
• PCI DSS Level 1 certified infrastructure for payment data
• Access controls with role-based permissions and multi-factor authentication
• Regular security audits and penetration testing
• Employee training on data protection procedures

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you
• Rectification — request correction of inaccurate or incomplete data
• Erasure — request deletion of your data where legally permissible
• Restriction — request that we limit processing of your data in certain circumstances
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interests
• Withdraw consent — where processing is based on consent, withdraw it at any time

To exercise any of these rights, contact us at our contact page. We will respond within 30 days.

9. International Data Transfers

As a global payment infrastructure provider operating in 150+ countries, we may transfer personal data across borders. When we do so, we ensure appropriate safeguards are in place, including standard contractual clauses, adequacy decisions, or other legally recognised transfer mechanisms.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. Material changes will be communicated through our website. We encourage you to review this page periodically.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please reach out through our contact page.