Privacy Policy & Cookies

Last amended as of: 19 Jun 2024

This Payop Privacy Policy (hereinafter – “Policy”) sets out the basis on which We collect personal data from You and how We process such data.

In provision of Payop Services as Well as in Our mission to make Payop Services better for everyone at Payop, We collect and use Personal Information of Our Customers, End-User Customers and authorized persons using Payop Services, visitors to Payop Website, or anyone contacting Payop Support Team.

 This Policy will help You better understand how We collect, use, and share such Personal Information.

 PLEASE READ CAREFULLY THIS POLICY, BEFORE USING PAYOP. IF YOU WISH TO BECOME OUR CUSTOMER, YOU SHALL ACCEPT THIS POLICY IN ITS ENTIRETY. IF YOU DISAGREE WITH THIS POLICY, PLEASE DO NOT USE PAYOP.

 The Policy together with the Terms shall be deemed accepted by the Customer upon their clicking the respective button, “I have read and agree to the Terms”.

 The terms used in this Policy shall be understood in accordance with the Merchant Services Terms and the applicable law (Personal Information Protection and Electronic Documents Act (PIPEDA) and Privacy Act).

 In this policy, “We”, “Us” or “Our” refers to Payop, or any organization within the Payop Group, as appropriate. Although this policy is in common use by the Payop, except where applicable laws provide otherwise, each organization is only responsible to You in relation to its own collection and use of Your personal data.

This policy sets out the manner in which We collect, use, disclose and process Your personal data when You:

1. l access or use Our Website www.payop.com (Our “Website”) and services; and/or

2. l provide Us with Your personal data, regardless of the medium through which such personal data is provided.

By providing Us with personal data, You agree to the terms of this Privacy Policy and You consent to Our collection, use, disclosure and processing of personal data on these terms.

DO NOT provide any personal data to Us if You do not accept this Privacy Policy.

 This Privacy Policy supplements but does not supersede or replace any other consents You may have provided to Us, or any other agreements or arrangements that You may have with Us, in respect of Your personal data.

  1. How we collect your personal data

We collect personal data that is relevant to Our business relationship with You. We may collect Your personal data directly or indirectly through various means, including the following:

1.1. information You give Us – information that You provide Us (which may include Your name, address, email address, telephone number, credit card information and other personal description) by filling in forms on Our Website or using Our services, or by corresponding with Us (by phone, email or otherwise), for example:

1.1.1. when You report any problem to Us;

1.1.2. when You request any support from Us; or

1.1.3. when You complete any survey or questionnaire We send You.

1.2. information We collect about You – information automatically collected when You visit Our Website, for example:

1.2.1. technical information, including the internet protocol (ip) address used to connect Your computer to the internet and Your log-in information, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform; and

1.2.2. information about Your visit, including the full uniform resource locators (urls), clickstream to, through and from Our website (including date and time), products You viewed or searched for, page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), methods used to browse away from the page, and any phone number used to call Our customer service number.

  2. Personal data provided by others

Depending on Your relationship with Us, We may also collect personal data from third party sources, such as:-

2.1. Our business partners, sub-contractors in technical, payment and delivery services, advertising networks, analytics providers, search information providers, or credit reference agencies;

2.2. from Your family members or friends who provide Your personal data to Us on Your behalf; and/or

2.3. from public agencies or other public sources.

  3. Provided personal data belonging to others

3.1. In certain circumstances, You may also provide Us with personal data of persons other than Yourself (such as Your family members). If You do so, You are responsible for informing him/her of the specific purposes for which We are collecting his/her personal data and to ensure that he/she has provided valid consent for Your provision of his/her personal data to Us.

  4. Accuracy and completeness of personal data

4.1. You are responsible for ensuring that all personal data that You provide is true, accurate and complete, and to inform Us of any changes to Your personal data.

  5. Voluntary provision of personal data

5.1. Your provision of personal data to Us is voluntary and You have the right to withdraw Your consent for Us to use Your personal data at any time by contacting Us. However, if You do so, it may not be possible for Us to fulfil the purposes for which We require the personal data, including providing products or services which You require from Us.

  6. Minors

6.1. If You are a child, minor or not of legal age, You are not permitted to use Our services. Please do not provide any personal data to Us. If You are a parent or guardian of a minor and You have reason to believe Your child or ward has provided Us with their personal data, please contact Us to request for erasure of their personal data.

  7. What we do with your personal data

We collect, use, disclose and process Your personal data where:-

7.1. You have given Us consent;

7.2. necessary to comply with Our legal or regulatory obligations, e.g. anti-money laundering and “know your customer” checks or disclosure to law enforcement; and/or

7.3. necessary to perform a contract or transaction You have entered into with Us, or provide a service that You have requested or require from Us.

  8. Purposes

8.1. We collect, use, disclose and process Your personal data for purposes connected or relevant to Our business, or to manage Your relationship with Us, such as:-

8.1.1. carrying out such transactions or taking steps as may be directed by You;

8.1.2. facilitating Your use of Our services, and providing, improving and developing Our services;

8.1.3. authenticating, operating and maintaining Your user accounts;

8.1.4. researching, designing and launching new features or products;

8.1.5. presenting content and information on Our Website in the most effective manner for You and for the device You use;

8.1.6. providing You with alerts, updates, materials or information about Our services or other types of information that You requested or signed up to;

8.1.7. administrative purposes, e.g. accounting, risk management and record keeping, business research, data, planning and statistical analysis, and staff training;

8.1.8. security purposes, e.g. protecting Our Website from unauthorised access or usage and to monitor for security threats;

8.1.9. using data analytics and related technologies on data, to enable Us to deliver relevant content and information to You, and to improve Our services and offerings;

8.1.10. managing and engaging third parties or data processors that provide services to Us, e.g. it services, data analytics, messaging marketing, and other professional services;

8.1.11. complying with laws and regulations applicable to Us in or outside of Singapore and Canada;

8.1.12. responding or taking part in legal proceedings, including seeking professional advice;

8.1.13. communicating with You and responding to Your questions or requests;

8.1.14. to support Our legitimate business interests (listed below); and

8.1.15. other reasonable purposes related or incidental to the above.

  9. Legitimate business interests

Our legitimate business interests include:-

9.1. managing Our business and relationship with Our customers and/or users;

9.2. providing services to Our customers and/or users;

9.3. understanding and responding to inquiries and feedback from Our customers and/or users;

9.4. understanding how Our customers and/or users use Our services;

9.5. identifying what Our customers and/or users want and improving Our services and offerings;

9.6. enforcing obligations owed to Us; and

9.7. sharing data in connection with acquisitions and transfers of Our business.

  10. Marketing purposes

10.1. If You have provided Us with Your consent, We may use Your personal data in direct marketing (i.e. offering or advertising products or services by sending the relevant information directly to You). We require Your consent specifically for this purpose and You may opt out at any time. for the purpose of this clause:

10.1.1. the personal data that may be used in direct marketing are those that You provide to Us;

10.1.2. the type of services or products that may be offered or advertised will be Our products or services, seminars, conferences or events, and those of Our affiliates or business partners;

10.1.3. the relevant information may be sent to You by email or sms;

10.1.4. You may opt out at any time by emailing Us at [email protected] We will cease to send You marketing information without charge.

  11. Jurisdiction-specific rights

11.1. We may also collect, use, disclose and process Your personal data for other purposes, without Your knowledge or consent, where this is required or permitted by law.

11.2. Some jurisdictions’ laws contain additional terms for users of the Services, which are set out in this section. If You are a user located in one of the jurisdictions below, the terms set out below under the name of Your jurisdiction apply to You in addition to the terms set out in Our Policy above.

11.3. EEA: If You are a resident of the EEA We process Your information in scope of the General Data Protection Regulation (GDPR), You may direct Your questions or complaints to the Office of the Data Protection Commissioner. If You are a resident of the UK, You may direct Your questions or concerns to the UK Information Commissioner’s Office.

11.4. Brazil: We process the personal data of people in Brazil in accordance with the Lei Geral de Proteção de Dados Pessoais (LGPD). This Privacy Policy (and Cookie Policy) disclose the categories and specific pieces of personal data collected about You, the categories of sources from which that personal data is collected, the business purposes for collecting the personal data, and the categories of third parties with which the information is shared. LGPD gives You certain rights to request information about Our processing of Your personal data and the right to ask that We delete Your personal data.

11.5. United States – California: If You are a consumer located in California, We process Your personal data in accordance with the California Consumer Privacy Act (CCPA). This section provides additional details about the personal information We collect and use for purposes of CCPA.

11.6. Canada: If You are a consumer located in Canada, all personal information collected by Us about You is authorized under legislation and is done in compliance with the Canadian Privacy Act.

11.7. Singapore: If You are a consumer located in Singapore, all personal information collected by Us about You is authorized under legislation and is done in compliance with the Singapore Privacy Act (PDPA).

  12. Contacting you

12.1. When using Your personal data to contact You for the above purposes, We may contact You via email (including edms), sms, telephone or any other means. We will not contact You for marketing purposes unless with Your consent, or We are exempted by applicable law from having to obtain consent.

  13. Disclosure to third parties

In connection with the purposes as described above, You agree We may provide information to:

13.1. any member of Our group, which means Our subsidiaries, Our ultimate holding company and its subsidiaries;

13.2. personnel, agents, advisers, auditors, contractors, financial institutions, and service providers in connection with Our operations or services (for example staff engaged in the fulfilment of Your order, the processing of Your payment and the provision of support services);

13.3. our overseas offices, affiliates, business partners and counterparts (on a need-to-know basis only);

13.4. persons under a duty of confidentiality to Us;

13.5. persons to whom We are required to make disclosure under applicable laws and regulations in or outside of Singapore or Canada; or

13.6. actual or proposed transferees of Our operations (or a substantial part thereof) in or outside of Singapore or Canada.

When disclosing personal data to third parties, We will (where appropriate and permissible) enter into contracts with these third parties to protect Your personal data in a manner that is consistent with all applicable laws and/or ensure that they only process Your personal data in accordance with Our instructions.

  14. Cookies

14.1. Our Website uses cookies to distinguish You from other users of the website. This helps Us to provide You with a good experience when You browse Our Website and also allows Us to improve Our website.

14.2. A cookie is a small file of letters and numbers that We store on Your browser or the hard drive of Your computer if You agree to the use of cookies. Cookies contain information that is transferred to Your computer’s hard drive.

14.3. We use persistent cookies and session cookies. A persistent cookie stays in Your browser and will be read by Us when You return to Our Website or a partner Website that uses Our services. Session cookies only last for as long as the session (usually the current visit to a Website or a browser session).

14.4. We use the following cookies in connection with the purposes set out above:

14.4.1. strictly necessary cookies – these are cookies that are required for the operation of Our Website. They include, for example, cookies that enable You to log into secure areas of Our Website.

14.4.2. analytical/performance cookies – they allow Us to recognise and count the number of visitors and to see how visitors move around Our Website when they are using it. This helps Us to improve the way Our Website works, for example, by ensuring that users are finding what they are looking for easily.

14.4.3. Google analytics: We reserve the right, in addition to its own cookies, to use Google Analytics cookies. Google uses Google Analytics for analytical purposes using cookies stored on Your Device. Google stores and uses acquired information. For opt-out Google Analytics. For more detailed information on Google’s privacy go to: policies.google.com/privacy.

14.4.4. functionality cookies – these are used to recognise You when You return to Our Website. This enables Us to personalise Our content for You, greet You by name and remember Your preferences (for example, Your choice of language or region).

14.4.5. targeting cookies – these cookies record Your visit to Our Website, the pages You have visited and the links You have followed. We will use this information to make Our Website and the information displayed on it more relevant to Your interests.

14.5. You can block cookies by activating the setting on Your browser that allows You to refuse the setting of all or some cookies. However, if You do so, You may not be able to access all or parts of Our Website:

14.5.1. Google Chrome;

14.5.2. Safari;

14.5.3. Mozilla Firefox;

14.5.4. Opera

14.6. We may use third-party web services on Our Website. The service providers that administer these services use technologies such as cookies (which are likely to be analytical/performance cookies or targeting cookies), web server logs and web beacons to help Us analyse how visitors use Our Website and make the information displayed on it more relevant to Your interests. the information collected through these means (including ip addresses) is disclosed to these service providers. These analytics services may use the data collected to contextualise and personalise the marketing materials of their own advertising network.

  15. Third-party websites

15.1. Our communication with You may from time to time contain links to third-party websites over which We have no control. If You follow a link to any of these websites, please note that they have their own practices and policies. We encourage You to read the privacy policies or statements of these websites and understand Your rights. We accept no responsibility or liability for any practices of third-party websites.

  16. Security

16.1. All information You provide to Us is stored on Our secure servers.

16.2. Any payment transactions will be encrypted using tls/ssl technology.

16.3. Where We have given You (or where You have chosen) a password that enables You to access the account, You are responsible for keeping this password confidential. We ask You not to share a password with anyone.

16.4. We restrict access to personal information to Our employees, service providers and contractors on a strictly need-to-know basis and ensure that those persons are subject to contractual confidentiality obligations.

16.5. Unauthorized access. While We take reasonable precautions to safeguard Your personal data in Our possession or under Our control, We cannot be held responsible for unauthorised or unintended access that is beyond Our control, such as hacking or cybercrimes.

16.6. Vulnerabilities. We review Our information collection, storage and processing practices from time to time to guard against unauthorised access, processing or use. Please note, however, the transmission of information via the internet is not completely secure. Although We will use reasonable security arrangements to protect Your personal data, We cannot guarantee that Our Website is invulnerable to security breaches, nor do We make any warranty, guarantee, or representation that Your use of Our Website is safe and protected from viruses, worms, trojan horses, and other vulnerabilities. We also do not guarantee the security of data that You choose to send Us electronically. Sending such data is entirely at Your own risk.

16.7. Period of retention. We only retain personal data for so long as We need the personal data to fulfil the purposes We collected it for, and to satisfy Our business and/or legal purposes, including audit, accounting or reporting requirements. How long We keep Your personal data depends on the nature of the data, e.g. We keep personal data for at least the duration of the limitation period for bringing claims if the personal data may be required to commence or defend legal proceedings. Some information may also be retained for longer, e.g. where We are required to do so by law.

16.8. Anonymized data. In some circumstances We may anonymise Your personal data so that it can no longer be associated with You, in which case We are entitled to retain and use such data without restriction.

  17. Data transfer

17.1. By submitting Your personal data You agree to this transfer, storing or processing of data outside Your country. When We transfer Your personal data across jurisdictions, We will require recipients of the personal data to protect the personal data in accordance with this policy and applicable laws. For example, We may enter into contracts (or impose binding rules) with recipients to protect Your personal data in a manner that is consistent with applicable laws. You may obtain details of these safeguards by contacting Us.

  18. Your rights

You have the right to:

18.1. check whether We hold personal data about You;

18.2. access any personal data We hold about You; and

18.3. require Us to correct any inaccuracy or error in any personal data We hold about You.

Any request may be subject to a small administrative fee to meet Our cost in processing Your request.

  19. Limitations

19.1. We may be permitted under applicable laws to refuse a request, for example, We may refuse (1) a request for erasure where the personal data is required for in connection with claims; or (2) an objection request and continue processing Your personal data based on compelling legitimate grounds for the processing.

  20. Complaints

20.1. If You are of the opinion that We have not complied with this policy or We have infringed applicable data protection laws, We encourage You to contact Us so that We can resolve Your concerns.

  21. Changes to our privacy policy

21.1. We may amend this policy from time to time by posting the updated policy on Our Website without notice to You. The updated privacy policy will supersede earlier versions and will apply to personal data provided to Us previously.

Contact Us

if You have any questions, comments or requests regarding personal data, please address them to: [email protected]

FinTech Decision pte LTD,

68 CIRCULAR ROAD #02-01,

SINGAPORE 049422

Attn: Payop Chief Data Protection Officer

TRANSFEROP PAYMENT GATEWAY LTD,

2110-650 WEST GEORGIA STREET,

VANCOUVER BC V6B 4N9, CANADA