Privacy Policy

PayFlexGo ("PayFlexGo", "we", "us", or "our") provides payment gateway and related financial technology services to businesses and their customers. We understand that trust is fundamental to a payments business, and we are committed to being transparent about the personal information we collect, why we collect it, and the choices you have. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website, use our merchant dashboard, or otherwise interact with our services.

By accessing or using our website and services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use our website or services.

We collect information in the following ways:

• Information you give us directly: your name, email address, phone number, company name, job title, and any message or details you submit through our contact forms, demo requests, or support channels.
• Account & onboarding information: if you register as a merchant, we collect business registration details, KYC (Know Your Customer) and KYB (Know Your Business) documentation, beneficial ownership information, bank account and settlement details, tax identification numbers, and other information required to verify your identity and comply with applicable financial regulations.
• Transaction information: records of payments processed through our platform, including amounts, timestamps, payment method details (in tokenized or masked form where applicable), currency, and transaction status. We do not store full, unmasked card numbers on our own servers except where required and permitted under applicable PCI DSS standards.
• Automatically collected information: IP address, browser type and version, operating system, device identifiers, pages visited, time spent on pages, referring and exit URLs, and general location information (such as city or country) derived from your IP address, gathered through server logs, cookies, and similar tracking technologies.
• Newsletter and marketing preferences: your email address and communication preferences if you subscribe to product updates or marketing communications via our website.
• Information from third parties: we may receive information about you from identity verification providers, credit bureaus, fraud prevention services, banking partners, and publicly available sources, to the extent permitted by law.

We use the information we collect for the following purposes:

• To respond to demo requests, sales inquiries, and support questions
• To provide, operate, maintain, and improve the PayFlexGo payment platform and related services
• To verify merchant identity, conduct KYC/KYB checks, and onboard new business customers
• To process, authorize, settle, and reconcile transactions on behalf of merchants
• To detect, investigate, and prevent fraud, money laundering, and other unauthorized or illegal activity
• To manage risk and conduct underwriting for merchant accounts
• To send administrative communications, service updates, and security alerts
• To send product updates and marketing communications to subscribers who have opted in
• To comply with applicable financial regulations, tax laws, and other legal obligations, and to respond to lawful requests from regulators and law enforcement
• To analyze usage trends and improve the performance, security, and usability of our website and services

Where applicable data protection law requires it, we rely on one or more of the following legal bases to process your personal information: your consent; the necessity of processing to perform a contract with you (for example, to provide payment processing services); our compliance with a legal obligation (for example, KYC and anti-money-laundering requirements); and our legitimate interests, such as preventing fraud, securing our platform, and improving our services, provided those interests are not overridden by your rights and freedoms.

We do not sell your personal information. We may share information with the following categories of recipients:

• Banking & payment partners: acquiring banks, card networks, and other financial institutions required to process, authorize, and settle transactions.
• Service providers: vendors who help us operate our website, cloud hosting, email delivery, customer support, identity verification, and fraud prevention infrastructure, each bound by confidentiality and data protection obligations.
• Regulators & authorities: government agencies, financial regulators, tax authorities, and law enforcement, where required by law, court order, or to comply with anti-money-laundering and counter-terrorist-financing regulations.
• Professional advisors: auditors, lawyers, and consultants who require access to information to advise us, subject to confidentiality obligations.
• Business transfers: successors or acquirers in the event of a merger, acquisition, restructuring, or sale of assets, subject to standard confidentiality terms and this Privacy Policy (or a materially similar policy).
• With your consent: any other third party where you have given us explicit permission to share your information.

As a payment services provider, we may transfer, store, and process your information in countries other than your own, including countries that may have data protection laws different from those in your jurisdiction.

Where we transfer personal information across borders, we take steps to ensure it receives an adequate level of protection, including through contractual safeguards such as standard contractual clauses, where required by applicable law.

We use industry-standard safeguards to protect the information we hold, including encryption of data in transit and at rest, network segmentation, restricted and role-based access controls, regular security assessments, and infrastructure aligned with PCI DSS standards for handling payment card data.

We also maintain internal policies governing employee access to sensitive information on a need-to-know basis. While we work continuously to strengthen our safeguards, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements.

Contact form submissions and newsletter subscriptions are retained for as long as needed to respond to your inquiry or for as long as you remain subscribed.

Merchant KYC, transaction, and settlement records are retained for the periods required under applicable financial services, anti-money-laundering, and tax regulations, which in many jurisdictions can extend several years beyond the end of the business relationship.

When information is no longer required, we securely delete, anonymize, or archive it in accordance with our internal retention schedules.

We use cookies and similar tracking technologies to operate and improve our website and services:

• Essential cookies: required for core site functionality, such as maintaining your session, remembering your dark-mode preference, and enabling secure login to the merchant dashboard.
• Performance & analytics cookies: help us understand how visitors use our site so we can improve navigation, content, and overall performance.
• Functional cookies: remember your preferences and settings to provide a more personalized experience.

You can control or disable cookies through your browser settings; however, disabling essential cookies may affect the functionality of our website and dashboard.

Depending on your location and applicable law, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of your personal information, subject to our legal and regulatory retention obligations
• Request a portable copy of your information in a structured, commonly used format
• Object to or request restriction of certain processing activities
• Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal
• Unsubscribe from marketing communications at any time using the link provided in those emails or by contacting us directly
• Lodge a complaint with your local data protection authority

To exercise any of these rights, please contact us using the details in the "Contact Us" section below. We may need to verify your identity before responding to certain requests, and some requests may be limited where we have an overriding legal or regulatory obligation to retain information.

Our website and dashboard may contain links to third-party websites, plug-ins, or services that are not operated by us.

We are not responsible for the privacy practices or content of these third parties. We encourage you to review the privacy policy of every third-party site or service you visit or use.

Our services are intended for businesses and individuals aged 18 and over.

We do not knowingly collect personal information from children.

If we become aware that we have inadvertently collected personal information from a child, we will take steps to delete it promptly. If you believe a child has provided us with personal information, please contact us using the details below.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, provide additional notice such as an email notification or a prominent notice on our website.

We encourage you to review this policy periodically to stay informed about how we protect your information.

If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your information, please reach out to us:

• Email: contact@payflexgo.com

We will make reasonable efforts to respond to your inquiry within the timeframes required by applicable law.