Privacy

Effective on June 18, 2024

Payinafrica Limited ("Payinafrica", "we", "our" or "us") are committed to protecting and respecting your privacy.

This is the privacy policy ("Privacy Policy") governs and explains how Payinafrica collects and further processes your personal data when you use the www.Payinafrica.com and services provided by Payinafrica. The terms contained in this Privacy Policy apply each time you access our content and/or services, regardless of the device you use.

This Privacy Policy is also applicable to the use of:

Payment panels on our clients websites.
Software including mobile and desktop applications provided by Payinafrica; and
Email, other electronic messages including SMS, telephone, web chat, website/portal and other communications between you and Payinafrica.

Collectively the aforementioned are referred to in this policy as “Services”.

INTRODUCTION

Section Summary

This Privacy Policy is a part of our Terms of Service and explains practices we follow and the choices available to you regarding the way your personal data is collected, kept, shared and used in connection with the Services. By using our Services, you agree to the terms of this Privacy Policy and to our collection, processing and sharing of personal data for the purposes set forth herein. If you do not agree to this Privacy Policy, please do not access or otherwise use our Services.

In this Privacy Policy, personal information or personal data means any information or data that may be used, either alone or in combination with other data, to personally identify an individual, including a person's name, personal profile, e-mail address, physical address or other contact information. We confirm that we will collect information about you in line with the requirements of the applicable laws and regulations of Mauritius and the guidelines of the regulatory authorities, and that we have adopted all reasonable technical and administrative measures to ensure that data that we collect about website visitors is protected from loss, unauthorized access and alteration. Our employees have a limited access to the personal data on a strict need-to-know basis, and they have made written commitments not to disclose and distribute information accessed in the workplace or to any third party, including information about visitors of the website/social media accounts. Persons under the age of 18 may not provide any personal data through our website/social media accounts. If you are a person under 18, make sure that you obtain a parent or guardian’s permission before you provide personal information to us. The definitions used in this Privacy Policy have the meanings assigned to them in Data Protection Act 2017 which is aligned with international standards, namely the General Data Protection Regulation (Regulation (EU) 2016/679) (GDPR) and the Convention for Protection of Individuals with regard to Automatic Processing of Personal Data (Convention 108). Be sure to read carefully this Privacy Policy, because each time you access www.Payinafrica.com you agree to abide by the terms described here. If you disagree with terms of this Privacy Policy, please do not visit our website, do not use its content and Services provided by Payinafrica.

By visiting www.Payinafrica.com and/or using our Services, you are providing your consent to the practices described in this Privacy Policy.

THE WAY WE COLLECT INFORMATION FROM YOU

Section Summary

We receive, collect and use the information listed below as it is necessary for the adequate performance of the contract between you and us, to provide you the Services, to support our legitimate interests in better understanding, securing and improving our Services and overall performance, and to allow us to comply with our legal and contractual obligations.

We receive and collect personal information from you when you provide us your name and e-mail address during signup, when you contact us or when you make a purchase and provide your billing information. When we communicate using email or other communications medium like phone.

We may collect information about you automatically (when you visit our website, our social media account, or use our applications). We receive and collect personal information from your browser or mobile device about your use of the Services. We use “cookies”, technical identifiers and other tracking technologies in order to provide and enhance our Services. We also collect limited data regarding your location and device or the service you are using, such as your mobile device id or browser preferences.

We receive and collect personal information from other sources, such as, business partners, financial institutions, merchants, subcontractors in technical, payment and delivery services, advertising networks, analytics providers, search information providers and fraud prevention agencies. In certain cases we may collect information about you from publicly available sources (e.g. through LinkedIn social networking platform, your company’s website or otherwise).

We may collect information that you provide to us directly. Typically this will happen when you:

Sign up to our website;
Enter into an arrangement with us for provision of Services;
Install our applications;
Subscribe to our newsletter or register to receive other communications;
Participate in our surveys.

We may collect information about you automatically. Typically this will happen when you:

Submit inquiries through our registration system or social media accounts;
Enter into an arrangement with us for provision of Services;
Use our website (we collect information about you through the use of cookies; to learn more about the cookies please see the information below);
Make public posts on social media platforms that we follow.

Where permitted by applicable law, we may acquire information about you from third parties such as, business partners, financial institutions, merchants, subcontractors in technical, payment and delivery services, advertising networks, analytics providers, search information providers and fraud prevention agencies. This may include your publicly available profile information (Linkedin, Facebook, Twitter etc.). We may link information provided by you, collected from public and commercial sources to other information we obtain from you or about you. We may also collect information about you in other contexts than discussed in this Privacy Policy. If this is the case, we will give you further notice.

WHERE WE STORE YOUR PERSONAL DATA

The following information we collect:

information necessary to provide our services to you (provided in contracts, registration forms);
information you give us in surveys;
information you give us in calls to us;
information about your preferences and interests;
information necessary to verify your age and identity;
information about the device you use.
Information about IP-address you use.

Information you give us:Information that we collect from you directly will be apparent from the circumstances and the context in which you provide it. For example:

when we provide our services to you we process your information such as your name, surname, payment method, address, passport number and other information we may need in providing services to you, such as your phone number or e-mail address to which we will send your registration confirmation;
credit card number, credit card expiration date;
information about your interests and preferences.

Information that we collect automaticallywill generally concern:

information about your usage of our websites (device information): IP address, browser type and version, browser plug-in types and versions, operating system version, and settings of the device you use to access our content/products; log information: time and duration of your login session, search query terms you enter through the website, and any information stored in cookies that we have set on your device (cookies policy is provided below); location information: your device’s GPS signal or information about nearby WiFi access points and cell towers that may be transmitted to us when you use our website content.

Information that we collect from third parties:We may share or receive information about you with or from other sources and add it to our account information, including when you use any of the other websites we operate or other services we provide. We are also working closely with third parties (including, for example, business partners, financial institutions, merchants, subcontractors in technical, payment and delivery services, advertising networks, analytics providers, search information providers and fraud prevention agencies) and may receive information about you from them. We may also receive information about you from publicly available sources, it will generally consist of the following:

your interests;
your e-mail address, name, surname, your country, special preferences and interests.

Information that we collect through Applications: If you download or use mobile or desktop applications provided by us, we may receive information about your location and your device or the service you are using (including where a payment transaction takes place). Our mobile and desktop apps may collect such information from your mobile device or your computer at any time while you download or use our apps. Where required, we will always seek to notify you if it is our intent to collect real-time location information and, also where required, obtain your consent unless otherwise permitted by law. We may use such information for regulatory purposes, our own due diligence checks, to better understand transaction patterns and to optimize your experience.

Important.We may also collect your personal information if you are related to our clients or potential clients, and they are legal entities. In that case you might be the director of the company, shareholder, member of the board, ultimate beneficiary owner (UBO), authorized representative of the company.

Email and Other Communications: We may receive information about you and your use of our Services when we communicate with each other, including when you open email, messages from us and from the use of electronic identifiers (sometimes known as ‘device fingerprints’), for example, Internet Protocol addresses or telephone numbers. You may choose not to disclose certain information to us (e.g. information requested in the registration form), but in that case you may not be allowed to register in our website or receive our services.

USES MADE OF THE INFORMATION

Section Summary

We use your personal information to provide and improve our Services, to send you marketing or advertisement communications, to contact you in connection with the Services, to identify and authenticate your access to the Services, to send you updates and news regarding the Services and our products, to respond to a “Contact Us” request, to send you service and administrative e-mails and messages, and to inform you about changes or important Services related notices.

Your information (as above) will include information about you (and / or your business) and your transactions. If you give us information, including sensitive personal data, about yourself or other people, you agree (and confirm that the person the information is about has agreed) that we can use this information in the way set out in this policy.

We use the collected information about you for the following purposes:

Purpose	SLegal base/bases	Personal data
To provide our Services to you and your business including fulfilling our obligations to you or to financial or other institutions in connection with the Services we provide to you (and / or your business).	Discharge of obligations under a contract between you and us. Compliance with legislative requirements. Our legitimate interests unless, these interests are overridden by your private interests.	Name, surname, payment method, credit card number, address, passport number, credit card expiration date, other information we may need in providing our services to you, such as your phone number or e-mail address to which we will send your registration confirmation, information about your interests and preferences.
To provide you with the information, products and services you have requested or we think may be of interest to you.	Our legitimate interest to inform about our services, and other relevant information	Name, social media account details, telephone, e-mail, address, your interests.
To identify and authenticate your access to non-public parts of our Services	Our contract with you, Compliance with legal obligations	Name, telephone, e-mail, address, login credentials
To send you service and administrative e-mails and messages, including to inform you about important changes or developments in our Services, to provide you with important Services related notices, such as security notices, to notify about your transaction and to respond to a "Contact Us" or administrative request (for example, to change your password). These e-mails and messages are considered an integral part of the Service and you may not opt-out of them.	Our legitimate interest to provide you with accurate information about the services we provide, extra services, etc.	In order to be able to answer your queries by phone, e-mail, through social media and otherwise, we may ask you to give us your phone number, e-mail address or other contact details convenient to you.
For marketing purposes, e.g. Providing customized Advertisements and sponsored content and sending promotional communications; assessment and analysis of our market, clients, products and services (including asking for your opinions on our products and services and carrying out client/partner surveys).	For this purpose we process your personal data on the basis of - our legitimate interest to inform about our services, events, news and other relevantinformation; - an additional clear consent, which shall be received (e.g., in manner of additional tick box to be ticked with the link to the Privacy Policy and/or other relevant documents) before processing the personal data for marketing purposes – IF YOU RECEIVED THE MARKETING CONTENT FROM US AND KNOW/THINK THAT YOUR ADDITIONAL CONSENT HAD NOT BEEN PROVIDED TO US, THEN PLEASE INFORM US ABOUT THIS SITUATION AS SOON AS POSSIBLE VIA support@Payinafrica.com	Name, social media account details, telephone, e-mail, address, your interests.
To assist in the course of any investigation by us, other financial organizations or other third parties into any suspected criminal activity.	Compliance with legal obligations	Depending on the lawsuit or claim filed, we may collect all personal data mentioned in this Privacy Policy that we have about you.
To obtain your views on our products, services and our website/s.	For this purpose we process your personal data on the basis of the legitimate interest to monitor the quality of our services, develop and improve the content we provide and ensure security of the website.	IP address, operating system version, and settings of the device you use to access our content/products, time and duration of your login session, search query terms you enter through our website, and any information stored in cookies that we have set on your device, your device’s GPS signal or information about nearby WiFi access
To comply with local and national laws, including card scheme rules and requests from law enforcement and regulatory authorities.	Compliance with legal obligations, Legitimate interest to defend against lawsuits and claims.	All personal data mentioned in this Privacy Policy that we have about you.
To improve and develop our business, including without limitation to optimize our websites/portals, products and services.	Our legitimate interests	Interactions with our website, applications, support team, geo-location data
To identify and monitor for fraud, we and other organizations may access and use information recorded by fraud-prevention agencies.	Compliance with legal obligations, Legitimate interest to defend against lawsuits and claims.	All personal data mentioned in this Privacy Policy that we have about you.

In some instances, we may use information about you for purposes other than described above. Where this is the case, we will provide a supplemental notice to you and ask for your consent before we process your information (these cases will be clear from the circumstances and the context).

DISCLOSURE OF YOUR INFORMATION

Section Summary

We transfer your personal information or share it with our subsidiaries or affiliated companies for the purpose of storing or processing such data on our behalf, with credit and financial institutions, alternative payment schemes and any other financial institutions who may process payments and provide payment services, with third-party service providers who complement and assist us with our business operations and to facilitate our Service (like billing, support, payment processing, fraud prevention agencies or other services), with our business partners and affiliates so they can contact you in order to offer or promote our Service, and with whoever you specifically ask us to share it with.

We may share your personal data with any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries. We may share your information with selected third parties including:

Business partners, suppliers and sub-contractors for the performance of any contract we enter into with them or you, or any services that we provide to you.
Credit and Financial Institutions (where allowed under any Terms of Use or other contract): including the credit institution where you (or your business) maintains its bank account and the card schemes governing the issue and use of credit, debit, charge, purchase or other payment cards, alternative payment schemes and any other financial institutions who may process payments and provide payment services and who are not operating under Payment Infosys’s control nor for whom whose actions or omissions Payinafrica has liability.
Service providers and partners, but only to assist us with our business operations and to provide our Services to you and other users. Such service providers include hosting and server co-location services, communications and content delivery networks (CDNs), data and cyber security services, DDoS prevention services, billing and payment processing services, domain name registrars, fraud detection and prevention services, web analytics, e-mail distribution and monitoring services, session recording and remote access services, performance measurement data optimization and marketing services, content providers, e-mail, voicemails, support and customer relation management systems (CRM), and our legal and financial advisors.

These entities are limited in their ability to use your information for purposes other than providing services to us (unless stated otherwise in the agreement).

We may share information about you with other third parties, such as public authorities, authorities supervising activities in the payment sector, pre-trial investigation officials, courts, and others, when we consider disclosure to be necessary to protect our legitimate interests.

We may disclose your personal information to third parties:

Where we are required or permitted to do so by law: we may be required by law to pass information about you to regulatory authorities and law enforcement bodies worldwide, or we may otherwise determine that it is appropriate or necessary to do so. Such disclosures may also include requests from governmental or public authorities, or with commercial organizations with whom you may have had dealings and who are seeking to mitigate fraud risk, or for the purposes of litigation or legal process, national security, or where we deem it in the national or public interest or otherwise lawful to do so.
Business transfers:Payinafrica may buy or sell business units or affiliates. In such circumstances, we may transfer customer information as a business asset. Without limiting the foregoing, if our business enters into a joint venture with or is sold to or merged with another business entity, your information may be disclosed to our new business partners or owners; and.
With your permission:Your information may also be used for other purposes for which you give your specific permission, or when required by law or where permitted under the terms of the relevant data protection legislation. Except where permitted as stated, Payment Infosys does not sell, rent, share or otherwise disclose personal data about its customers to third parties for commercial purposes.

SECURITY

Section Summary

The data that you provide us is sent via a secure link (HTTPS) and sensitive data stored is encrypted using standard encryption technology in computer servers with limited access and in controlled facilities. We follow generally accepted industry standards to protect personal data, however no method of transmission over the Internet or method of electronic storage is 100% secure.

The data that you provide us is sent via a secure link (HTTPS) and sensitive data stored is encrypted using standard encryption technology in computer servers with limited access and in controlled facilities. Once you are logged into your Account, all internet communication is secured using Secure Socket Layer (SSL) technology with High-grade security Encryption (AES-256, 256 bit keys). We restrict access to your personally identifiable information only to employees who need to know that information in order to provide products or services to you.

We have put in place reasonable and appropriate physical and technical measures to safeguard the information we collect in connection with the provision of our content/services. Please note, however, that although we take reasonable steps to protect your information, no website, Internet transmission, computer system or wireless connection is completely secure.

All information you provide to us is stored on our secure servers. Where we have given you (or where you have chosen) a password which enables you to access certain parts of the Website, you are responsible for keeping this password confidential. We ask you not to share a password with anyone. We will never contact you and ask for your password.

All our employees and data processors, who have access to, and are associated with the processing of personal data, are obliged to respect the confidentiality of your personal data.

www.Payinafrica.com may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.

TRANSFER OF PERSONAL DATA

To facilitate our global operations, we may be required to transfer, store, and process your information within the group of our companies or with service providers based outside of Mauritius. Laws in these countries may differ from the laws applicable to your Country of Residence. Where we transfer your personal information outside of Mauritius we have ensured that the authorization is obtained from the Data Protection Commissioner and other necessary measures are in place to ensure an adequate level of data protection.

HOW LONG WE STORE YOUR PERSONAL DATA

Section Summary

We will retain your personal data for the period necessary to fulfil the purpose for which they were collected. After that, we will delete them, except where we are legally obligated to retain the information for tax purposes, or such data may be required in conducting a pre-trial investigation, but in any event the retention period will not extend beyond 7 years. On expiration of this period, the data will be irretrievably deleted.

YOUR RIGHTS

Section Summary

You can exercise your rights at any time by contacting our support team at support@Payinafrica.com or our Data Protection Officer at legal@Payinafrica.com .
The data subject whose data are processed in connection with activities carried out by the Data Controller, depending on the situation, has the following rights:
to know (be informed) about the processing of data concerning him/her (right to know);
to access his/her data and be informed about the methods of their processing (right of access);
to obtain rectification of personal data or, taking into account the purposes of the processing of personal data, to have incomplete personal data completed (right to rectification);
to obtain the erasure of data concerning him/her or the suspension of data processing activities concerning him/her (except storage) (right to erasure and ‘right to be forgotten’);
to obtain from the Data Controller restriction of the processing of personal data if there is a legitimate ground (right to restriction of processing);
to object at any time to processing of personal data concerning him or her which is based for the performance of a task carried out in the public interest or for the purposes of the legitimate interests pursued by the controller or by a third party. The controller has to demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject (right to object);
to exercise the right to data portability (right to data portability);
to lodge a complaint with the Data Protection Commissioner.
You can exercise these rights by writing to support@Payinafrica.com, or using certain links provided at the end of our promotional communications.
You may not be able to exercise these rights when in the cases provided by law it is necessary to ensure prevention, investigation and detection of crimes, violations of official or professional ethical standards, as well as the protection of the rights and freedoms of the data subject or other persons. We will ask you to prove your identity face-to-face or through electronic signature or, where the two options are not available, remotely via a video-call before we enable you to exercise your rights.

When we receive your request and your identity was verified, we will verify:

the access request;
whether requests are unfounded or excessive;
whether we process the data requested;
whether the data requested also involves any exemptions.

We will promptly acknowledge receipt of the request.

If we receive a request send directly by a data subject to us as a data controller, we will evaluate it immediately and will respond to you.

If we receive your request in a capacity of a data processor, we will notify the data controller without undue delay, receive their instructions as to the request handling and make a reasonable effort in assisting the data controller in fulfilling the request. We will also notify you that handling of your request is forwarded to the data controller.

We are ensuring that all information requested will be provided within 30 calendar days from the day the request was first received by us. In case when the request cannot be completed,we will reply with an answer as to why the request cannot be completed. If more time is needed to respond to complex requests, we will notify you within the first 30 days. In any case extension is permissible only of another two months.

COOKIES

Our Website uses cookies to distinguish you from other users of the Website. This helps us to provide you with a good experience when you browse the Website and also allows us to improve the Website.

For more information about cookies, including how to see what cookies have been set and how to manage, block and delete cookies, please see our Cookies Policy.

CHANGES TO OUR PRIVACY POLICY

We reserve the right to change this Privacy Policy at any time at our discretion. Any changes we may make to our privacy policy in the future will be posted on this page and, where appropriate, notified to you by e-mail. Please check back frequently to see any updates or changes to our privacy policy.

If you use the Website or the Services after we have published such changes, you will be agreeing to be bound by those changes. If you do not agree to be bound by this policy at any time, you should not use our Website and Services.

If you discover any inconsistency in this Privacy Policy, any security issue on our website, or have other questions related to the processing of your personal data, please contact us in a manner convenient to you using the contact details below:

Email: support@Payinafrica.com , legal@Payinafrica.com

Address: C/0 Bhumishq Financial Services Limited. 9th Floor, Mindpsace, Bhumi Park, 54 Cyber City, Ebene, Mauritius