Privacy Policy

 

1. Introduction

Swifttransact DMCC (“we,” “us,” or “our”), a company registered in Dubai Multi Commodities Centre (DMCC), United Arab Emirates, is committed to protecting your privacy and ensuring the security of your personal data. This comprehensive Privacy Policy explains how we collect, use, process, store, and safeguard your information when you use our payment services, visit our website, or interact with us in any other capacity.

2. Scope and Applicability

This Privacy Policy applies to all individuals (“you” or “your”) who use our services, visit our website, or interact with us through any other means. It covers all personal data processed by Swifttransact DMCC in accordance with the DMCC Data Protection Regulations and other applicable laws.

3. Data Collection

3.1 Types of Data Collected

We collect various types of personal data, including but not limited to:

• Identification Information: Full name, date of birth, nationality, passport number, Emirates ID, photographs, and signature.
• Contact Information: Email address, phone number, physical address.
• Financial Information: Bank account details, credit/debit card information, transaction history.
• Business Information: Company name, registration number, business type, and industry.
• Technical Data: IP address, browser type, device information, cookies, and usage data.
• Communication Data: Records of your interactions with us, including emails, chat logs, and call recordings.

3.2 Methods of Data Collection

We collect data through various means:

• Direct provision by you when using our services or creating an account.
• Automated technologies when you visit our website or use our online platforms.
• Third-party sources, such as credit reference agencies or public databases.
• Business partners and service providers.

4. Purposes of Data Processing

We process your personal data for the following purposes:

• Providing and improving our payment services
• Processing transactions and sending notifications
• Customer onboarding and account management
• Risk assessment and fraud prevention
• Compliance with legal and regulatory obligations, including AML and KYC requirements
• Marketing and promotional activities (with your consent)
• Analytics and business intelligence
• Responding to inquiries and providing customer support
• Enforcing our terms of service and protecting our legal rights

5. Legal Basis for Processing

We process your personal data based on one or more of the following legal grounds:

• Performance of a contract with you.
• Compliance with legal obligations.
• Our legitimate business interests.
• Your explicit consent, where required.

6. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The criteria used to determine our retention periods include:

• The duration of our ongoing relationship with you.
• Legal obligations under applicable laws.
• Statute of limitations under applicable laws.
• Ongoing or potential legal proceedings.
• Guidelines issued by relevant data protection authorities.

7. Data Security

We implement robust technical and organizational measures to protect your personal data, including:

• Encryption of data in transit and at rest.
• Multi-factor authentication for access to systems.
• Regular security audits and penetration testing.
• Employee training on data protection and information security.
• Physical security measures at our facilities.
• Incident response and disaster recovery plans.

8. Data Sharing and Disclosure

We may share your personal data with:

• Affiliated companies within our corporate group
• Third-party service providers who assist in providing our services
• Financial institutions and payment processors to facilitate transactions
• Regulatory authorities, law enforcement agencies, and government bodies as required by law
• Professional advisors, such as lawyers, auditors, and insurers
• Potential buyers or investors in the event of a business transaction

We ensure that all third parties who receive your data are bound by appropriate confidentiality and data protection obligations.

9. Cross-Border Data Transfers

Your personal data may be transferred to, stored, and processed in countries outside the UAE. We take appropriate safeguards to ensure that your data receives an adequate level of protection in the jurisdictions in which we process it, including:

• Entering into Standard Contractual Clauses approved by the European Commission
• Ensuring that recipients are in countries with adequate data protection laws
• Obtaining your explicit consent for certain transfers

10. Your Rights

Under applicable data protection laws, you have the following rights:

• Right to access your personal data
• Right to rectify inaccurate or incomplete data
• Right to erasure (right to be forgotten)
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Rights related to automated decision-making and profiling
• Right to withdraw consent at any time

To exercise these rights, please contact our Data Protection Officer at [insert DPO email]. We will respond to your request within 30 days.

11. Cookies and Similar Technologies

We use cookies and similar tracking technologies on our website. For detailed information about the types of cookies we use, their purposes, and how you can control them, please refer to our separate Cookie Policy.

12. Children’s Privacy

Our services are not intended for children under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the new Privacy Policy on our website and updating the “Effective Date” at the top of this policy. We encourage you to review this policy periodically.

14. Complaints

If you are unsatisfied with our response to your privacy concerns, you have the right to lodge a complaint with the DMCC Data Protection Officer or the relevant supervisory authority in your jurisdiction.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer:

Swifttransact DMCC
Attention: Data Protection Officer
Email: compliance@payepic.com

By using our services, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and disclosure of your personal data as described herein.