Privacy Terms for website's & payment's page

A comprehensive guide to our website's and payment's page Privacy Policy, how we collect, use, and safeguard your personal information, and your rights to control your data.

Effective date: Sept 28, 2023

Introduction

This Privacy Policy (“Policy”) describes the manner in which PayGlocal Technologies Private Limited and our affiliates (“PayGlocal”, “us”, “we”, or “our”), may collect, use, store, transfer, disclose and process Personal Data (as defined hereunder) provided by you (defined below) or otherwise collect when you use this Website (as defined below) / application and/or our services (“Services”).

Depending on the context, "you", "your" and "user" shall mean the End User (defined below), and/or Visitor:

a. When you are directly in a commercial arrangement or transaction with Business User (defined below), wherein your engagement involves the purchase of goods or services from the said Business User utilizing PayGlocal's Services for payment processing, while the direct business relationship with PayGlocal itself is absent, we refer to you as “End Users.”

b. When you visit the Website or otherwise communicate with PayGlocal, we refer to you as a “Visitor.”

At PayGlocal, our mission is to provide a secure, highly available and robust payment processing platform to our users and business clients. PayGlocal understands the importance of keeping personal information of its users secure and deals with sensitive, personally identifiable information with care. Our Policy ensures your information is in safe hands and is disclosed to third parties and other entities outside of PayGlocal in accordance with the Policy and the Applicable Law and attempts to prevent misuse thereof.

This Policy is published and shall be construed in accordance with the provisions of Applicable Law and regulations and its amendments, that require publishing of the privacy policy for collection, use, storage, transfer, disclosure of Personal Information. “Personal Data” means and includes all information that can be linked to a specific individual and also includes Sensitive Personal Information (all Personal Data which requires heightened data protection measures due to its sensitive and personal nature), both, hereinafter referred to as “Personal Data,” excluding any information that is freely available or accessible in public domain.

BY USING OUR SERVICES OR BY OTHERWISE GIVING US YOUR INFORMATION, YOU SHALL BE DEEMED TO HAVE READ, UNDERSTOOD, AND AGREED TO THE PRACTICES AND POLICIES OUTLINED IN THIS POLICY AND AGREE TO BE BOUND BY THE POLICY. YOU HEREBY CONSENT TO OUR COLLECTION, USE, SHARING AND DISCLOSURE OF YOUR INFORMATION AS DESCRIBED IN THIS POLICY. WE RESERVE THE RIGHT TO CHANGE, MODIFY, ADD OR DELETE ANY PORTIONS OF THE TERMS OF THIS POLICY, AT OUR SOLE DISCRETION, AT ANY TIME. IN THE EVENT YOU DO NOT AGREE WITH THIS POLICY AT ANY TIME, YOU SHALL DISCONTINUE THE USE OF THE PLATFORM OR SHARING YOUR INFORMATION.

Definitions

“Applicable Laws” shall mean and include the Digital Personal Data Protection Act, 2023, Information Technology Act, 2000, the Information Technology (Reasonable security practices and procedures and sensitive personal data or information) Rules, 2011, Payment and Settlement Systems Act, 2007, Prevention of Money Laundering Act, 2002 and any other applicable rules and regulations issued thereunder and having the force of law in India, whether in effect as of the date of this Policy or thereafter, as applicable to us.

“Business User” shall mean and include the entity availing the Services, and directly and indirectly providing us with End User’s Personal Data.

“Website” shall mean and include websites and payment processing web pages such as www.PayGlocal.in, Pygcl.com, and Payglocal.com, and all other sub-domains associated with these websites.

Information That We May Collect:

Our collection and use of Personal Data shall depend on whether you are acting as a End User, or Visitor and the Services you avail.

We collect or receive information you provide when you apply, use or sign up for our Services and/or Website. The types of information we obtain in these contexts include:
  1. Contact Information: such as your name, email address, mailing address, and mobile/phone number.
  2. Demographic information: such as date of birth, country of citizenship and/or country of residence.
  3. Profile Information: when you apply, use or sign up on our Website and/or use our Services, signature, and authentication credentials (for example, the information you used to log in to your account), including IP address.
  4. Financial Information: such as bank account, payment card numbers, credit reports, and other publicly available information.
  5. Transaction Information: when you use our Website or any Services to make, accept, request, or record payments, we receive information about when and where the transactions occur, the names of the transacting parties, a description of the transactions, the payment or transfer amounts, billing and shipping information, and the devices and payment methods used to complete the transactions.
  6. Feedback and correspondence: such as information you provide when you request information from us, receive customer support, or otherwise correspond with us, including by interacting with our pages on social networking online sites or Services.
  7. Geolocation information: if you authorize us to access your location.
  8. Marketing information: such as your preferences for receiving marketing communications and details about how you engage with our marketing communications.
  9. Other information: we also receive other information about your past payment pattern and online profile and related activity as well as information about your device and geolocation such as IP address, device fingerprint from your device or through our Business User’s integration with PayGlocal products and Services as per our contractual terms with them. This information is strictly used for risk assessment and fraud prevention or fraud screening purposes in accordance with this Policy.

Information that we collect or receive from other sources: We may collect or receive information about individuals who do not interact with us directly or from third parties, including:
  1. Identity Verification: Information from third-party verification services, credit bureaus, financial institutions, mailing list providers, and publicly available sources. In some circumstances, where lawful, this information may include your government-issued identification number.
  2. Information about End Users that our Business Users allow us to collect in the context of the services that we provide, such as information related to financial transactions initiated by the End Users, account registrations, and in some cases information needed to verify an End Users’ identity and details of products or services purchased, and as otherwise stated in the applicable policy for the services and/or products provided. Where our technology is incorporated into a Business User’s mobile application or website, we also may automatically collect certain information as mentioned in “Information collected via automated means.”
  3. Information obtained when processing transactions, such as information about payment transactions.
  4. Information collected from private and publicly accessible sources: we may collect information about individuals that is publicly available, including by searching publicly accessible government lists of restricted or sanctioned persons (such as the Specially Designated Nationals and Blocked Persons List), public records databases (such as company registries and regulatory filings), and by searching media and the internet. We and or our third-party verification providers may also collect information from private or commercially available sources, such as by requesting reports or information from credit reference and fraud prevention agencies to the extent permitted under Applicable Law.

Information collected via automated means:
  1. When you access our Website, our service providers, and our partners may automatically collect information about you, your computer or mobile device, and your activity on our websites or mobile applications.
  2. This information may include:
    1. Your computer or mobile device operating system type and version number, manufacturer and model, device identifier (such as the Google Advertising ID or Apple ID for Advertising), browser type, screen resolution;
    2. IP address;
    3. the website you visited before browsing our website, general location and information about your use of and actions on or in our platform, access times, and length of access.
    4. Certain products or services that we provide, or that the Business Users may incorporate into their websites or mobile applications, may automatically collect additional information.

Cookies: Cookies are files with a small amount of data, which may include an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your computer's hard drive. We use "cookies" to collect information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Services

Third Party Services: We may use third party services such as Google Analytics that collect, monitor and analyze information in order to increase our products and Services’ functionality. These third party service providers have their own privacy policies addressing how they use such information.

Sharing of Information

With third-party service providers:We may employ third-party companies and individuals to administer and provide services on our behalf (such as companies that provide customer support, companies that we engage to host, manage, maintain, and develop our Website, mobile applications, and IT systems, and companies that help us process payments). These third parties may use your information only as directed by us and in a manner consistent with this Policy and are prohibited from using or disclosing your information for any other purpose.

Participants in the transaction processing chain:We may share your Personal Data with entities in the transaction processing chain in connection with processing a payment transaction, such as merchants, banks or other card issuers, card associations, debit network operators and their members.

Credit reference, fraud protection, risk management, and identity and verification agencies:We share Personal Data with credit reference, fraud protection, risk management, and identity verification agencies to help guard against, detect, and respond to fraud or money laundering, and/or manage our or our Business User’s risk, and ensure we comply with contractual, legal, or regulatory requirements.

Compliance with Laws and Law Enforcement; Protection and Safety:We may disclose information about you to government or law enforcement officials (including tax authorities) or private parties as required by law, and disclose and use such information as we believe necessary or appropriate to (a) comply with applicable laws and lawful requests and legal process, such as to respond to subpoenas or requests from government authorities; (b) enforce the terms and conditions that govern our products and services; (d) protect our rights, privacy, safety or property, and/or that of you or others; and (e) protect, investigate and deter against fraudulent, harmful, unauthorized, unethical or illegal activity.

With your consent:We reserve the right to transfer your Personal Data to any third party not explicitly encompassed within the categories outlined above, provided you have granted us explicit permission to undertake such a transfer, or in instances where a contractual arrangement exists between you and the third party, necessitating the transfer of your Personal Data to fulfill the obligations of said contract.

Third-party References and Links

During your interactions on our Website, you may click on or access links and hyperlinks of third-party websites. Such third parties and third-party sites are governed by their terms and conditions. We do not make any representations regarding the availability and performance of third parties or third-party sites. We are not responsible for the content, terms of use, privacy policies, and practices of such third-party websites.

How We Use Personal Data

Our use of your Personal Data changes depending on whether you are acting as an End User, or Visitor and the Services you avail.

Provide you with the products, services, programs, offers, or information you request from PayGlocal, and for related purposes such as determining eligibility and customer service.

Understand how you and others use our products, for analytics and modelling and to create business intelligence and insights and to understand economic trends.

Generate de-personalized, de-identified, anonymized, or aggregated datasets, which are used for product development and delivery of consulting services to clients.

Ensure PayGlocal’s systems are secure and detect an unusual activity while using our products and Services.

Aggregate information to perform statistical analyses of user behaviour and characteristics in order to measure interest in our products and Services. Your information, including Personal Data, may be transferred to and maintained on computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ from those in your jurisdiction. Your information is secured by the contractual terms and conditions we have with our partners in accordance with applicable clauses and laws that govern data protection.

Transfer the information, including Personal Data, to India and process it there for users and customers outside of India using our Services. Your consent to this Policy followed by your submission of such information represents your agreement to that transfer.

How We Secure Personal Data

Ensuring the confidentiality, integrity and availability of the data is our top priority. We use the latest encryption standards, applied cryptography and security framework for data at transit, data in use and data at rest using a zero trust architecture. Personal Data/data is considered to be in one of the following states: in-transit, in-use and at rest. At each state, we have applied innovative security strategies to protect the data. For transit, in addition to TLS 1.3 which is designed to provide point-to-point security, we support End-to-End Encryption (E2EE). Using E2EE the message is encrypted at all times as it makes its way through any possible intermediary entities to protect against cryptanalytic advances, we use RSA encryption key length 2,048 bits.

For Personal Data/data at Rest, we use envelope-based symmetric encryption which is performed at level 2 (application layer) – AES with a key strength of 256 bits and GCM algorithm is used to encrypt data. All the Data Encryption Keys are protected, validated and certified to meet the requirements of PCI DSS Level 1 certification. When you use our Services, we may collect information by automated means, using technologies such as cookies, pixel tags, browser analysis tools, server logs, and web beacons.

In some cases, the information we collect is only used in a non-identifiable way. For example, we use information we collect about all website users to optimize our websites and to understand website traffic patterns. We do not use this information to profile you. In other cases, we may use the information in an identifiable way. For example, we may authenticate you or your device to deliver personalized content or use the information for analytics, fraud detection, and security.

Express Consent

By making use of the platform/ website or connecting with any of our related sub-domains and furnishing your Personal Data, you hereby agree that you are interested in knowing more or availing Services, offers, campaigns or other promotional material that PayGlocal or any other third party may offer/provide/share/send you from time to time through any means including but not limited to telephone, SMS (short messaging service), electronic mail (e-mail), WhatsApp, or any other messaging service/ mobile application or any other physical, electronic or digital means/mode.

By giving your consent hereunder, you understand that we will share and/or transfer your Personal Data to any third party in India, or outside India including but not limited to risk assessment/ mitigation companies who will use your Personal Data for risk assessment analysis, security, fraud prevention, fraud screening and quality control or for any other related reasons.

We may share your Personal Data to our group companies, affiliates, corporate partners or authorized personnels for purposes consistent with this Policy in compliance with Applicable Laws.

We may sell or transfer some or all of its business or assets, including your Personal Data, in connection with a business transaction (or potential business transaction) such as a merger, consolidation, acquisition, reorganization or sale of assets or in the event of bankruptcy, in which case we will make reasonable efforts to require the recipient to honour this Policy.

You also agree that PayGlocal reserves the right to make your details available to its partner banks/ financial institutions or any such other third party, as the case may be, and that you may be contacted by the partners and/or the third party for information through email, telephone, WhatsApp and/or SMS.

International Transfers

PayGlocal is based in India and has affiliates and service providers around the world. Your Personal Data may be transferred to and maintained outside of your country which may not have similar privacy or data protection laws. If you are located outside India and choose to provide information to us, please note that we transfer the information, including Personal Data, to India and process it there, subject to Applicable Law. By using PayGlocal products, you acknowledge that your information might be shared with global entities that may be governed by their respective laws and policies.

Your consent to this Policy followed by your submission of your Personal Data represents your agreement to that transfer.

Information Security and Data Retention

PayGlocal is based in India and has affiliates and service providers around the world. By using PayGlocal products, you acknowledge that your information might be shared with global entities that are governed by their respective policies as per applicable laws.

We use technical, organizational, and administrative safeguards to help protect your Personal Data from unauthorized access or loss. For example, we use encryption and other tools to protect sensitive information. We retain your Personal Data as needed for the purposes listed above and as permitted by Applicable Law.

We collect and retain your Personal Data for the provision of the Services and to comply with legal, regulatory, and/or reporting requirements, as applicable. We may retain your Personal Data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation with respect to our relationship with you. However, once the purpose has been fulfilled, we promptly and securely purge all the Personal Data provided by you, ensuring that it is no longer accessible or retained by us.

Privacy Policies of Third Parties

This Policy explains how PayGlocal and its affiliates handle your Personal Data. Please also read the privacy notice provided by your merchant, Business User and payment instrument provider to learn how that company handles your information. Social media platforms and other websites that may be accessed through PayGlocal’s websites also have their own privacy policies. We encourage you to read the privacy notices provided by these sites before you give them your information.

Your Rights

We recognize the importance of your right to control the usage of your Personal Data. We provide you with multiple ways to exercise your right over the usage of your Personal Data.
  1. Right to access: You have the right to request and obtain information from us to receive a summary and an overview of the processing activities of the Personal Data being processed by us. You can also learn about the identities of any other third-party service providers with whom your Personal Data has been shared. However, such right shall not be applicable in cases where your Personal Data has been shared with another third-party service provider authorized by law to obtain such Personal Data.
  2. Right to modification: you have the right to request us to correct, complete or update Personal Data we possess about you.
  3. Right to Erase: you can ask us to delete, remove or opt-out the Personal Data that has no reason for us to retain or process for the purpose of the Services availed. Further, you may expressly opt-out from the Services provided by PayGlocal at any time. Additionally, you can refrain us from processing certain information as you feel it violates your fundamental rights and freedom. However, such right shall not be applicable unless retention of the same is necessary for the specified purpose or for compliance with any law for the time being in force.
  4. Right to opt out of receiving marketing mails:you have the right to opt out of receiving marketing messages and emails at any time by unsubscribing from our email list.
  5. Right to limit the use or sharing of sensitive personal information:you have the right to limit the use and/or sharing of your sensitive Personal Data with our third parties at any time by writing to us.
  6. Right to withdraw Consent: You may withdraw the consent for processing your information at any time. If you withdraw your consent, we may not be able to provide certain Services to you. We will advise you if this is the case at the time you withdraw your consent. You may submit these requests by writing to us at [email protected].
  7. Right to nominate: You also have the right to nominate any other individual, who shall, in the event of your death or incapacity exercise the rights provided hereunder.

Children’s Data

PayGlocal’s platforms are not directed to children, and PayGlocal does not knowingly collect information from children under the age of 18. We may collect data from children over 18 who are allowed by law to interact with PayGlocal. If you believe that we are processing a child’s information inappropriately, please contact us on [email protected]

Jurisdiction

Usage of our PayGlocal platform is constructed and governed according to the laws of India. By using this website, you agree that any proceedings or legal actions arising from your use and may be addressed exclusively in the competent tribunals/ courts situated in Bengaluru, India.

Changes to This Privacy notice

We may update this Privacy Notice from time to time. We will post an alert online if the changes are material. If the changes will materially affect the way we use identifiable information that we have already collected, we will notify you.

Grievance Mechanism

If you have questions or comments about our privacy practices, or if you would like help exercising your privacy rights, please contact us. You can:
Email us:[email protected] (Please do not include sensitive information, such as your account number, in emails)
Mail us a letter:Privacy Office - PayGlocal Technologies Private Limited 72, 3rd floor, Service Road, LRDE Layout, Doddanekundi, Bengaluru, Karnataka – 560037, India