Privacy Policy

Last Updated: October 4, 2025

At PayMe 2D Gateway, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data.

1. Information We Collect

1.1 Personal Information

We collect the following personal information when you register or use our services:

• Identity Information: Name, email address, phone number, date of birth
• Business Information: Company name, business type, industry, GST number, PAN
• Financial Information: Bank account details, transaction history
• KYC Documents: Aadhaar, PAN card, business registration certificates
• Contact Information: Address, city, state, PIN code

1.2 Automatically Collected Information

• Device Information: IP address, browser type, operating system
• Usage Data: Pages visited, time spent, features used
• Cookies: Session cookies, preference cookies, analytics cookies
• Transaction Data: Payment amounts, timestamps, status

2. How We Use Your Information

2.1 Service Provision

• Process payments and transactions
• Verify your identity (KYC compliance)
• Manage your merchant account
• Provide customer support
• Send service-related notifications

2.2 Business Operations

• Fraud detection and prevention
• Risk assessment and management
• Compliance with legal obligations
• Improve our services and user experience
• Conduct analytics and research

2.3 Marketing & Communication

• Send promotional offers (with your consent)
• Product updates and announcements
• Educational content and resources
• Surveys and feedback requests

3. Data Sharing & Disclosure

3.1 We Share Your Information With:

• Payment Partners: Banks, card networks, payment processors
• Service Providers: Cloud hosting, analytics, customer support tools
• Regulatory Authorities: RBI, tax authorities, law enforcement (when required)
• Business Partners: With your explicit consent

3.2 We Do NOT:

• Sell your personal information to third parties
• Share your data for third-party marketing without consent
• Disclose sensitive information unless legally required

4. Data Security

4.1 Security Measures

We implement industry-standard security measures to protect your data:

• Encryption: 256-bit SSL/TLS encryption for data transmission
• Secure Storage: Encrypted databases with access controls
• PCI DSS Compliance: Level 1 PCI DSS certified
• Regular Audits: Security assessments and penetration testing
• Access Controls: Role-based access and authentication
• Monitoring: 24/7 security monitoring and threat detection

4.2 Data Breach Protocol

In the unlikely event of a data breach, we will:

• Notify affected users within 72 hours
• Report to relevant authorities as required by law
• Take immediate action to contain and remediate the breach
• Provide guidance on protective measures

5. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services to you
• Comply with legal and regulatory requirements (minimum 7 years for financial records)
• Resolve disputes and enforce agreements
• Prevent fraud and abuse

6. Your Rights

6.1 Access & Control

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your data (subject to legal requirements)
• Portability: Receive your data in a structured format
• Objection: Object to certain data processing activities
• Restriction: Request restriction of data processing

6.2 Exercising Your Rights

To exercise any of these rights, contact us at privacy@payme2dgateway.com. We will respond within 30 days.

7. Cookies & Tracking

7.1 Types of Cookies We Use

• Essential Cookies: Required for platform functionality
• Performance Cookies: Help us improve user experience
• Analytics Cookies: Google Analytics for usage statistics
• Preference Cookies: Remember your settings and preferences

7.2 Cookie Management

You can control cookies through your browser settings. Note that disabling cookies may affect platform functionality.

8. Third-Party Services

Our platform may contain links to third-party websites or integrate with third-party services. We are not responsible for their privacy practices. Please review their privacy policies separately.

9. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

10. International Data Transfers

Your data is primarily stored and processed in India. If we transfer data internationally, we ensure adequate safeguards are in place to protect your information in accordance with applicable laws.

11. Compliance

We comply with:

• Information Technology Act, 2000
• Information Technology (Reasonable Security Practices) Rules, 2011
• Payment and Settlement Systems Act, 2007
• RBI guidelines on data protection
• PCI DSS standards

12. Updates to Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via:

• Email notification
• Dashboard announcement
• Website banner

Continued use of our services after changes constitutes acceptance of the updated policy.

13. Contact Us

For privacy-related questions or concerns:

• Email: privacy@payme2dgateway.com
• Data Protection Officer: dpo@payme2dgateway.com
• Phone: +91 22 1234 5678
• Address: PayMe 2D Gateway, Mumbai, Maharashtra, India