This Privacy Policy explains how PayShift Payment LLC ("PayShift", "we", "us") handles personal data collected through this website. We aim to comply with applicable UAE law, including Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the "PDPL") and its implementing regulations, to the extent applicable. [Counsel to confirm applicable regime, including any free-zone data protection law (e.g. DIFC or ADGM) if relevant to the company's licence.]
1. Who we are
PayShift Payment LLC [registered address — to be confirmed] [trade licence number — to be confirmed]. We act as an independent introducer and reseller of payment solutions offered by third-party licensed partners. We are the controller of personal data submitted through this website.
2. What we collect
- Enquiry form: name, company name, business email, phone number, emirate, industry, solution of interest, optional estimated monthly volume range, and your message.
- WhatsApp or email: the information you choose to send us.
- Technical data: IP address (used transiently for security and rate-limiting), and — only if you accept analytics cookies — aggregated usage information.
We do not ask for, and you should not send us, card numbers, CVV codes, bank passwords, one-time passcodes or other payment credentials. If you are introduced to a partner, the partner will collect any documents it requires directly under its own privacy notice.
3. Why we use it and our legal basis
- To respond to your enquiry and discuss your requirements — on the basis of your consent and/or steps taken at your request before entering into an arrangement.
- To introduce you to a payment partner — only with your agreement at the time of introduction.
- To keep our website secure and prevent abuse — legitimate interests / legal obligations.
- To comply with legal and regulatory obligations.
4. Sharing
- Payment partners: only the partner(s) you agree to be introduced to.
- Service providers: our email and hosting providers, under contractual confidentiality and security obligations.
- Authorities: where required by law.
We do not sell personal data, and we do not submit enquiry data to third-party artificial-intelligence services.
5. International transfers
Some service providers (for example email or hosting) may process data outside the UAE. Where this happens we will rely on a transfer mechanism permitted under applicable law. [Counsel to confirm hosting/email locations and transfer basis.]
6. Retention
We keep enquiry data only as long as needed to handle your enquiry and any resulting introduction, and to meet legal obligations. [Retention period — e.g. 24 months from last contact — to be confirmed.]
7. Your rights
Subject to applicable law, you may request access to, correction of, or deletion of your personal data; restrict or object to processing; withdraw consent at any time; and request data portability. To exercise these rights, contact us at [privacy contact email — to be confirmed]. You may also have the right to complain to the competent data protection authority.
8. Security
We use encrypted connections (HTTPS), server-side validation, spam and abuse protection, and access controls. Enquiry data is delivered to a restricted company mailbox and is not stored in the website itself. No method of transmission or storage is completely secure.
9. Cookies
See our Cookie Policy.
10. Changes
We may update this policy. The "last updated" date shows when it was last changed.
11. Contact
Questions about this policy: [privacy contact email — to be confirmed].