Privacy Policy
This Privacy Policy explains how Expayments LTD collects, uses, stores, and protects personal information in connection with our payment services, website, merchant integrations, and related communications.
Introduction
Expayments LTD is a Canadian Payment Service Provider (PSP) that facilitates payment processing services for merchants and customers. We are committed to protecting personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA), applicable provincial privacy laws, and financial regulatory requirements.
Scope
This Privacy Policy applies to personal information collected through:
- Our payment processing services.
- Merchant platforms and integrations.
- Our website and mobile applications.
- Communications with customers and merchants.
Information We Collect
Customer Information
- Name.
- Billing and shipping address.
- Email and phone number.
- Payment details, including card information or tokenized data.
- Transaction details.
Merchant Information
- Business name and registration details.
- Directors and beneficial owners for KYC checks.
- Bank account details.
- Transaction and settlement data.
Compliance and Verification Data
- Government-issued identification.
- Date of birth.
- Risk and fraud assessment data.
Technical and Usage Data
- IP address.
- Device identifiers.
- Browser type and logs.
- Cookies and tracking data.
How We Use Personal Information
We use personal information to:
- Process payments and settlements.
- Provide payment gateway and API services.
- Verify identity through KYC and KYB procedures.
- Detect and prevent fraud or unauthorized transactions.
- Comply with AML, tax, and other regulatory requirements.
- Communicate with users and merchants.
- Improve platform performance and user experience.
Legal Basis for Processing
- Consent, where required.
- Contractual necessity for payment processing services.
- Legal obligations, including FINTRAC and tax reporting requirements.
- Legitimate business interests such as fraud prevention and service improvement.
Disclosure of Personal Information
We may share personal information with:
- Financial institutions and acquiring banks.
- Card networks such as Visa and Mastercard.
- Payment processors and settlement partners.
- Fraud prevention and identity verification providers.
- Regulatory authorities, including FINTRAC.
- Law enforcement where required by law.
Cross-Border Transfers
Personal information may be processed or stored outside Canada, for example by cloud providers or payment networks. We apply appropriate safeguards, including contractual protections, data security standards, and risk assessments.
Data Retention
We retain personal information:
- As long as necessary to provide services.
- To meet legal obligations, including minimum retention periods for financial records.
- To resolve disputes and enforce agreements.
Your Rights
Individuals have the right to:
- Access their personal information.
- Request correction of inaccurate or outdated information.
- Withdraw consent, subject to legal or contractual limits.
- File a complaint with the Office of the Privacy Commissioner of Canada.
Cookies and Tracking Technologies
We use cookies to enable platform functionality, analyze usage, and help prevent fraud.
Users can manage cookie preferences through their browser settings.
Third-Party Services
Our services may integrate with third-party platforms such as e-commerce systems and payment gateways. Their privacy practices are governed by their own policies.
Updates to This Policy
We may update this Privacy Policy periodically. Any updates will be posted on this page together with a revised effective date.