Privacy Policy

Policy status

PayKonek Digital Payments Inc. is preparing its final Privacy Policy. The final document will describe the personal information practices that apply to PayKonek services, website visitors, account holders, merchants, platforms, partners, and other relevant individuals.

Before publication, this template must be updated to reflect actual processing activities, systems, service providers, partner relationships, retention practices, security measures, and applicable legal requirements.

1. Who we are

PayKonek Digital Payments Inc. is expected to be the organization responsible for personal information processing when it determines the purposes and means of processing.

Required before publication: Insert the registered legal name, business address, registration details, contact details, Data Protection Officer or privacy contact, and any applicable representative information.

2. Information we may collect

Depending on how an individual interacts with PayKonek, the final policy may describe collection of:

• Identity and contact details, such as name, email address, telephone number, role, and organization information.
• Business, account, verification, and authorized-representative information required for onboarding or risk review.
• Transaction, payment, payout, wallet, reference, settlement, reconciliation, and operational information.
• Technical and usage information, such as browser, device, IP address, product activity, logs, and diagnostic information.
• Support communications, feedback, inquiry details, and information submitted through forms, chat, or email.

Do not submit passwords, one-time passwords, complete card numbers, private keys, secret API keys, or other credentials through public forms, chat, or email.

3. How information may be used

The final policy may state that PayKonek uses personal information to:

• Provide, maintain, secure, support, and improve PayKonek products, services, and payment-operation workflows.
• Set up accounts, verify organizations, administer access, and provide customer or partner support.
• Process, monitor, reconcile, report, investigate, and support payment, wallet, payout, settlement, and related activity.
• Prevent fraud, abuse, unauthorized access, security incidents, and other prohibited or harmful activity.
• Communicate service notices, account matters, support requests, product updates, and relevant operational information.
• Meet legal, regulatory, contractual, accounting, audit, dispute-resolution, and recordkeeping obligations.

4. Legal grounds and permissions

Where applicable, the final policy should identify the lawful bases used for processing, which may include consent, contract performance, legal obligations, legitimate interests, or another basis recognized by applicable law.

The specific legal basis should be confirmed for each processing activity, service relationship, country, and applicable legal framework.

5. When information may be shared

The final policy may describe sharing relevant information with:

• Payment partners, banks, payment providers, wallets, processors, settlement providers, billers, and other parties needed to support an approved payment workflow.
• Hosting, infrastructure, security, communications, analytics, support, and professional service providers acting under appropriate instructions or agreements.
• Auditors, advisers, insurers, and business transaction participants where appropriate.
• Authorities, regulators, courts, law-enforcement bodies, or other parties when required or permitted by law.

Required before publication: Confirm whether and how PayKonek shares information, whether it sells or shares personal information as defined by applicable law, and the current list of material subprocessor and partner categories.

6. Retention

The final policy should explain that personal information is retained only for as long as reasonably necessary for the stated purposes, including legal, accounting, fraud-prevention, security, dispute, audit, contractual, and regulatory requirements.

Required before publication: Add an approved retention schedule covering account information, verification data, transaction and settlement records, logs, support communications, marketing preferences, and recruitment information.

7. Security

The final policy may describe appropriate technical and organizational safeguards that are actually implemented, which may include encrypted connections, access controls, least-privilege access, environment separation, monitoring, backups, audit logging, and incident-response processes.

No system or transmission method is completely secure. The final policy should provide the appropriate process for reporting suspected unauthorized access or privacy concerns.

8. Rights and choices

Depending on applicable law, individuals may have rights to be informed, access, correct, object to, restrict, delete, or port personal information, withdraw consent, or lodge a complaint with the relevant regulator.

Required before publication: Confirm the rights, request process, verification requirements, response timelines, applicable exceptions, regulator information, and approved privacy contact channel.

9. Cookies and similar technologies

The final policy should identify necessary cookies used for security and website functionality and, where applicable, describe analytics, preference, support-chat, advertising, or other optional technologies.

Required before publication: Complete a cookie inventory and publish the applicable providers, purposes, retention periods, consent controls, and Cookie Policy.

10. International processing

Service providers or partners may process information in countries outside an individual's location. The final policy must identify the actual processing locations, transfer mechanisms, contractual protections, and safeguards that apply.

11. Children

PayKonek services are intended for businesses, organizations, and users who can lawfully enter into the relevant relationship. The final policy should define the applicable age and handling procedures for any personal information relating to children.

12. Changes to this Policy

The final Privacy Policy may be updated to reflect changes in services, payment workflows, partners, processing activities, or legal obligations. The published version should state the effective date and describe how material changes will be communicated where required.