Policies

This Privacy Policy (the “Policy”) describes the personal data that Valtrix Labs Ltd (“payorchestrate”, “we”, “us” or “our”) collects from or about you when you use https://payorchestrate.com and related services (the “Services”), how we use that information, and to whom we disclose it. For the purposes of this Policy, “personal data” has the same meaning as in the EU General Data Protection Regulation 2016/679 (“GDPR”) and the UK GDPR / Data Protection Act 2018, and where applicable the California Consumer Privacy Act (CCPA).

This Policy should be read with our Terms of Use. We may update it from time to time and will provide notice of material changes via the Services. Continued use after notice means you accept the changes.

1. Accountability and openness

Valtrix Labs Ltd is responsible for personal data under our control. We maintain policies and procedures to safeguard confidential personal data and to handle complaints. Questions should be directed to our Privacy Officer / Data Protection Officer:

Every complaint will be investigated. Where a deficiency is found, we will take appropriate measures, which may include amending our policies. We will also cooperate with regulatory authorities where needed.

2. Consent

By using the Services, you agree to this Policy and to our collection, use and disclosure of personal data as described here. You may withdraw or change consent by contacting the Privacy Officer. Withdrawal may affect your ability to use the Services.

3. Collection and retention

We collect personal data only as needed for the purposes below, and retain it only as long as necessary (subject to legal or accounting requirements). Data no longer required is destroyed, erased or anonymised, though copies may remain on backup media.

Account information. When you register or update an account we may collect name, email address, business details and other contact information, plus information you submit while using the Services (for example merchant configuration, integration metadata and support requests).

Usage data. We collect anonymised information about how the Services are used. This is not used to identify you as an individual.

Account deletion. You may request deletion by contacting us. After confirmation, your account is marked for deletion within 30 days. During that period you may ask to reactivate it. After 30 days deletion is permanent.

Inactivity. Accounts inactive for 1 year may be permanently deleted. We will email the account address about 30 days beforehand with instructions to keep the account active.

Retention after deletion. We may retain data longer where needed for accurate business/financial records, to resolve or defend legal claims, or where mandated by law or contract.

Technical information. We may collect IP address, access times and device/OS information for administration, security, intrusion detection and usage statistics. We do not link this to identity without permission, except where required for security investigations with competent authorities.

Cookies and beacons. See our Cookie Policy. Cookies help with access control, session activity and usage analytics. You may decline cookies in your browser; some features may be limited.

4. Why we collect, use and disclose information

• To enable access to and use of the Services
• To process, track and communicate about Service usage
• To establish and manage business relationships and provide requested products or services
• For internal administration and improvement of the Services
• For internal research, polls and feedback
• To share information about our products and services where permitted
• To protect against error, fraud, theft or damage
• To comply with legal, accounting and regulatory requirements

We may collect, use or disclose personal data without knowledge or consent where permitted or required by law, government request or court order, or where we believe in good faith it is necessary to protect our assets, users or the public.

5. Disclosure to third parties

We may disclose personal data to government agencies, law enforcement or regulators, or when buying/selling all or part of our business. In providing the Services we may use subprocessors (for example hosting, payment processors and infrastructure vendors), sharing only what is needed and using contractual or other means for comparable protection.

6. Safeguards

We maintain reasonable security measures (including access controls, passwords and encryption where appropriate) against loss, theft and unauthorised access or use. Access is limited to those with a need to know and confidentiality obligations. No system is failsafe; transmission over the internet involves risk. By using the Services you acknowledge this and agree we are not responsible for data lost or intercepted by third parties without authorisation, except as required by law.

7. Accuracy and access

You may request access to your personal data and ask us to correct inaccuracies. Contact the Privacy Officer in writing. Advise us promptly if your details change or you want information removed where applicable.

8. International transfer

Personal data may be transmitted, processed or stored outside the United Kingdom, including in the EU/EEA and other jurisdictions with lawful processing arrangements. We use reasonable means to protect your information, but foreign laws may differ.

9. Third-party sites

The Services may link to third-party sites. Their privacy practices are their own. This Policy applies only to payorchestrate Services.

10. Minors

Minors may not use the Services unsupervised. We do not knowingly collect personal data from minors. If you are under the age of majority in your jurisdiction, use the Services only with adult supervision.

11. Breach notice

If a security breach materially affects you, we will notify you as soon as practicable and later provide information about our response, as required by applicable law.

12. Your data rights

Depending on your location (including the UK/EU), you may have rights to be informed, access/rectify data, erasure, restriction of processing, data portability and to object to certain processing. Email privacy@payorchestrate.com to exercise these rights. We will respond in accordance with applicable law.

13. Contact