paidlayer
PRIVACY POLICY
Purpose of this Privacy Policy
Privacy Policy
This Privacy Policy describes how and for what purposes paidlayer (hereinafter referred to as "we," "us," "our," or the "Company") collects, uses, stores, and processes users' personal data, and informs data subjects of their rights in accordance with the applicable laws of the United Arab Emirates, including UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL) and its implementing regulations, as amended.
This Privacy Policy applies to personal data provided to us directly by users, as well as by third parties that have a lawful basis for disclosing such information to us.
For the purposes of this Privacy Policy, "personal data" means any information relating to an identified or identifiable natural person.
Please read this Privacy Policy carefully to understand how we process your personal data and the measures we take to protect it.
General Information
For the purposes of applicable Data Protection Laws, paidlayer acts as the Data Controller with respect to the Personal Data described in this Privacy Policy.
This means that we determine the purposes and means of processing your Personal Data and are responsible for ensuring that such processing complies with applicable legal requirements.
We collect and process Personal Data for purposes including:
providing our services;
managing our relationship with clients and prospective clients;
fulfilling contractual obligations;
responding to inquiries and customer support requests;
complying with legal and regulatory obligations;
sending service-related communications;
sending marketing communications where permitted by law or where you have provided your consent.
In certain circumstances, we may also process Personal Data for purposes that are closely related to those listed above, where such processing would reasonably be expected.
You may withdraw your consent to receive marketing communications at any time by contacting us using the details provided on our website or by following the unsubscribe instructions included in our communications.
Where appropriate, we will explain:
what Personal Data we collect;
why we collect it;
how it will be used;
how long it will be retained;
with whom it may be shared.
We have appointed a person responsible for overseeing compliance with applicable data protection requirements.
If you have any questions regarding this Privacy Policy or the way we process your Personal Data, you may contact us using the contact information published on the paidlayer website.
How We Collect Personal Data
We collect only the Personal Data that is necessary for the provision of our services, the performance of our contractual obligations, and compliance with applicable legal and regulatory requirements.
We also ask our clients and partners to provide Personal Data only where such data is necessary for the relevant purpose.
We may collect Personal Data in the following cases:
when you request information about our services;
when you submit a contact form or business inquiry;
when we conduct preliminary checks before entering into a business relationship;
when you enter into an agreement with us or use our services;
when you contact us by email, phone, website form, client portal, messenger, or social media;
when you provide questionnaires, applications, or other documents;
when information is provided by authorized representatives, advisers, or other third parties;
when information is obtained from public registers, government databases, or other publicly available sources.
Categories of Personal Data We Process
Depending on the nature of the services provided, we may process different categories of Personal Data.
Corporate Clients
For corporate clients and individuals associated with them, we may process:
full name and position;
contact details, including address, phone number, and email address;
information about directors, shareholders, beneficial owners, authorized representatives, and other key persons;
date of birth, nationality, gender, and other identification details where required;
copies of passports, identity documents, or other verification documents;
information required for KYC, AML, sanctions screening, and other compliance checks;
communication history, including emails, calls, meeting notes, and messages;
information about contracts, services, and transactions;
information about related parties;
complaints, inquiries, and support requests;
information obtained from public sources or third-party providers.
Individual Clients
For individual clients, we may process:
full name;
contact details;
phone number;
email address;
residential or mailing address;
date of birth;
identity document details;
information required to verify identity;
information about services used;
transaction-related information;
communication history;
support requests and complaints;
information obtained from lawful external sources.
How We Use Personal Data
We process Personal Data only where we have a lawful basis to do so and only to the extent necessary for the relevant purpose.
We may use Personal Data to:
provide our services;
perform contractual obligations;
identify and verify clients and users;
conduct KYC, AML, sanctions, and fraud prevention checks;
comply with legal and regulatory requirements;
process inquiries and provide customer support;
ensure the security and integrity of our services;
prevent fraud, misuse, and unauthorized activity;
improve our services and user experience;
manage internal business operations;
send service-related notices;
send marketing communications where permitted by law or where consent has been provided.
We may process Personal Data on the basis of:
performance of a contract;
compliance with legal obligations;
our legitimate business interests;
consent, where required by applicable law.
In some cases, we may anonymize or pseudonymize Personal Data so that it can no longer be directly associated with an identifiable person. Such data may be used for analytics, reporting, research, and service improvement purposes.
If you do not provide certain information when requested, we may be unable to provide our services, enter into or perform a contract, or comply with our legal and regulatory obligations.
Cross-Border Transfers
Your personal data may be transferred to, stored in, or accessed from countries outside the United Arab Emirates, including where we use global service providers. Where such transfers occur, we implement appropriate safeguards and rely on the lawful transfer mechanisms or applicable exceptions provided under the UAE Personal Data Protection Law (UAE PDPL).
Data Retention
We retain Personal Data only for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law.
When determining retention periods, we consider:
the purposes for which the data was collected;
the nature of the services provided;
applicable legal and regulatory obligations;
the categories and volume of Personal Data;
the need to protect our rights and legitimate interests;
whether the relevant purpose can reasonably be achieved by other means.
Change of Purpose
If we need to use Personal Data for a purpose other than the one for which it was originally collected, we will do so only where we have a lawful basis and where the new purpose is compatible with the original purpose, or where otherwise permitted by law.
Where required by law, we will notify you before processing Personal Data for a new purpose.
Disclosure of Personal Data
We may disclose Personal Data:
with your consent;
where required by law;
in response to lawful requests from public authorities or regulators;
where necessary to provide our services;
where otherwise permitted under applicable law.
Sharing of Personal Data
When We Share Personal Data
In certain circumstances, we may share Personal Data with third parties where such sharing is necessary to provide our services, comply with legal obligations, or protect our legitimate business interests.
Any sharing of Personal Data is carried out only where there is a lawful basis and only to the extent necessary for the relevant purpose.
Categories of Third Parties
We may share Personal Data with the following categories of recipients:
cloud infrastructure and hosting providers;
IT service providers;
payment processors and payment service providers;
banking and financial institutions;
identity verification (KYC) service providers;
AML and sanctions screening providers;
fraud prevention service providers;
legal, accounting, tax, and professional advisers;
auditors;
regulators, supervisory authorities, law enforcement agencies, and other government bodies where required by applicable law.
All third-party service providers are required to maintain appropriate technical and organizational security measures and process Personal Data only in accordance with our instructions and applicable laws.
Business Transfers
If our business is involved in a merger, acquisition, reorganization, sale of assets, or similar corporate transaction, Personal Data may be transferred as part of that transaction.
In such cases, we will take reasonable steps to ensure that Personal Data continues to be protected in accordance with this Privacy Policy and applicable data protection laws.
Data Security
We implement appropriate technical, organizational, and administrative measures designed to protect Personal Data against:
unauthorized access;
accidental or unlawful destruction;
loss;
alteration;
disclosure;
misuse.
Access to Personal Data is restricted to employees, contractors, and authorized service providers who require such access for legitimate business purposes.
All individuals with access to Personal Data are subject to confidentiality obligations and are required to process Personal Data in accordance with applicable laws and our internal security policies.
We regularly review and update our security measures to address evolving technologies, cybersecurity risks, and regulatory requirements.
In the event of a Personal Data breach, we will take appropriate measures to investigate, mitigate, and remediate the incident. Where required by applicable law, we will notify affected individuals and competent supervisory authorities.
Your Privacy Rights
Keeping Your Information Up to Date
We encourage you to ensure that the Personal Data we hold about you remains accurate and up to date.
If your Personal Data changes, please notify us using the contact details provided on the paidlayer website.
Where Personal Data is no longer required for the purposes for which it was collected, we will securely delete, anonymize, or otherwise dispose of it, unless we are required to retain it by applicable law.
Your Rights
Subject to applicable law, you may have the right to:
access your Personal Data;
obtain a copy of your Personal Data;
request correction of inaccurate or incomplete Personal Data;
request deletion of your Personal Data;
request restriction of processing;
object to the processing of your Personal Data;
withdraw your consent where processing is based on consent;
request the transfer of your Personal Data to another data controller where technically feasible;
lodge a complaint with a competent data protection authority.
Exercising Your Rights
To protect your privacy and security, we may request additional information to verify your identity before responding to your request.
Requests regarding your privacy rights may be submitted using the contact details available on the paidlayer website.
We will respond to all legitimate requests within the timeframes required by applicable law.
Right to Withdraw Consent
Where the processing of your Personal Data is based on your consent, you have the right to withdraw that consent at any time.
You may withdraw your consent by contacting us using the contact information available on the paidlayer website.
Upon receiving your request, we will cease processing your Personal Data for the purposes based on your consent, unless we have another lawful basis for continuing such processing under applicable law.
The withdrawal of consent does not affect the lawfulness of any processing carried out prior to the withdrawal.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our business operations, services, technologies, legal requirements, or regulatory obligations.
The most current version of this Privacy Policy will always be available on the paidlayer website.
Where required by applicable law, we will notify users of material changes through appropriate communication channels before such changes become effective.
Your continued use of our website or services after the updated Privacy Policy becomes effective constitutes your acceptance of the revised Policy, unless otherwise required by applicable law.
Contact Information
If you have any questions regarding this Privacy Policy, the processing of your Personal Data, or if you wish to exercise your privacy rights, please contact us using the details below.
Company: PAYWAYS INTERNATIONAL – FZCO
Email: info@paidlayer.com
Registered Address: Dubai Silicon Oasis, Dubai, UAE
We will make every reasonable effort to respond to your request promptly and in accordance with applicable data protection laws.