1. Who we are
Zeontech Limited, trading as ZeonPay, is the controller of personal data described in this policy, except where we process transaction data on a merchant's behalf (see section 8). Privacy contact: privacy@zeontech.org.
2. Data we collect
- Merchant and account data: business and ownership details, representatives' names, work email, phone, role, identity and due-diligence documents, credentials and access logs.
- Transaction and integration data: references, amounts, statuses, timestamps, bank or channel identifiers and, where necessary to process a payment, payer and beneficiary details supplied through the merchant, API request and response logs, callback records.
- Technical data: IP address, device and browser information, security and audit logs.
- Communications: messages you send us through the contact form or by email.
- Website data: limited essential browser storage as described in our Cookie Policy.
3. How and why we use data
| Purpose | Legal basis (where applicable) |
|---|---|
| Onboard and verify merchants; provide the API, sandbox and dashboard | Contract / steps before a contract |
| Route, process, reconcile and report transactions | Contract; legitimate interests |
| Fraud prevention, security, AML and sanctions controls, audit | Legal obligation; legitimate interests |
| Support, service notices and responding to enquiries | Contract; legitimate interests |
| Improving reliability and the Services | Legitimate interests |
4. Who we share data with
We share data only as needed and under appropriate safeguards:
- upstream payment service providers, banks and payment networks that process transactions;
- infrastructure, hosting, content-delivery, security and email providers that support the Services;
- professional advisers, auditors and insurers;
- regulators, law-enforcement and other authorities where required by law or to protect rights, safety and the integrity of the Services;
- a successor entity in a merger, acquisition or restructuring, with notice where required.
We do not sell personal data and do not use it for third-party advertising.
5. International transfers
Our Providers and service suppliers may be located in other countries. Where personal data is transferred across borders, we use appropriate safeguards, such as contractual protections, where required by applicable law.
6. Retention
We keep personal data only as long as needed for the purposes above and to meet legal, accounting, regulatory and dispute-resolution requirements. Merchant, transaction and audit records are generally retained for the period required by applicable financial-record and AML rules after the relationship ends, and then deleted or anonymised.
7. Security
We use access controls, token authentication, optional IP restrictions, two-factor authentication for dashboard access, encrypted connections and audit logging. No system is perfectly secure; please protect your credentials and tell us promptly of any suspected incident.
8. Our role for transaction data
Where we process payer or beneficiary data supplied by a merchant, the merchant decides why and how it is used and is responsible for having a lawful basis and providing notices to its customers; we act as its service provider and process the data on its instructions, as set out in our agreement with it. Please contact the merchant first for requests about your payment.
9. Your rights
Depending on where you live, you may have the right to access, correct, delete or restrict the use of your personal data, object to certain processing, request portability, and withdraw consent where processing is based on consent. We may need to keep some data to meet legal obligations. To exercise rights, email privacy@zeontech.org. You may also complain to your local data-protection authority.
10. Children
The Services are intended for businesses and are not directed to children. We do not knowingly collect personal data from children.
11. Changes
We may update this policy and will change the “Last updated” date. Material changes will be communicated where required.
12. Contact
Zeontech Limited
Privacy enquiries: privacy@zeontech.org