HyperPay (the "App") provides payment processing, fraud management, and checkout optimization solutions (the "Service") to merchants who use Shopify to power their stores. This Privacy Policy describes how personal information is collected, used, and shared when you install or use the App in connection with your Shopify-supported store.

Personal Information the App Collects

When you install the App, we are automatically able to access certain types of information from your Shopify account:

• write_payment_gateways: Configures the payment gateways to work on the merchant's store.
• write_payment_sessions: Handles payment sessions and workflows (Resolve, Reject, Capture, and Refund).

Additionally, we collect the following types of personal information from you and/or your customers once you have installed the App:

• Information about you and others who may access the App on behalf of your store: We collect registration and account information provided directly by you, such as your name, job title, email address, phone number, physical/postal address, and financial or billing information. We may also collect proof of address, personal identification cards, or passports as required to validate your identity and conduct background due diligence (e.g., Know Your Customer ("KYC") or Know Your Business ("KYB") checks).
• Information about individuals who visit and purchase from your store: We collect details about customers who use HyperPay as a payment option, including their name, email address, phone number, physical address, billing address, IP address, web browser details, and time zone.
  Note: We do not store any credit card or payment card information. All transactions are securely processed directly by our PCI-DSS compliant infrastructure without storing card numbers, CVVs, or sensitive authentication details on our servers.

We collect personal information directly from the relevant individual (such as when individuals fill out the payment form on our Site) or through your Shopify account. We do not use any tracking technologies (such as cookies, log files, web beacons, tags, or tracking pixels) to collect personal information from individuals who visit or shop at your store.

How Do We Use Your Personal Information?

We use the personal information we collect from you and your customers in order to provide the Service and to operate the App. Additionally, we use this personal information to:

• Communicate with you;
• Optimize or improve the App and our payment processing services;
• Validate your identity, fulfill our regulatory obligations, and prevent fraudulent activity, financial crime, money laundering, or unauthorized use of HyperPay services.

We may use automated decision-making and profiling for fraud detection and identity verification during transactions to ensure the security of our services.

Sharing Your Personal Information

We share your personal data with third parties to help us use your Personal Information as described above:

• Members of the HyperPay Group: Your information may be shared with our affiliates to provide you with our services.
• Third-Party Service Providers: We use trusted third-party partners acting on our behalf for data and cloud storage, website hosting, data analysis, identity screening, information technology infrastructure, customer support, and auditing.
• Payment Partners: We share transaction and payment data across the payment ecosystem (including banks, card schemes, alternative payment method providers, and card issuers) to securely process transactions.

Finally, we may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant, or other lawful request for information we receive, or to otherwise protect our rights. HyperPay does not sell personal data to third parties.

Your Rights

If you are a European resident, you have the right to access personal information we hold about you and to ask that your personal information be corrected, updated, or deleted. If you would like to exercise this right, please contact us through the contact information below.

Additionally, if you are a European resident, we note that we are processing your information in order to fulfill contracts we might have with you (for example if you make an order through the Site), or otherwise to pursue our legitimate business interests listed above. Please note that your information will be transferred outside of Europe, including to Canada and the United States.

For international data transfers from the UK or EEA to third countries without adequate protections, we implement Standard Contractual Clauses (SCCs) approved by the European Commission or the UK ICO respectively to ensure the security and protection of your personal data.

Data Retention

When you place an order through the Site, we will maintain your Order Information for our records unless and until you ask us to delete this information. Additionally, we automatically delete all customer and store data when you uninstall the App, or upon receiving a customer's request for deletion.

Changes

We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal, or regulatory reasons.

Contact Us

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail or by mail using the details provided below: