GoAllPay App “the App” provides store online payment service “the Service” to merchants who use Shopify to power their stores. This Privacy Policy describes how personal information is collected, used, and shared when you install or use the App in connection with your Shopify-supported store.
This Privacy Policy applies to our users (the “Users”) of our services (the “Services”), which are provided by AllPay International Limited (“GoAllPay) to facilitate payments in connection with certain online transactions on your sites. Unless otherwise indicated or the context requires otherwise, reference to “you” or “your” are intended to refer to a User, and reference to “we”, “us” or “our” in this Policy are intended to refer to “GoAllPay” and include relevant companies in GoAllPay that are involved in providing the Services (each an “Affiliate” or member of the “GoAllPay”).
The personal information we collect includes:
your basic personal details (including first and last name, and copies of your personal ID documents);
your ultimate beneficial owners’ information and your directors’ information (including first and last name, residential address, and shareholdings);
contact information (including your business address, residential address, billing address, phone number, email, and other information);
account information (including bank account and payment details);
registration details;
financial information and tax identification information;
transaction details (including purchase orders, your end users’ personal detail and card information); and technical information, including:
information about the device you use to interact with us, and
information from your visits to our websites.
We collect personal information about you in connection with the Services. For example, we collect your personal information when you browse our website, integrate with our system, enquire about or register to use any of the Services, sign a contract with us, provide your personal information during the User on-boarding process (including but not limited to“know your customer” process and our risk assessment process), log into your account to use the Services; or when you communicate with us via e-mail, phone, SMS, or any other electronic means. We also receive personal information about you from other sources, including:
other third parties, including those who support the ability to make payments and conduct transactions through the Services;
affiliates;
suppliers providing services on our behalf;
banks and other payment institutions that we cooperate with to provide you with the Services; and
publicly available sources.
We combine information that we have about you from various sources, including the information you have provided to us.
We use the information we collect to operate our business, including the Services. For example, we may use your personal information for the following purposes:
verifying your identity, including during account creation and password reset processes;
verifying your eligibility as a User of Services;
processing, maintaining and managing your registration as a User;
providing you with the Services and related User services, including operating the Services and enabling transactions, customizing your user experience, enabling the receipt of your end users’ payments, facilitating the settlement of payment for goods and services and providing other fund settlement services, handling foreign exchange conversions, charge-backs, sending notices about transactions, and responding to your queries, feedback, claims or disputes;
contacting you in relation to our provision of the Services, contacting you in connection with any communication preferences or requests you have expressed, asking you for feedback about the Services or other related products and services, collecting feedback from you and your staff about our products and services and using such feedback to improve our business and/or customize products and services; sending you information about products and services, including for promotional purposes; and contacting you for legal purposes;
assessing, detecting, investigating, preventing or remediating fraud, data breaches or other potentially prohibited or illegal activities and otherwise protecting the integrity of our platform;
managing our risk, performing creditworthiness and solvency checks, or detecting, investigating, preventing or remediating violations of your agreements with us or any of our applicable policies, industry standards, guidelines, laws and regulations, etc.;
making disclosures as may be required by any rules, law or regulation, regulatory authorities, government official or other third party, including any card association or other payment network. Such disclosures may also be made pursuant to any subpoena, court order or other legal process or requirement applicable to us or any Affiliates (including “know your customer”, anti-money laundering, counter-terrorist financing reporting, tax requirements or other commercial disputes);
making disclosures to third parties including relevant regulators to prevent any harm or financial loss, to report suspected illegal activity or to establish, exercise, or defend claims or potential claims on behalf of ourselves or our Affiliates;
improving and optimizing the Services;
managing our business including to prevent harm, fraud or theft to ourselves or others, maintain the security of our products, and protect our rights or property and those of others; and otherwise for everyday business purposes, to comply with law, or in other ways for which we provide specific notice at the time of collection.
We share your personal information to operate and manage our business, including for the purposes indicated under ARTICLE 3. Thus, for example, we may share your information with:
Affiliates;
Third parties, including:
1) any agent, contractor or third party service provider that we work with in providing the Services. For example, we work with third parties to help us with fraud prevention, anti-money laundering checks, credit checking, bill collection, data entry, database management, promotions, marketing, customer service, technology services, products and services alerts and payment extension services or to provide trade financing services;
2) banks, card associations, payment networks or acquiring institutions, and others, including those involved in processing of payments and conducting transactions through the Services; and law enforcement agencies, insurers, government and regulatory authorities or any other organizations to which GoAllPay, or any Affiliate or third party service provider, is under an obligation to make disclosure under the requirements of any applicable law, regulation or commercial arrangement.
(3) individuals and entities involved in any merger, acquisition, corporate reorganization, financing, or similar transaction with us, including in the event of the sale of all or part of our assets; and our own and others’ professional advisors (e.g., lawyers, accountants, auditors, and trustees).
We will keep your personal information in accordance with our policies and for as long as it is necessary to provide you with our Services or other purposes as set out in this Policy. In addition, we may retain your personal information for a longer period if it is necessary to comply with laws and regulations applicable to us.
We use a variety of security measures and technologies designed to help protect your personal information from unauthorized access, use, disclosure, alteration or destruction consistent with applicable data protection and privacy laws and regulations. You are responsible for maintaining the security of your account information (username, password, etc.) for our Services in your possession or control.
Our service is not directed towards children under 18 years old, nor does GoAllPay knowingly collect information from children under 18. If you are under 18, please do not use the Services or submit any personal information to us.
If you, acting as a guardian of a child, have relevant questions in respect of a child’s personal information, please contact us using the details set out in the ARTICLE 11 section below.
The Services and our website may provide links to other websites and services (including other online merchant sites) for your convenience and information. These services and websites may operate independently from us. Linked services and websites may have their own privacy notices or policies, which we strongly suggest you review if you visit any linked websites. To the extent any linked websites you visit are not owned or controlled by us, we are not responsible for these websites’ or services content, any use of these services or websites by you, or the privacy practices of these services or websites.
We may change, amend or revise this Policy from time to time. We will notify you of any substantive or material change in this Policy by updating this web page, sending notifications, e-mails or letters, by phone or by publishing announcements on our website. You can also review this Policy at the home page of our website.
In accordance with applicable data protection and privacy laws and regulations, you may be entitled to:
ask us about the processing of your personal information, including to request a copy of your personal information;
request the correction and/or (in some cases) deletion of your personal information;
in some cases, request the restriction of the processing of your personal information, or object to that processing;
withdraw your consent to the processing of your personal information (where GoAllPay is processing your personal information based on your consent);
request receipt or transmission to another organisation, in a machine-readable form, of the personal information that you have provided to GoAllPay where we are using your personal information based on consent or performance of a contract; and
complain to the relevant supervisory authority if your privacy rights are violated, or if you have suffered as a result of unlawful processing of your personal information.
Where you are given the option to share your personal information with us, you can always choose not to do so. If we have requested your consent to processing and you later choose to withdraw it, we will respect that choice in accordance with our legal obligations.
However, choosing not to share your personal information with us or withdrawing your consent to our use of it could mean that we are unable to perform the actions necessary to achieve the purposes of processing described (see How we use your personal information) or that you are unable to make use of the services and products offered by us. After you have chosen to withdraw your consent, GoAllPay may be able to continue to process your personal information to the extent required or otherwise permitted by applicable data protection and privacy laws or regulations.
If you would like to exercise your rights, contact us using the details set out in ARTICLE 11. section below.
Your personal information may be processed by us, companies in the GoAllPay and our trusted third party suppliers outside of Hong Kong, including in the regions and/or countries where data protection and privacy laws or regulations may not be equivalent to, or as protective as, the data protection and privacy laws and regulations in Hong Kong.
These regions and/or countries include, among others:
· Mainland, PRC.
In accordance with applicable data protection and privacy laws and regulations, we will implement appropriate measures to ensure that your personal information remains protected and secure when it is transferred outside of Hong Kong to a jurisdiction.
We may also transfer your personal information outside of Hong Kong as permitted by applicable data protection and privacy laws and regulations. Examples include where we need to transfer your personal information: (a) to perform a contract with you (or to take steps before the contract at your request); (b) perform a contract in your interests; or (c) in relation to legal claims.
If you have questions or requests about the privacy of your personal information, please contact us by email via support@allpayx.com.