This Privacy Policy explains how ePaid ("ePaid", "we", "us") collects, uses, shares, and protects personal data when you visit our website, contact us, onboard as a merchant, or use our POS products and services. We process personal data in line with the Saudi Personal Data Protection Law (PDPL) and the requirements of the Saudi Central Bank (SAMA).
1. Data we collect
- Contact details you give us, such as your name, email address, phone number, and company name.
- Merchant onboarding information, such as commercial registration, business and store details, identity (KYC) documents, and bank account details for settlement.
- Transaction and device data needed to provide POS and payment services, such as terminal identifiers, transaction amounts, dates, and status.
- Technical data collected when you use our website, such as IP address, browser type, pages visited, and preferences like language and theme.
2. How we use your data
- To respond to your enquiries and provide sales and technical support.
- To onboard merchants, verify identity, and meet anti-money-laundering, fraud-prevention, and other regulatory obligations.
- To provide, operate, maintain, and improve our POS devices, software, and payment services.
- To send service updates and, where you have agreed, our newsletter. You can unsubscribe at any time.
- To keep our website and services secure and to comply with the law.
3. Legal basis
We process personal data where it is necessary to perform a contract with you, to comply with legal and regulatory obligations, for our legitimate business interests, or with your consent where consent is required.
4. Sharing your data
We do not sell personal data. We share it only when needed to provide our services or when required by law, including with:
- Acquiring banks, payment networks, and payment processors involved in your transactions.
- Technology and service partners who work on our behalf, such as hosting, device, and support providers, under confidentiality obligations.
- Regulators, courts, and government authorities, including SAMA, when legally required.
5. Data storage and security
We use technical and organisational measures to protect personal data, including encryption, access controls, and monitoring. Payment data is handled in line with applicable payment security standards. Where data is transferred outside the Kingdom, we do so only as permitted by the PDPL and its regulations.
6. How long we keep data
We keep personal data only as long as needed for the purposes above or as required by law — for example, financial and KYC records are kept for the periods set by Saudi regulations.
7. Your rights
Subject to the PDPL, you have the right to:
- Be informed about how your personal data is processed.
- Access and obtain a copy of your personal data.
- Ask us to correct incomplete or inaccurate data.
- Ask us to delete data we no longer need, unless we must keep it by law.
- Withdraw your consent at any time, where processing is based on consent.
8. Cookies and local storage
Our website uses your browser's local storage to remember your language and theme. We may use basic analytics to understand how the site is used. You can clear this data in your browser settings at any time.
9. Changes to this policy
We may update this Privacy Policy from time to time. The latest version is always available on this page, with the date it was last updated.
10. Contact us
For privacy questions or to exercise your rights, contact us at:
ePaid, 3422 Al Tufail Ibn Amrou, 7558 Al Faisaliyah Dist., 13712 AD DIRIYAH, Saudi Arabia — support@epaid.com