Webfinpay ("the Company") is committed to ensuring the security of your personally identifiable information (the "User"). We recognize the legal right to privacy and place great importance on protecting that right. For this reason, we assure users that our personnel are dedicated to ensuring the utmost security for any personally identifiable information (e.g., financial data, addresses, telephone numbers, or email addresses). 

FOR MERCHANTS

Introduction

Webfinpay prioritizes privacy and data protection and has formulated this Privacy Policy to elucidate how we manage personally identifiable information obtained from Sub-Merchants. This policy outlines our practices concerning data collection and usage. As our services evolve, this policy may be revised, so regular checks are advised. 

Scope of Privacy Policy

This Privacy Policy pertains to personally identifiable information gathered from Sub-Merchants using Webfinpay payment gateway services and consumer information acquired in the course of our business. It also encompasses information shared by Webfinpay's back-end technology providers/partners. This policy doesn't extend to practices of companies not owned or controlled by Webfinpay.

Objectives

• Provide consumers notice of our information practices.
• Offer consumers choices in the use of their information.
• Provide reasonable access to correct inaccuracies.
• Take steps to protect the security and integrity of personal information.
• Information Security

We prioritize information security and employ measures such as Secure Sockets Layer (SSL) software for data encryption during transmission. Personal information is stored on secure computers with restricted physical access. Advanced security technology safeguards against unauthorized access.

Data Collection and Usage

Currently, Webfinpay collects personal information during Sub-Merchant registration, service agreement execution, and submission of required documents for credibility verification. Sub-Merchants may collect personal information from their customers through purchases. We use collected data in aggregate for demographic analysis and service enhancement.

Cookies and Tracking

Cookies aid in determining user preferences and site usage. We track domain names, IP addresses, operating systems, and browser types for analysis. IP addresses help determine the Internet Service Provider and geographic location.

Communication and Use of Information

Personal information allows us to inform Sub-Merchants about updates, changes, and relevant products/services. Webfinpay uses precautions to keep disclosed information secure and may exchange information with other entities for fraud protection and risk reduction.

Security Measures

Webfinpay takes reasonable precautions to secure personal information, not disclosing it unless required by law. Information exchange with other entities is solely for fraud protection and risk reduction. We are not responsible for security breaches by third parties.

Information Sharing

We do not distribute customer information for purposes other than service provision. However, information may be shared with third parties for consented purposes, service delivery, or fraud prevention. Personally identifiable consumer information is shared with third parties for payment processing.

Customer Access

Sub-Merchants can view and correct collected information through the Merchant Login page. Questions or suggestions can be directed to [email protected]

Legal Compliance

We respond to legal requests regarding information within our access logs, even without a court order, to address violations of our content guidelines. Cooperation with law enforcement is upheld.

User Awareness

Webfinpay is not responsible for Sub-Merchants' or visitors' actions. Users disclosing personal information to third parties should be cautious, as the information may be used for unsolicited emails.

FOR CUSTOMERS

Introduction

Webfinpay, a brand operated under WEBSONIC IT SERVICES PRIVATE LIMITED (referred to as "we" or "us"), is committed to safeguarding the privacy and data protection of its customers/users ("you" or "your"). This Privacy Policy explains how we handle personally identifiable information collected from users of Webfinpay's services directly or through third parties. As our services evolve, this policy may be revised, so please check back periodically. 

Privacy Commitment

As a responsible organization, Webfinpay recognizes the importance of the right to privacy. We understand the trust customers place in us while transacting through Webfinpay and are dedicated to protecting and safeguarding personal data.

Data Collection and Usage

Types of Personal Data	Purpose	Details of Personal Data
Name and Contact Information	We provide payment aggregation, payouts, and verification services to our merchants, business partners, and end users.	Your full name(s), title, age, user ID, gender, and date of birth. Your telephone/mobile number, your address, your state/city of residence, your country, your pin code, and your chosen billing address.
Financial Information	Account Registration	Bank account numbers, including e-nach, NEFT, IMPS, and UPI IDs, tokenized card information, card type, expiration date, and name.
Identification Information	Providing payment aggregation, payouts, and verification services to Our merchants and business partners, and complying with applicable laws.	KYC documents, such as proof of identity and address, a photograph, and a Permanent Account Number (PAN).
Payments related data	Our merchants, business partners, and end-customers rely on us for payment aggregation, payouts, and verification services to comply with applicable laws.	We collect payment gateway IDs, bank names, merchant names, categories and other identifiers, as well as details of products or services purchased or paid for, mode of payment, date, currency, amount of the transaction(s), success rate, and other information You provide to Us directly or indirectly, or information provided to Us by banks, merchants, or other service providers.
Credit related Information	Our business partners, third party service providers, and end-customers rely on Us to provide services related to payment aggregation, payouts, and verification.	Our business partners and third-party service providers may provide you with credit related information or assessments under Applicable Laws.
We receive information from You directly, our merchants, our business partners, or our third-party service providers	Third party services, such as Google Analytics, may collect, monitor, and analyze this type of information to facilitate Our Services, to provide the Service on our behalf, to perform services related to the Service, or to assist us in analyzing its usage. You may also receive newsletters, marketing materials, and other information that may be of interest to you. Our emails contain unsubscribe links or instructions that you can follow to opt out of receiving these communications.	Usernames and passwords for your account; email addresses; preferred settings and themes; communications with customer support; promotional campaigns; surveys; and records of your subscriptions to marketing materials, or withdrawals from them.
Your Device Information	Using Your device information, we can provide a customized experience, show targeted advertisements, and collect insights about How You use Our website or Services.	Your contact list, call records, SMS, media files, and location data in Your devices are used to enable You to access Our Services after requesting permission.

Authenticity of Information

• The information and personal data you provide to us are true, accurate, and complete. In the event that you provide inaccurate or false personal information, you are solely responsible for it.

• When feasible, you may review and correct the information and personal data you have provided during your use of the Services. 

Transfer of Personal Data

Compliance with Applicable Laws:

(a) We adhere to Applicable Laws concerning data storage and transfer. Subject to government guidelines, we may, where permitted by law, transfer and store the information you provide to us outside India. This includes scenarios where our servers or service providers are located in countries other than India. The entities in such countries may be governed by their respective data laws.

(b) If you use our Services outside India, your information may be transferred, as per Applicable Laws, to a country other than India to provide you with the Services.

(c) By submitting your information, you agree to its transfer, storage, and processing outside India as described above.

Cookies

Cookies are small files that websites transfer to your device to recognize your browser and capture certain information. We use cookies to enable sessions, save preferences, track advertisements, and gather aggregate data about site traffic. Third-party service providers may assist in understanding site visitors. They are not allowed to use the information except to improve our business. You may encounter cookies from third parties on certain pages. We do not control their use.

Data Security

• Security measures, including encryption and firewalls, are in place to protect personal information. However, absolute protection is not guaranteed, and accessing the Services implies acknowledgment of associated risks.
• Compliance with government’s guidelines and the Information Technology Act, 2000, will be maintained in the event of a data or security risk.

Links to Other Websites

The Website may contain links to other websites, and it's important to note that this Privacy Policy doesn't extend to the collection and usage of information by these external sites. We disclaim responsibility for the privacy policies, practices, or content of linked websites.

Correction and Updating of Information

Users are responsible for ensuring the accuracy of their Personal Information or Sensitive Personal Data or Information stored in our records. If any information is found to be inaccurate, misleading, or incomplete, users should promptly notify us. Additionally, users can review, update, or modify their information by logging into their Account on the Website. We cannot be held accountable for the authenticity of information supplied by users.

Retention of Information

Personal Information and Sensitive Personal Data or Information will be retained and utilized until:

• The relevant purposes for using the information, as outlined in this Policy, are no longer applicable.
• We are no longer legally obligated by applicable laws, regulations, contractual obligations, or legitimate business purposes to retain the information.
• The retention of information is unnecessary for the establishment, exercise, or defense of any legal claim.

Control of Data

Customers hold the right and control over their provided personal data. They can request an overview of their data by sending us an email. In specific situations, you may ask us to modify, erase, block, or restrict the processing of your personal data, or object to specific ways in which we use it.

We rely on you to ensure your personal data's completeness, accuracy, and currency. Please promptly inform us of any changes or inaccuracies in your personal data. Webfinpay empowers customers to control how their personal data is utilized by us through the following means:

• You can request a copy of the personal data we hold about you.
• You can notify us of any changes to your personal data or request corrections.
• Individuals can ask us to erase, block, or restrict the processing of their personal data or object to specific ways we use it.

In certain situations, individuals can ask us to send the personal data we hold to a third party.

If we use personal data based on an individual's consent, they have the right to withdraw it at any time, subject to applicable law. Moreover, when processing personal data based on legitimate or public interest, individuals can object at any time, considering applicable law.

Updates and notifications

This Policy may be updated periodically to incorporate new services, adjustments in our privacy practices, or changes in relevant laws. The "Last updated" indication at the top of this Policy specifies the date of the last revision. The effectiveness of any changes is contingent upon the latter posting the updated Policy on the Services or providing notice of the update as required by law.

Disclosures and alerts related to the Policy or Personal Data may be communicated through postings on our website. If you are an End User or Representative, we may also contact you through your Webfinpay Dashboard, email address, and/or the physical address listed in your Webfinpay account.

Contact us

We welcome your questions or complaints about this Policy. When you are an End Customer (i.e. doing business or transacting with a Business User), you can find out more about the Business User’s privacy practices, choices, and controls by reviewing their privacy policy or notice, or by contacting them.
[email protected]