At Prophius, we care about the protection of your data and this notice provides you with the necessary information regarding your rights and our obligations and explains how we collect, use, disclose, retain and process your personal data. Prophius’ products are mainly intended for Merchants and we act on the instruction of and on behalf of the Merchants. As service providers to Merchants, we act as data processors while processing your data.
Information That We Process
Prophius processes your personal information to meet our legitimate, legal and contractual obligations to enable us to provide you with our products and services. We will never collect any unnecessary personal data from you and do not process your information in any way, other than as specified in this notice.
The personal data that we collect from you with your consent when using the PayContactless Application are:
- Registration and profile Information including but not limited to photographic images
- Payment Information
- Contact/Communication details
How We Use Your Personal Data (Legal Basis for Processing)
Prophius takes your privacy very seriously and we will never disclose, share, or sell your data without your consent, unless required to do so by law. We only retain your data for as long as is necessary and for the purpose(s) specified in this policy. Where you have consented to us providing you with our services, promotional offers and/or marketing, you are free to withdraw this consent at any time. The purposes and reasons for processing your personal data are detailed below:
- We collect your personal data to provide payment services to you and to ensure that your transactions are completed efficiently, securely and seamlessly.
- We collect and store your personal data as part of our legal obligation for business accounting and tax purposes
- We may occasionally send you offers and information on other products and services where we have assessed that it is beneficial to you as a customer.
- We use your bank details to process payments into your accounts including but not limited to salaries, charges and refunds.
- We use your images for identification purposes.
You have the right to access any personal information that Prophius processes about you and to request information about: -
- What personal data we hold about you
- The purposes of the processing
- The categories of personal data concerned
- The recipients to whom the personal data has/will be disclosed
- How long we intend to store your personal data for
- If we did not collect the data directly from you, information about the source
If you believe that we hold any incomplete or inaccurate data about you, you have the right to ask us to correct and/or complete the information and we will strive to do so as quickly as possible; unless there is a valid reason for not doing so, at which point you will be notified.
You also have the right to request erasure of your personal data or to restrict processing (where applicable) in accordance with the data protection laws; as well as to object to any direct marketing from us.
We are bound by legal obligations to retain financial records of transactions for a period. As a result of this, when erasure of personal data embedded in or related with financial transactions is requested, we will immediately restrict processing of such data and delete the data completely after the expiration of the requisite retention period.
Where applicable, you have the right to data portability of your information and the right to be informed about any automated decision-making we may use.
If we receive a request from you to exercise any of the above rights, we may ask you to verify your identity before acting on the request; this is to ensure that your data is protected and kept secure. We ensure that whatever information is requested at this point is kept to the barest minimum of what is absolutely necessary for identification purposes.
Sharing and Disclosing Your Personal Information
Prophius takes your privacy seriously and takes every reasonable measure and precaution to protect and secure your personal data. We work hard to protect you and your information from unauthorised access, alteration, disclosure or destruction and have several layers of security measures in place.
These security measures have been evaluated and will be evaluated on a regular basis by accredited labs and PCI-DSS
Consequences of Not Providing Your Data
You are not obligated to provide your personal information to Prophius however, as this information is required for us to provide you with our services, we will not be able to offer some/all our services without it.
How Long We Keep Your Data
Prophius only ever retains personal information for as long as is necessary and we have strict review and retention policies in place to meet these obligations. We comply with all relevant regulations concerning the retention of data and only keep your data for as long as is legally required after which time it will be destroyed.
Where you have consented to us using your details for direct marketing, we will keep such data until you notify us otherwise and/or withdraw your consent.
When browsing the Prophius website or using any Prophius Application, customers will be faced with a number of cookies that allow Prophius to manage its website and Application more efficiently. Therefore, some of the cookies are essential, so no consent is required from the customers to put these cookies on their computers & devices. On the other hand, for the cookies that are not strictly essential, Prophius asks for a customer’s consent and does not place them on the computer/device without the customer’s consent. You can refer to our Cookies Policy for more details on cookies.
Lodging A Complaint
Prophius only processes your personal information in compliance with this privacy notice and in accordance with the relevant data protection laws. If however, you wish to raise a complaint regarding the processing of your personal data or are unsatisfied with how we have handled your information, you have the right to lodge a complaint with the relevant Data Protection Supervisory Agency. Our designated Data Protection Officer/Appointed Person can be contacted at legal@Prophius .com