Privacy Policy

LuxPay Merchant Services (“we”, “us”, or “our”) operates this website (the “Service”).

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use our Service, and outlines your rights in relation to that data.

By accessing or using the Service, you acknowledge that you have read and understood this Privacy Policy and agree to the collection and use of your information in accordance with it.

1. Definitions

For the purposes of this Privacy Policy:

• “Service” means the website operated by LuxPay Merchant Services.
• “Personal Data” means any information relating to an identified or identifiable natural person.
• “Usage Data” means data collected automatically through use of the Service (e.g. IP address, browser type, pages visited).
• “Cookies” means small data files stored on your device.
• “Data Controller” means the entity that determines the purposes and means of processing Personal Data. LuxPay Merchant Services is the Data Controller.
• “Data Processor” means any third party that processes Personal Data on behalf of the Data Controller.
• “User” means any individual accessing or using the Service.

2. Information We Collect

We may collect and process the following categories of data:

2.1 Personal Data

This may include, but is not limited to:

• Full name
• Email address
• Telephone number
• Postal address
• Any other information voluntarily provided

We may use this information to contact you, including for marketing purposes where permitted by law. You may opt out of such communications at any time.

2.2 Usage Data

We automatically collect certain information when you access the Service, including:

• IP address
• Browser type and version
• Pages visited
• Time and date of visits
• Time spent on pages
• Device identifiers

2.3 Location Data

With your consent, we may collect and process information about your geographical location. You may enable or disable location services at any time through your device settings.

2.4 Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Operate and maintain the Service
• Improve functionality and performance
• Analyse usage

You may refuse cookies via your browser settings; however, some features of the Service may not function properly.

3. Use of Personal Data

We process Personal Data for the following purposes:

• To provide, operate, and maintain the Service
• To communicate with you, including updates and notifications
• To provide customer support
• To improve and develop our Service
• To monitor and analyse usage
• To detect, prevent, and resolve technical issues
• To send marketing communications, where permitted

4. Legal Basis for Processing (GDPR)

Where applicable under the UK GDPR and EU GDPR, we rely on the following legal bases:

• Performance of a contract
• Consent
• Legitimate interests (provided these are not overridden by your rights)
• Compliance with legal obligations
• Processing necessary for payment transactions

5. Data Retention

We retain Personal Data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, including to comply with legal obligations, resolve disputes, and enforce agreements.

Usage Data is generally retained for a shorter period unless required for security or legal reasons.

6. Data Transfers

Your Personal Data may be transferred to and processed in countries outside your jurisdiction, including the United Kingdom.

Where such transfers occur, we ensure appropriate safeguards are in place to protect your data in accordance with applicable data protection laws.

7. Disclosure of Personal Data

We may disclose your Personal Data:

• In connection with a merger, acquisition, or sale of assets
• Where required by law or regulatory authorities
• To protect our legal rights or property
• To prevent fraud, security threats, or unlawful activity
• To protect the safety of users or the public

8. Data Security

We implement appropriate technical and organisational measures to protect your Personal Data. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your Data Protection Rights

If you are located in the UK or EEA, you have the right to:

• Access your Personal Data
• Rectify inaccurate or incomplete data
• Request erasure of your data
• Restrict or object to processing
• Request data portability
• Withdraw consent at any time

To exercise your rights, please contact us. We may require verification of your identity before responding.

You also have the right to lodge a complaint with a relevant supervisory authority.

10. Service Providers

We may engage third-party service providers to assist in operating the Service, including analytics and marketing providers. These parties process Personal Data only on our instructions and are bound by confidentiality obligations.

11. Analytics and Advertising

We may use third-party services such as Google Analytics and advertising platforms (e.g. Google Ads, Facebook, Twitter) to analyse usage and deliver targeted advertisements.

These providers may use cookies and similar technologies. You can manage your preferences through their respective settings.

12. Payments

Where applicable, payments are processed by third-party payment processors. We do not store or collect payment card details. Such data is handled in accordance with the payment provider’s privacy policy and PCI-DSS standards.

13. Third-Party Links

Our Service may contain links to third-party websites. We are not responsible for the content or privacy practices of such websites.

14. Children’s Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect Personal Data from children.

15. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time. Changes will be posted on this page and, where appropriate, notified to you.

16. Contact Us

If you have any questions regarding this Privacy Policy or our data practices, please contact us:

Email: [Insert Email Address]

If you want, I can tailor this specifically for UK GDPR compliance (including ICO wording) or make it match a regulated payments/merchant services business standard, which might be useful for LuxPay.

yes tailor please

Here is a UK GDPR–tailored, more compliance-ready version suitable for a merchant services / payments business like LuxPay:

Privacy Policy (UK GDPR Compliant)

LuxPay Merchant Services (“we”, “us”, or “our”) operates this website (the “Service”) and is committed to protecting and respecting your privacy.

This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using our Service, you acknowledge that you have read and understood this Privacy Policy.

1. Data Controller

LuxPay Merchant Services is the Data Controller responsible for your personal data.

Contact details:
Email: [Insert Email Address]

2. Personal Data We Collect

We may collect and process the following categories of personal data:

2.1 Identity and Contact Data

• Full name
• Email address
• Telephone number
• Business name (if applicable)
• Postal address

2.2 Technical Data

• IP address
• Browser type and version
• Device information
• Time zone and location data

2.3 Usage Data

• Information about how you use our website and services

2.4 Marketing and Communications Data

• Your preferences in receiving marketing from us

3. How We Collect Your Data

We collect data through:

• Direct interactions (e.g. forms, enquiries, applications)
• Automated technologies (e.g. cookies, analytics tools)
• Third parties (e.g. payment processors, analytics providers)

4. How We Use Your Personal Data

We use your data to:

• Provide and manage our services
• Process applications for merchant services
• Communicate with you regarding enquiries or contracts
• Improve our website and services
• Comply with legal and regulatory obligations
• Prevent fraud and ensure security
• Send marketing communications (where permitted)

5. Lawful Bases for Processing

Under UK GDPR, we rely on the following lawful bases:

• Contractual necessity – to provide services you request
• Legal obligation – to comply with applicable laws and regulations
• Legitimate interests – to operate and improve our business, provided your rights are not overridden
• Consent – for marketing communications (where required)

6. Sharing Your Personal Data

We may share your data with:

• Payment processors (e.g. acquiring banks and gateways)
• IT and system providers
• Analytics and marketing providers
• Professional advisers (legal, financial, compliance)
• Regulatory authorities and law enforcement where required

All third parties are required to respect the security of your personal data and process it in accordance with the law.

7. International Transfers

Your personal data may be transferred outside the UK.

Where this occurs, we ensure appropriate safeguards are in place, such as:

• UK-approved Standard Contractual Clauses (SCCs)
• Transfers to countries deemed to provide adequate protection

8. Data Retention

We retain your personal data only for as long as necessary to:

• Fulfill the purposes for which it was collected
• Comply with legal, accounting, and regulatory requirements

For merchant services, this may include retention periods required under anti-money laundering (AML) and financial regulations.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including protection against unauthorised access, loss, or misuse.

However, no system is completely secure, and we cannot guarantee absolute security.

10. Your Legal Rights

Under UK GDPR, you have the right to:

• Access your personal data
• Correct inaccurate or incomplete data
• Request erasure (“right to be forgotten”)
• Restrict processing
• Object to processing
• Data portability
• Withdraw consent at any time (where applicable)

To exercise your rights, please contact us at the details above.

11. Complaints

You have the right to lodge a complaint with the UK supervisory authority:

Information Commissioner’s Office (ICO)
Website: https://www.ico.org.uk

We would, however, appreciate the opportunity to address your concerns before you approach the ICO.

12. Cookies

We use cookies and similar technologies to:

• Ensure the website functions properly
• Analyse usage
• Improve user experience

You can manage or disable cookies through your browser settings.

13. Third-Party Services

We may use third-party providers such as:

• Analytics services (e.g. Google Analytics)
• Advertising platforms
• Payment processors

These providers may process your data on our behalf and are bound by data protection obligations.

14. Payments

We use third-party payment providers to process transactions.

We do not store or collect payment card details. All payment data is handled securely in accordance with PCI-DSS standards.

15. Children’s Data

Our Service is not intended for individuals under the age of 18, and we do not knowingly collect data from children.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page and, where appropriate, notified to you.

17. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

Email: sales@luxpayservices.co.uk