Introduction

HyperPay Inc Saudi Information Systems Technology (“we,” “us,” or “our”) is a financial technology company registered and operating in the Kingdom of Saudi Arabia (KSA). We are fully committed to safeguarding your personal data in strict compliance with the Kingdom of Saudi Arabia’s Personal Data Protection Law (PDPL), its implementing regulations, and any supplementary guidelines issued by the Saudi Data & Artificial Intelligence Authority (SDAIA).

This Privacy Policy outlines in detail how we collect, process, disclose, and protect your personal data when you engage with our services, including but not limited to payment processing, card issuance, and other FinTech solutions.

We are committed to protecting your privacy and the information that can identify you (“Personal Information”) that you provide when you deal with us and as you access our platform through our web or mobile applications or any other means. By accessing and using our web or mobile applications, you agree and consent to the collection, use and disclosure of your Personal Information as outlined in this privacy Policy.

Under the PDPL, we act as:

• A Data Controller for services where we determine the purpose and means of processing.
• A Data Processor for services where we process data on behalf of other entities under contractual agreements.

By using our services, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy.

Scope

This Privacy Policy applies to:

• Customers (individuals and businesses) using our financial services.
• Merchants, partners, and third-party service providers integrated with our platform.
• Visitors to our website, mobile applications, and any digital platforms.
• Any individual whose personal data we process under the PDPL.

Questions or Concerns

Reading this Privacy Policy will help you understand your privacy rights and choices. This Privacy Policy is an integral part of HyperPay’s terms and conditions that apply to you. By submitting your information to us you consent to us to use your information for the purposes set out in this Privacy Policy. If you still have any questions or concerns, please contact us at Privacy@hyperpay.com.

For matters specifically related to data protection, you can also reach out to our Data Protection Officer at:

• Email: fahad.almutairi@hyperpay.com
• Phone: +966536645582
• Address: Riyadh, Saudi Arabia

Summary of Key Points

We collect personal data through various interactions, including account registration, transactions, customer support, and automated technologies. When you visit, use, or navigate our web/mobile applications, we may process personal information depending on how you interact with us and our web/mobile applications, the choices you make, and the products and features you use.

• Do we process any sensitive personal information?
  We may process sensitive personal information, when necessary, with your consent or as otherwise permitted by applicable law.
• Do we share any information with third party?
  We may share your personal data and information with third parties for the delivery of specific services and functionalities via our web/mobile applications or to contribute to the development of the services and functionalities of such third parties. We require these third-party service providers to implement measures to maintain the security of your data, and to align their data use practices with the terms of this Privacy Policy. However, we shall not be liable for any misuse or violation of this Privacy Policy by any such third party.

What Information Do We Collect?

Personal information provided directly by You

We collect personal information that you voluntarily provide to us when you:

• Register on the web/mobile applications.
• Express interest in obtaining information about us or our products and applications.
• Participate in activities on the web/mobile applications.
• Contact us by any other means.

Examples include:

• Names
• Phone numbers
• Email addresses
• Usernames
• Passwords
• Date of birth
• Gender
• Contact preferences
• Billing addresses
• Debit/credit card numbers
• Job titles
• Mailing addresses
• Authentication information of your customers
• Bank account information
• National ID / IQAMA
• Any other Personal Information you provide.

Application Data

If you use our web/mobile applications, we may collect additional information with your permission, such as:

• Geolocation Information: Tracking location-based info from your device, continuously or while using the app.
• Push Notifications: Notifications related to your account or app features, which you can opt out of via device settings.

All personal information you provide must be accurate and complete, and you must notify us of any changes.

Information automatically collected

Some information, like IP address, browser type, device characteristics, operating system, language preferences, URLs visited, device name, country, and usage information, is collected automatically when you visit or use our web/mobile applications. This data helps us maintain security, improve services, and perform internal analytics.

Use of Personal Data:

We collect and use only the personal information necessary to provide our services, process transactions, and comply with applicable legal and regulatory requirements.

How Do We Process Your Information?

We process your information to:

• Provide, improve, and administer our web/mobile applications.
• Communicate with you.
• Ensure security and prevent fraud.
• Comply with the law.
• Other purposes with your consent.

Specifically, we use your information to:

• Facilitate account creation and authentication.
• Deliver and manage applications and their functionalities.
• Respond to user inquiries and provide support.
• Send administrative information such as updates or policy changes.
• Fulfill and manage orders, payments, returns, and exchanges.
• Request feedback.
• Monitor and prevent fraud.
• Analyze usage trends to improve services.
• Save or protect vital interests of individuals, e.g., prevent harm.

Payment Methods:

The Application supports digital wallet payment methods, including Apple Pay and Samsung Pay. 

Do We Use Cookies and Other Tracking Technologies?

Yes, we use cookies and similar technologies to collect and store your information to improve your experience and service personalization. These include:

1. Google Analytics Cookies: Track user behavior and site traffic.
2. WordPress Cookies: Store admin panel and user preferences.
3. WPForms Cookie: Track form interactions.
4. WPML or Polylang Language Selector: Remember language preferences.
5. Automatic (Jetpack / WooCommerce) Tracking Cookies: Referral and behavior tracking.
6. A/B Testing Cookies: Assign users to test groups.
7. Google Tag Manager: Track website performance.
8. Google reCAPTCHA: Protect forms from bots and spam.
9. Tidio Chat: Manage live chat sessions.

Is Your Information Transferred Internationally?

We may transfer, store, and process your data in countries other than your own. Our servers are in Saudi Arabia, but if you access our services from outside the Kingdom, your data may be processed internationally by us or third-party providers.

Data Security:

We are committed to protecting your personal information by implementing appropriate security measures to safeguard it against unauthorized access, disclosure, alteration, or misuse.

How Long Do We Keep Your Information?

We keep your data only as long as necessary to fulfill the purposes in this Policy, unless a longer retention period is required by law (e.g., tax, accounting). When no longer needed, data is deleted or anonymized securely.

How Do We Keep Your Information Safe?

We implement organizational and technical security measures to protect your data from unauthorized access, use, disclosure, and accidental loss. We use encryption (e.g., SSL) during data transmission. You are responsible for protecting your account credentials.

However, no internet transmission or storage method is 100% secure. We cannot guarantee that unauthorized parties will never defeat our security measures.

What Are Your Privacy Rights?

• Withdraw Consent: You can withdraw consent for data processing at any time by contacting us.
• Access: You can access your personal data and know how it’s processed.
• Rectification: You can request corrections.
• Erasure: You can request deletion under certain conditions.
• Portability: You can request your data in a machine-readable format and have it transferred to a third party.
• Notification of Breach: You will be informed of data breaches posing high risks.
• Restriction or Objection: You can object or restrict data processing.

How Can You Exercise Your Rights?

Submit requests via Privacy@hyperpay.com. We respond within one calendar month; complex requests may take up to three months.

Do We Make Updates to This Policy?

Yes, we update this Policy as needed for legal compliance. Updates are marked by revision dates and become effective upon posting. Material changes may be communicated directly or via notices.

How Can You Contact Us?

For questions or concerns:
Email: Privacy@hyperpay.com

How Can You Review, Update, or Delete Your Data?

Based on your country’s laws, you may request access, changes, or deletion of your personal data by emailing:
Privacy@hyperpay.com