Privacy policy

txpaid is a brand of Ombrion Innovations Ltd, a company registered in England and Wales with its registered office at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. Ombrion Innovations Ltd is the data controller for personal data processed through our website, merchant onboarding and the provision of our Services.

Where we process payment data on behalf of a merchant, the merchant is usually the controller of their customers' data and we act as a processor or independent controller, depending on the activity.

From merchants and their representatives: names, job titles, business and contact details, Telegram handles, identity documents, ownership information, bank account details and the information you provide in your application.

From payers, through merchants: name, email address, payment card or bank account details, billing address, transaction details, IP address and device information. From website visitors: the information you submit in forms, and technical data such as IP address, browser type and pages visited.

We use personal data to assess applications and verify identity, provide and improve the Services, process and settle Transactions, detect and prevent fraud and financial crime, comply with legal and regulatory obligations, communicate with you about your account, and respond to enquiries and complaints.

We process personal data where it is necessary to perform a contract with you or take steps before entering into one; to comply with a legal obligation, such as anti-money laundering requirements; for our legitimate interests, such as preventing fraud and securing our systems, where those interests are not overridden by your rights; or with your consent, which you may withdraw at any time.

We share personal data only where necessary with Acquirers, card Schemes and payment method providers to process Transactions; identity verification, fraud prevention and sanctions screening providers; hosting, infrastructure and communications providers; professional advisers and auditors; and regulators, law enforcement and courts where required by law.

We do not sell personal data.

Some of our providers are located outside the UK and the European Economic Area. Where we transfer personal data internationally, we use appropriate safeguards such as adequacy regulations, the UK International Data Transfer Agreement or the EU Standard Contractual Clauses.

We keep personal data only as long as necessary for the purposes described in this policy. Records required under anti-money laundering law are kept for at least five years after the end of the business relationship or the date of the Transaction. Website enquiry data is deleted when it is no longer needed to respond to you.

txpaid is certified to PCI DSS Level 1. We protect personal data with encryption in transit and at rest, tokenisation of card data, access controls, monitoring and regular security testing. Access to personal data is limited to staff and providers who need it to perform their role.

Subject to applicable law, you have the right to access your personal data, correct it, ask us to erase it, restrict or object to its processing, receive it in a portable format, and withdraw consent where processing is based on consent.

You also have the right to complain to the Information Commissioner's Office (ico.org.uk (opens in a new tab)) or to the data protection authority in your country. We would appreciate the chance to resolve your concern first.

Our website uses strictly necessary cookies to operate, and, with your consent, analytics cookies to understand how the site is used. You can change your cookie preferences at any time through your browser settings.

For any question about this policy or to exercise your rights, contact our data protection team at management@txpaid.com or write to Ombrion Innovations Ltd, 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.