How SportPay Platform Ltd. protects your personal data

1. Who we are

SportPay is the trading name of SportPay Platform Ltd., registered in Ireland under Company No. Placeholder Reg. 2024-IE-0001. We act as the data controller for merchant and client personal data processed through the platform.

2. Personal data we collect

• Merchant identification: full name, email address, phone number, business address, government ID reference, and social media URLs.
• Client payment data: name, email, billing address, card network token, masked card details (last four digits), and transaction history.
• Platform usage data: login events, IP addresses, device identifiers, and support correspondence.

3. How and why we use personal data

We process data on the following lawful bases:

• Contractual necessity: to create merchant accounts, issue invoices, process card payments, and deliver receipts.
• Legal obligations: to comply with anti-money laundering (AML), know-your-customer (KYC), taxation, and financial reporting requirements.
• Legitimate interests: to protect against fraud, monitor platform performance, and improve customer support.
• Consent: for optional marketing communications, which may be withdrawn at any time.

4. Sharing your information

We only share data with vetted processors who support the SportPay service:

• Payment processing partners for secure card authorization.
• Identity verification services to validate government IDs and social profiles.
• Customer support and ticketing tools to manage your requests.

All transfers outside the European Economic Area rely on Standard Contractual Clauses or equivalent safeguards.

5. Data retention

Merchant account data is retained for the lifetime of the account and for seven (7) years thereafter to satisfy regulatory requirements. Client transaction records are stored for seven (7) years. We retain support records for three (3) years.

6. Your rights

You are entitled to access, rectify, or erase your personal data, to restrict or object to processing, and to data portability. You may exercise these rights by emailing [email protected]. You also have the right to lodge a complaint with the Irish Data Protection Commission.

7. Security measures

We enforce TLS encryption, role-based access controls, hardware security modules for key storage, and quarterly penetration testing. Two-factor authentication is available for all merchant accounts.

8. Contact

For privacy questions or data access requests, contact SportPay Platform Ltd., 123 Innovation Way, Dublin 2, Ireland, or email [email protected].