Who this policy covers
This Policy covers business customers, prospective customers, authorised representatives, website visitors and people whose information appears in payment-related records. For contracted services, the responsible legal entity is identified in the applicable merchant agreement and company information.
Business and onboarding information
We may receive company name, registration details, registered address, website, business contacts, directors, representatives, beneficial ownership information and other records needed to assess and maintain a business relationship.
Contact and technical information
We may receive first name, last name, work email, phone number, IP address, country, browser and device information, together with security and request logs. The public enquiry form does not request card data, payment credentials or identity documents.
Payment-related information
Depending on the service, records may include transaction identifiers, merchant references, amount, currency, status, order identifiers, timestamps and payment-related metadata. The precise data flow depends on the integration used.
Why information is used
Information may be used to provide payment and payout functionality, assess service suitability, prevent fraud and misuse, protect the platform, meet compliance and legal obligations, provide support, handle disputes and improve service reliability.
Legal grounds
Where data-protection law requires a legal basis, processing may rely on performance of a contract, legal obligation, legitimate interests or consent, depending on the purpose and circumstances.
Sharing and international transfers
Information may be shared with third parties supporting payment capabilities, compliance checks, fraud prevention, infrastructure, communications and professional services, or with public authorities where legally required. Information may be processed in other countries subject to applicable contractual and legal safeguards.
Retention and security
Data is retained only for as long as required for contractual, legal, compliance and operational purposes. Access is restricted, transport is encrypted and security controls are reviewed as the platform changes.
Your rights
Depending on applicable law, you may request access, correction, deletion, restriction or portability, object to processing or withdraw consent. Rights may be limited where retention or processing is legally required.
Contact
Privacy requests can be sent to contact@nerpapay.com with “Privacy request” in the subject. Do not send identity documents or payment credentials through the public enquiry form.