GLOBAL PRIVACY NOTICE

1.1. Juspay Technologies Private Limited, or the applicable group company named in this privacy notice below, can act as both a controller and a processor of your Personal Data (collectively referred to as "Company", “Juspay”, "we", "us", or "our" in this privacy notice). “Personal Data” means any personal information we may collect from you either directly, or through our customers/ merchants or any other third parties, as applicable

1.2. The terms ‘you' or 'your' refer to any individual who accesses, uses, or interacts with our services, website or applications, including customers, visitors, and anyone who communicates with us. This includes individuals who apply for employment with us/ submit personal information through inquiries, feedback, or any other means of communication, such as emails or contact forms. By sharing your personal data with us, you agree to its processing in accordance with the terms of this privacy policy.

1.3. This privacy notice aims to inform you how we collect and process your Personal Data. Additionally, it is important that you read this privacy notice to fully understand how and why we are using your data. It is important that the Personal Data we hold about you is accurate and current. Please keep us informed if your Personal Data changes during your relationship with us.

2.1. This website includes links to third-party websites, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy notice of every website you visit.

3.1. As a controller, we collect different types of Personal Data about you (as further enumerated under section 4 below). This includes:

3.2. Where we act as a processor, we process your Personal Data on behalf of our customers who avail Juspay services, in such cases we process data solely on the basis of our customers’ instructions. As a processor, we collect/ use/ store and transfer different categories of Personal Data about you for and on behalf of our customers (i.e., the controllers of your Personal Data), which we have grouped together as follows (further enumerated under section 4 below):

3.3. We also collect, use, and share aggregated data, such as statistical or demographic data, for the purposes such as but not limited to for improving our services, for performance of contract, marketing and any other allied purposes. Aggregated data is derived from your Personal Data but is not considered Personal Data under applicable law as this data does not directly or indirectly reveal your identity. For example, we aggregate your usage data to calculate the percentage of users accessing a specific website feature.

4.1. We have set out below, in a table format, a description of all the ways we may process your Personal Data, and which of the legal bases we rely on to do so. We have also identified what our legitimate interests are where appropriate.

4.2. Your data will only be disclosed for the purposes identified in this privacy notice (as may be updated from time to time) unless a law or regulation specifically allows or requires otherwise. We require all third parties to respect the security of your Personal Data and to treat it in accordance with the applicable law. We do not allow our third-party service providers to use your Personal Data for their own purposes and only permit them to process your Personal Data for specified purposes and in accordance with our instructions.

5.1. Where we need to collect Personal Data by applicable law or under the terms of a contract we have with you, and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with access to our products and services). In this case, we may have to cancel a product or service you have with us, but we will endeavor to notify you if this is the case at the time.

6.1. We use different methods to collect data from and about you, including, but not limited to:

6.2. Direct interactions. You may give us your identity data, contact data and financial data by filling in forms or corresponding with us by post, phone, email or otherwise. This includes Personal Data you provide when you:

6.3. Automated technologies or interactions. As you interact with our website or avail our services, we automatically collect technical data about your equipment, browsing actions and patterns. We collect this Personal Data by using cookies, pixels, server logs and other similar technologies.

6.4. Contact and transaction data from providers of technical, payment and delivery services based inside and outside your location country

7.1. We provide you with choices regarding our use of your Personal Data for marketing and advertising purposes. We have established the following Personal Data control mechanisms:

7.2. You can ask us or third parties to stop sending you marketing messages at any time by logging into the website and checking or unchecking relevant boxes to adjust your marketing preferences or by following the opt-out links on any marketing message sent to you or by contacting us at any time using the details stated in section 16. Please note that the opt out will not affect the lawfulness of processing that has taken place before the opt out.

8.1. You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly.

9.1. Some of our external third parties are based outside your country and the European Economic Area (EEA), so their processing of your Personal Data will involve a transfer of data outside of your country.

9.2. Whenever we transfer your Personal Data out of your country, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

10.1. We have put in place appropriate security measures to prevent your Personal Data from being accidentally lost, used, or accessed in an unauthorised way, altered, disclosed or being unavailable. In addition, we limit access to your Personal Data to those employees, agents, professional advisers, contractors, and other third parties who have a need to know. They will only process your Personal Data on our instructions, and they are subject to a duty of confidentiality. We periodically review all privacy and security policies and update them, when necessary, in line with changes in data protection laws or when new technologies are introduced into our business.

10.2. Where the introduction of new technologies results in a high risk to your Personal Data, we may, where required by applicable law, perform a data protection impact assessment and will only proceed if we are able to mitigate any identified high risks.

11.1. We will only retain your Personal Data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

11.2. In some circumstances, we may anonymise your Personal Data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.

12.1. Once the data retention periods above expire, digital records are permanently destroyed or fully anonymised if retained for statistical or research purposes. In this case, all personal identifiers are removed permanently so individuals cannot be identified.

13.1. You may have the following rights in relation to the personal data processed by us, depending on the jurisdiction within which you reside:

13.2. If you would like to exercise any of these rights, please contact us via the details set forth under section 16. If you are not satisfied with how we process your request or are otherwise aggrieved by the manner in which we process your personal data, you may have a right to appeal our decision or make a complaint in the following manner:

14.1. When we act as a Data Processor and process data on behalf of our customers, any request you submit regarding your data will be forwarded to the respective customer(s).

15.1. Policies and procedures are reviewed and compared to the requirements of applicable laws and regulations at least annually, and whenever changes to such laws and regulations are made, privacy policies and procedures are revised to conform with the requirements of applicable laws and regulations.

15.2. We may update this privacy notice from time to time to reflect changes in our practices or to comply with applicable laws. We will notify you of any material changes to this privacy notice by posting the revised policy on our website or by sending you a notification. The revised policy will be effective as of the date it is posted. By continuing to use our services after we make changes to the privacy notice, you agree to be bound by the revised notice.