Vera Pay Privacy Policy

Vera Pay Ltd provides payment technology and related services to businesses and platforms.

Vera Pay uses Stripe and related service providers as part of its payment processing infrastructure.

We may collect and process the following types of information:

Information You Provide

This may include:

• your name;
• business name;
• email address;
• phone number;
• business address;
• bank account details;
• company registration details;
• identity verification documents;
• ownership and director information; and
• support requests or communications.

Transaction and Payment Information

This may include:

• transaction amounts;
• payment method details;
• refunds and chargebacks;
• payout information;
• billing information;
• fraud and risk signals; and
• payment activity.

Sensitive card data is primarily processed by Stripe and other regulated payment partners.

Technical and Usage Information

This may include:

• IP address;
• browser type;
• device information;
• operating system;
• API usage;
• login activity;
• cookies and analytics data; and
• interaction with our website or dashboard.

We use personal data to:

• provide and operate the Services;
• onboard and verify merchants;
• process payments and settlements;
• detect and prevent fraud, financial crime and misuse;
• comply with legal and regulatory obligations;
• manage disputes, refunds and chargebacks;
• provide customer support;
• improve our products and services;
• monitor platform performance and security;
• communicate with you about your account or the Services; and
• enforce our terms, policies and agreements.

We process personal data where necessary:

• to perform a contract with you;
• to comply with legal or regulatory obligations;
• for our legitimate business interests, including fraud prevention, risk management and service improvement; or
• where you have given consent.

We may share information with:

• Stripe and related payment infrastructure providers;
• acquiring banks and payment method providers;
• identity verification and fraud prevention providers;
• cloud hosting and infrastructure providers;
• analytics, communications and support providers;
• professional advisers, auditors and insurers;
• regulators, law enforcement or government authorities where required; and
• affiliates, contractors or service providers supporting the Services.

We do not sell personal data.

Your information may be processed in countries outside the United Kingdom or European Economic Area where Vera Pay, Stripe or our service providers operate.

Where required, we use appropriate safeguards for international data transfers, including contractual protections and approved transfer mechanisms.

We retain personal data only for as long as reasonably necessary to:

• provide the Services;
• comply with legal, tax, accounting and regulatory obligations;
• resolve disputes;
• enforce agreements; or
• prevent fraud and abuse.

Retention periods may vary depending on the type of information and applicable legal requirements.

We use commercially reasonable technical, organisational and administrative measures to protect personal data.

However, no system is completely secure and we cannot guarantee absolute security.

You are responsible for maintaining the security of your own systems, credentials, devices and account access.

We may use cookies, analytics tools and similar technologies to:

• operate the website and Services;
• remember preferences and sessions;
• analyse traffic and usage;
• improve performance and functionality; and
• support fraud prevention and security.

You may be able to control cookies through your browser settings.

Depending on applicable law, you may have rights to:

• access personal data we hold about you;
• request correction of inaccurate information;
• request deletion of personal data;
• object to certain processing;
• request restriction of processing;
• request portability of your data; or
• withdraw consent where processing is based on consent.

We may request verification of identity before responding to certain requests.

The Services may link to or integrate with third-party websites, products or services.

We are not responsible for the privacy practices of third parties. You should review their own privacy policies separately.

We may update this Privacy Policy from time to time.

Where changes are material, we will take reasonable steps to notify users.

Your continued use of the Services after updates take effect means you accept the updated Privacy Policy.

If you have questions about this Privacy Policy or your personal data, you can contact Vera Pay through the support or contact channels made available through the Services or our website.