Personal information we collect and process may include: (1) identifiers, such as name, address, contact information, Internet Protocol address, email address, driver's license or other similar government-issued identification information, online profile data or other similar identifiers; (2) commercial information, such as records of products or services purchased or considered and similar consumer-based history; (3) Internet or similar Visitor network activity, such as activity on our websites, mobile applications or other digital systems, device identifiers (including your device's operating system or web browser), cookies and other tracking technologies, Internet browsing history, search history and system usage; (4) Transaction Data; and (5) Business ownership and account registration information (collectively, "Personal Information"). For purposes of this Policy "Transaction Data" means data collected by us that is used to facilitate a transaction that you request. Transaction Data may include, without limitation, your name, email address, contact number, billing and shipping address, payment method information, such as credit or debit card numbers, bank account details, online financial account information, merchant and store location details, computer, device and Internet related information, and the amount, date and contents of what was purchased.

You directly provide us with most of the data we collect. Examples of how your data is collected include: (i) when you use our Services; (ii) information gathered from user behavior and online activity; (iii) when you provide feedback on our Services; (iv) when you contact us; or (v) through publicly available information.

We may also collect such Personal Information from third parties, including our Affiliates and from third parties, such as Businesses, with whom you do business.

When you use our website, we may automatically collect Personal Information about you through cookies and other technology as described below.

We may use and collect your Personal Information to, among other things:

We collect and process your Personal Information in compliance with the relevant requirements of Applicable Law. Businesses are responsible for ensuring that the privacy rights of End Customers are observed, respected and fulfilled, including obtaining any requisite consents and disclosing such Businesses' data collection and processing practices. We further process Personal Information to enter into business relationships with Businesses and fulfill our respective contractual obligations with them. We process Personal Information to verify the identities of individuals and entities to comply with our legal obligations related to fraud monitoring, prevention and detection, laws associated with identifying and reporting illicit and illegal activities, such as those under the Anti-Money Laundering and Know-Your-Customer regulations, and financial reporting obligations.

Where permitted under Applicable Law, we process your Personal Information based on our legitimate business interests.

We may also process Personal Information based on your explicit consent to collect and process your Personal Information in connection with your interactions with us and the provision of Services. When we process your Personal Information based on your consent, you have the right to withdraw your consent at any time. Any such withdrawal of consent shall not impact the lawfulness of processing performed based on the consent prior to its withdrawal.

We may disclose your Personal Information to third parties for the purposes described in Section B in accordance with Applicable Law. For example, when you initiate a transaction with a Business that is our customer, we use and share your Personal Information to deliver payment-related business Services to such Business, including online and in-person payment transactions processing and related Services. The Business you choose to do business with may further share your Personal Information with third parties and for such other purposes as set forth in their privacy policy.

We may also disclose your Personal Information with our service providers and vendors solely for the purpose of the provision of services to us. We may also share information that does not directly identify you and is aggregated and/or anonymized.

We have adopted reasonable, technical and organizational measures that are designed to prevent loss, damage or unauthorized destruction and unlawful access to or unauthorized processing of your Personal Information. The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our websites, applications or any other Company systems, you are responsible for keeping this password confidential. We ask you not to share your password with anyone. We urge you to be careful about giving out information in any public forum, like social media or message services. The information you share in public areas of our website or mobile apps may be viewed by any person.

You have the right to know your privacy rights with respect to your Personal Information collected or processed by us. Under Applicable Law, these rights may include:

You may also have additional privacy rights under Applicable Law. Please refer to Exhibit A concerning Jurisdictional Specific Information. If you are an End Customer, you should contact the Business with whom you transacted to exercise your privacy rights.

We will store Personal Information for as long as is necessary for the purposes for which it was collected, as explained in this Policy or in any transaction specific document. In some circumstances, we may store Personal Information for longer periods of time, for instance, where we are required to do so in accordance with legal, regulatory, tax or accounting requirements. In specific circumstances, we may store Personal Information for longer periods of time so that we have an accurate record of your dealings with us in the event of any complaints or challenges, or if we reasonably believe there is a prospect of litigation relating to your Personal Information. Personal Information is retained in accordance with our record retention schedule and with Applicable Law. We will delete your Personal Information in accordance with our record retention schedule and in accordance with Applicable Law.

It's sometimes necessary for us to transfer your Personal Information to jurisdictions other than your country of residence ("Third Party Countries"), including to the principal place of our business, the United States of America. These Third Party Countries may have data protection laws and regulations that differ from or are less protective than as implemented by your country of residence. If you are located in the United Kingdom or the European Economic Area, we utilize one or more of the following approved transfer mechanisms:

If you have questions or concerns about how we use your Personal Information, please contact our Data Protection Officer at:

Please be sure to include your full name, postal address and email address. Please also describe your concern so we can better help you. Subject to legal and other permissible considerations, we will respond to your request in compliance with the terms of Applicable Law or inform you if we require further information in order to fulfill your request, including any information needed to verify your identity. We may not always fully address your request, for example, if it would impact the duty of confidentiality we owe to others, or if we are legally entitled to deal with the request in a different way.

This Policy is effective as of the date set forth below. Your use of our website and any other services provided by us constitutes your acknowledgement and acceptance of this Policy. We reserve the right to revise, amend or modify this Policy at any time and in any manner. If we make any changes to this Policy, we will change the "Revised" date below. Your use of our website and any other services provided by us after such changes are implemented constitutes your acknowledgement and acceptance of these changes.