Privacy Policy

1. Introduction

Squid Pay Ltd ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our payment processing services.

We are registered in the Cayman Islands and operate in compliance with the Data Protection Act (2021 Revision) of the Cayman Islands, as well as applicable international data protection standards.

2. Information We Collect

We collect information that you provide directly to us, including:

• Personal identification information (name, email address, phone number)
• Business information (business name, registration details, address)
• Financial information (bank account details for payouts)
• Identity verification documents (as required for KYC compliance)
• Transaction data processed through our platform

3. How We Use Your Information

We use the information we collect to:

• Process payments and provide our services
• Verify your identity and conduct KYC/AML checks as required by law
• Comply with legal and regulatory obligations
• Detect and prevent fraud and unauthorized transactions
• Communicate with you about your account and our services
• Improve our services and develop new features

4. Legal Basis for Processing

We process your personal data on the following legal bases: (a) performance of a contract with you; (b) compliance with legal obligations, including AML/KYC requirements under the Proceeds of Crime Act (2020 Revision); (c) our legitimate business interests; and (d) your consent where applicable.

5. Data Sharing and Disclosure

We may share your information with:

• Payment networks and banks to process transactions
• Identity verification and fraud prevention service providers
• Regulatory authorities as required by law (including CIMA)
• Professional advisors (lawyers, accountants, auditors)
• Law enforcement when legally required

6. International Data Transfers

Your information may be transferred to and processed in countries other than the Cayman Islands. When we transfer data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with applicable data protection laws.

7. Data Retention

We retain your personal data for as long as necessary to provide our services and comply with legal obligations. Under Cayman Islands AML regulations, we are required to retain certain records for a minimum of five (5) years after the business relationship ends.

8. Your Rights

Subject to applicable law, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data (subject to legal retention requirements)
• Object to or restrict processing
• Data portability
• Withdraw consent where processing is based on consent

9. Security

We implement industry-standard security measures including 256-bit encryption, PCI DSS Level 1 compliance, and regular security audits to protect your information. However, no method of transmission over the Internet is 100% secure.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us at: