Privacy Policy
Last updated: 27th Nov 2024
Paystratus Group Ltd, trading under the name Weavr (“Paystratus”,” Weavr” “us”, “we”, or “our”) operates https://weavrdev.alchemy.construction (the “Site”). This page informs you of our policies regarding the collection, use and disclosure of Personal Information we receive from users of the Site and our Services. We take the privacy of your information very seriously. This privacy policy applies to our use of any and all Data collected by us or provided by you in relation to your use of the Website.
“Services” refer to the products and services provided by us. This may include API platform or applications provided by Paystratus Group Ltd. Our “ Services” are services that we provide to entities (“Embedders”) that directly and indirectly provide us with “End Customer” Personal Data in connection with their own business operations and activities. “Sites” refer to weavr.io, and other Paystratus websites, apps, online and API services.
This Privacy Policy applies to the personal data we collect about you when you use:
- our website “https://weavrdev.alchemy.construction/” (the “Website”);
- the Weavr apps and SDKs;
- the Weavr portal;
- when we contact you to promote our products and services.
Collectively, we refer to Sites and Services as “Services.”
“Financial Partners” are financial institutions, banks, and other partners such as payment method acquirers, payout providers, and card networks that we partner with to provide the Services.
We use your Personal Information only for providing and improving the Site. By using the Site, you agree to the collection and use of information in accordance with this policy.
We are responsible for processing your personal data for the purposes under this Policy and have therefore concluded a specific and separate data processing agreement in accordance with the requirements of the GDPR/the UK-GDPR.
We may need to rely on Weavr affiliates to help provide services to our Business Users, their Customers, and our End Users. Weavr affiliates are entities that deliver elements of these services. The specific Weavr affiliates involved in processing personal data will depend on the location of our Business Users, their Customers, and our End Users, as well as the nature of the services Weavr provides.
| Name | Entity Country |
| Paystratus (Malta) Limited | Malta |
| Weavr (Europe) Limited | Malta |
Information Collection And Use
While using our Site, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you. Personally identifiable information may include, but is not limited to your name, email address, telephone number, postal address (“Personal Information”), IP address (automatically collected); and operating system (automatically collected); in each case, in accordance with this privacy policy.
Log Data
Like many site operators, we collect information that your browser sends whenever you visit our Site (“Log Data”).
This Log Data may include information such as your computer’s Internet Protocol (“IP”) address, browser type, browser version, the pages of our Site that you visit, the time and date of your visit, the time spent on those pages and other statistics.
In addition, we may use third party services such as Google Analytics that collect, monitor and analyze this data for the purpose of extracting insights into visitors to our website and thereafter to improve, promote and market our services.
Monitoring
We may monitor or record telephone calls, emails, web chat or other communications with you for regulatory, security, quality assurance or training purposes. When visiting our offices, CCTV, access control systems and/or other monitoring systems may be in operation for security reasons and for health and safety and office management purposes.
Communications
We may use your Personal Information to contact you with newsletters, marketing or promotional materials and other information that we have reason to believe is of interest to you from the information we have gathered about you. You can opt out of such communications either by unsubscribing to our emails or by telling us of your wish to opt out at privacy@weavr.io.
Cookies
Cookies are files with small amount of data, which may include an anonymous unique identifier. Cookies are sent to your browser from a web site and stored on your computer’s hard drive.
Like many sites, we use “cookies” to collect information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Site.
Please also refer to our Cookies policy for details on how we collect, use, or disclose information in respect of cookies.
Legal Basis For Processing
We will only process your personal information in compliance with the law. Such laws vary across different territories and further specific information is available on request.
In general, We will either process:
Based on your consent, for example to send you marketing messages about products and services in accordance with your interests and preferences, where such consent is required by law.
Where necessary for the performance of, or entry into, any contract we have with you, for example, to provide you with the Services you have subscribed – in that context, we need that information because otherwise we would not be able to provide the Services to you. For example, if we are required to verify your identity and you do not supply us with the relevant information, we may be unable to open an account for you.
Where we have a legitimate interest to process data, subject to such processing not overriding your own rights and freedoms in objecting to such processing. For example, to keep you informed about your use of the Services, improve, and develop the Services, conduct online advertising or other marketing activities, as well as manage and enforce any claim.
Where we have a legal obligation to collect, use and/or disclose your personal information or otherwise need your personal information to protect your vital interests or those of another person. For example, when necessary to comply with the rules imposed by our or other applicable regulators; or
Exceptionally, we may share your information with a third party when necessary, in the public interest, for example, when law enforcement agencies or other third parties with whom you may have had dealings request information to investigate a crime or otherwise a breach of third-party terms of business.
If you have questions about or need further information concerning the legal basis on which we collect and use your personal information for any specific processing activity, please contact us via contact details below.
Links To Third Party Sites
Our Site may contain links to Third Party Sites. The Third Party Sites are not under our control and we are not responsible for the contents of any Third Party Site, including without limitation any link contained in a Third Party Site, or any changes or updates to a Third Party Sites. We do not accept any responsibility or liability for these third-party websites.
Information that we process in relation to our Services.
We may ask for and collect from you the following personal information when you use our Services:
Our auditors; legal or other similar counsels; compliance outsourcing providers; regulators, data aggregators.
Security
The security of your Personal Information is important to us, but remember that no method of transmission over the Internet, or method of electronic storage, is 100% secure. While we strive to use commercially acceptable technical, physical, and organisational/administrative means to protect your Personal Information from accidental loss and from unauthorised access, use, alteration and disclosure. , we cannot guarantee its absolute security.
Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
YOUR RIGHTS
Below you can find your rights regarding the processing of your personal data:
- Right of information. This Policy aims to inform you in detail about the processing of your personal data.
- Right of access. You are entitled to receive confirmation whether your personal data is being processed, to receive access to such data, as well as information about the processing and your rights.
- Right of rectification. You are entitled to have your data rectified in case it is incomplete or inaccurate. Your data may be rectified by us upon your request.
- Right of erasure. You have the right to ask for your data to be erased/deleted when we no longer have a legal basis to keep it in our systems.
- Right of restriction of the processing. The GDPR and the UK-GDPR provides for the possibility of restricting your personal data processing in case there are grounds for this as set forth therein.
- Right of data portability. You have the right to receive the personal data you have provided, and which is related to you in a structured, commonly used, machine-readable format, and to use such data with another controller at your discretion, if the conditions provided for in the GDPR and the UK-GDPR are present.
- The right not to be subject to a decision based solely on automated processing, including profiling which produces legal effects concerning you or similarly significantly affects you unless there are grounds provided for in the applicable data protection legislation, as well as appropriate safeguards to protect your rights, freedoms and legitimate interests.
- Right to withdraw consent. You have the right to withdraw at any time your consent for personal data processing that is based on prior given consent. Such withdrawal shall not affect the lawfulness of the processing based on consent before its withdrawal.
- Right to object. You have the right to object, in respect to data processed, based on legitimate interest. In the event of such an objection we will examine your request and, if justified, we will comply with it. If we believe there are enough legal grounds for the processing or where necessary for establishing, exercising or defending legal claims we will inform you accordingly. You have an absolute right to object against personal data processing for marketing purposes.
Type, purpose and grounds of processing of personal data collected by us:
| Personal Data | Purpose | Grounds |
| Full name, national identification number, date of birth, identity card data of the payment card applicant, each nationality of the person | · Identification of an individual -payment card applicant/ contact person;· Identification of a payment card applicant under the Measures against Money Laundering Act (MMLA);· Contacting a payment card or account applicant;· Conclusion of a payment services contract;· Provision of a requested service;· Performance of obligations under a payment services contract and general terms and conditions for the conduct of the respective promotion organized by the Company | Performance of a legal obligationPerformance of a contract |
| Telephone conversation record | Improving the quality of service and better protection of personal data of the payment card applicant, as well as their interest and the Company’s interest; proving the conversation subject and complying with the payment card applicant’s information rights | Legitimate interest |
| Telephone | · Contacting a payment card applicant· Performance of obligations under an existing payment services contract; | Conclusion/performance of a contract |
| · Offering products and services of Weavr.;· Sending advertising messages; | Consent | |
| Address | · Contacting a payment card applicant· Identification of a payment card applicant under the MMLA;· Conclusion of a payment services contract;· Provision of a requested service;· Performance of obligations under a payment services contract; | Conclusion/performance of a payment services contract |
| · Offering products and services of us.;· Sending advertising messages | Consent | |
| E-mail/ short text message (SMS) | · Contacting a payment card applicant· Identification of a payment card applicant under the MMLA;· Conclusion of a payment services contract;· Provision of a requested service;· Performance of obligations under a payment services contract | Conclusion/performance of a payment services contract |
| · Offering products and services of Weavr.· Sending advertising messages | Consent | |
| Data from the registers of the NRA (existence of an employment contract, pensions) | Verifying the correctness of data provided by a payment card applicant | Performance of a legal obligationPerformance of a contract |
| Verification of the personal data stated by a payment card applicant in the databases of related parties | · Prevention of frauds· Due diligence, Risk and compliance analysis and action | Legitimate interest |
| Data on the validity of an identity card from the website of the Ministry of Interior | Verification of data provided by a payment card applicant | Legitimate interest |
| Place of employment, data on the type of contract, length of service, job title, profession, remuneration, total monthly income, education | Due diligence, Risk and compliance analysis and action | Legal obligation |
| Handwritten signature or Qualified Electronic Signature | Signing a payment services contract and appendices to it | Conclusion and performance of a contract |
| Data of a contact person, identification contact data / full name and telephone number | Ensuring contact with the customer | Declaration by a payment card application that the contact person has voluntarily provided their data and that they have agreed/ consent of the person |
| Verification of the contact person’s data in databases of related parties | · Prevention of frauds; | Legitimate interest |
| Copy of an identity card | Identification under the MMLA | Legal obligation |
| Identity Verification Information (recordings of your video call (if applicable) with our staff and/or verification selfie; photographs of the user registering for Weavr Service; photographs of a passport or of the front and rear sides of any other official ID document – yours or the document of the person, who is opening the account) | Due diligence, Risk and compliance analysis and action | Legal obligation |
| Data on transactional movements (utilization, payments, transactions made) | Performance of obligations under an existing payment services contract | Legal obligation |
| Device ID and log data | Due diligence and Customer authenticationDetect and prevent fraud, spam, abuse, security incidents, and other harmful activityRisk and compliance analysis and actionFacilitating use of our platforms | Compliance with legal obligations Legitimate interests |
| Data, collected in relation to interactions with our Apps or SKDs | Facilitating use of our platform or servicesPersonalize, Measure, and Improve our Advertising and MarketingOperate, protect, improve, and optimize our Service and your experience, such as by performing analytics and conducting researchProviding support | Performance of a contract Legitimate interest |
| Voice – conversation record | Improving service and better protection of personal data of the payment card applicant, as well as their interest and the Company’s interest; proving the conversation subject. | Legitimate interest |
| Usage Information | Collection of crash reports and other statistical informationAnalysing our app’s and SDKs performance and user experience | Legitimate interest |
Your personal data will be processed by us only in accordance with the applicable data protection regulations. When you communicate with us through any of the communication channels, you acknowledge that the data provided by you are accurate, correct and up-to-date.
Where we transfer, store and process personal information outside of the European Economic Area we make sure that appropriate safeguards are in place to ensure an adequate level of data protection.
List of Subprocessors
To access Weavr’s Subprocessor List, please click here
Data Retention and Erasure
We generally retain your personal information for as long as is necessary for the performance of the contract between you and us and to comply with our regulatory obligations. We may may keep some of your information for tax, legal reporting and auditing obligations.
We may retain some of your personal information as necessary for our legitimate business interests, such as fraud detection and prevention and enhancing security.
Because we maintain our records in a manner protecting from accidental or malicious loss and destruction, residual copies of your personal information may not be removed from our backup systems for a limited period of time.
Changes To This Privacy Policy
This Privacy Policy is effective as of 1st December 2024 and will remain in effect except with respect to any changes in its provisions in the future, which will be in effect immediately after being posted on this page.
We reserve the right to update or change our Privacy Policy at any time and you should check this Privacy Policy periodically. Your continued use of the Service after we post any modifications to the Privacy Policy on this page will constitute your acknowledgment of the modifications and your consent to abide and be bound by the modified Privacy Policy.
We’ll post any changes we make to our privacy notice on this page. If we make any material changes to this Privacy Policy, we will notify you either through the email address you have provided us, or by placing a prominent notice on our website and/or by some other appropriate means.
Global Policy
This policy is global in scope but is not intended to override any legal rights or prohibitions in any territory where such rights or prohibitions prevail. In such event, the rights and obligations set out in this policy will apply, subject only to amendment under any applicable local law having precedence.
Contact Us
If you have any questions about this Privacy Policy or you have concerns about how we use your personal information, please contact us at privacy@weavr.io.