Privacy policy

Introduction

Sepon Pay Ltd.("we”, “us”, “Sepon”) attaches great importance and care to the protection of privacy and personal data, as well as to compliance with the provisions of the applicable data protection legislation.

This Privacy Policy ("Policy”) is aimed to inform you about the types of personal data concerning you we are processing, how we use that data, whether we disclose it to others and the rights you have with regard to personal data in the context of your browsing and operations carried out on our website, when you use our services, when we facilitate your payments on websites operated by our customers, or when you are our prospective customer or user.

This Policy applies to www.sepon-pay.com website owned and operated by Sepon.

Sepon collects personal information required to provide its services in accordance with Canadian laws, including but not limited to the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA) and associated regulations, The Personal Information Protection and Electronic Documents Act (PIPEDA) and related Canadian privacy laws.

Personal data we collect

The nature and quality of the personal data collected about you varies according to the relationship you have with us. We may obtain your personal data when you use our website and services via the following:

Contacting us: When you are contacting us regarding our services or websites, we may collect first name, last name, electronic mail address.
Transaction Data: When you transact using our services or when we facilitate payments on other websites operated by our customers, we will request for the transaction details and all reasonable information regarding the transaction. This information may include: first name, last name, bank and credit account name, account number, transaction amount, device usage, geolocation, IP, e-mail address, participant/recipient data. We may also collect the details of any transactions performed when using our service, including, but not limited to services used, amounts of transactions, currency used etc.
Customer Support: When interacting with our customer service via e-mails, chat, phone or by other means, you may be asked to provide us with personal data such as first name, last name, telephone number, address, electronic mail address, business registration/incorporation certificates, identity card, date of birth, national identification numbers, documents that may include your photos. Additional personal data may be requested as needed for the support services. While communicating with the support team you may also voluntarily provide us with other personal data you think relevant for the resolution of your questions.
Third Party Sources: Depending on the nature of the services provided by Sepon to our partners or suppliers, Sepon may receive personal data either from you directly or from our partner or supplier who provides us with the personal data to fulfill a service to you on their behalf, e.g. banks, credit reporting agencies, agencies that validate identities, entities that help us prevent fraud, complete a risk assessment etc. We may combine this information with other information we may have about you.
Automatically: We and our third-party service providers may collect your personal data via cookies or similar technologies (subject to your consent as applicable) for analyzing trends, administering the website and tracking user activity. We may receive reports based on the use of these technologies by our partners on an individual as well as aggregated basis. Information collected via cookies and similar technologies may include but is not limited to: your domain name, browser type and operating system, IP address, length of time you visit our websites or use our services, your activities on our websites.
Other individuals. For the purposes of the user identification or other related purposes you may provide us with the personal data relating to the other individuals. In this case, you represent and warrant that you have the required authority to provide us with this data, have obtained the necessary consent from the data subject, if applicable, and confirm, that the data of the other individuals may be used in accordance with this Policy. If in your opinion, your data have been wrongly provided to us, please contact us to exercise your data privacy rights.

Most of the time, providing of your data is optional, but in some cases, if you do not provide us with your data, we will not be able to provide our services to you.

Retention of personal data

We determine the retention period for personal data based on the original purpose for which it was collected, applicable legal and regulatory obligations, the volume, nature, and sensitivity of the data, and the potential risks associated with unauthorized access, use, or disclosure. Personal data is retained for the duration of the individual’s relationship with us and, following the end of that relationship, for a period necessary to satisfy legal requirements and in accordance with our internal retention policies. These policies account for purposes such as fraud prevention, risk management, legal defense, and the maintenance of information security safeguards.

We will retain information derived from cookies or other tracking technologies for a reasonable period of time starting from the date such information was collected.

Use of your personal data

We process your personal information in the normal course of our business to perform the services you request. We process your personal data when we have legitimate basis for the following purposes:

to validate your identity, verify your access, confirm your control over the bank accounts that you use within our services, to register you within our systems, onboard commercial customers, manage commercial relations with the organization that you represent, manage user accounts and provide you with our services;
to take, process or deliver your order, manage payments, process or obtain payment or notify you of the status of your purchase;
to provide personal information to industry and credit related organizations for security, credit or fraud prevention purposes;
to register your purchase with the manufacturer or service provider for support or similar purposes;
to facilitate the renewal of subscriptions for products or services;
to respond to your inquiries, provide you with the information you request, provide you with support services;
to monitor service or purchasing patterns;
to provide you with the services’ news and updates, to advertise our services to you;
to understand how individuals use our website and services, to administer, monitor and improve our websites;
to manage risk, improve and protect the websites, to prevent fraud or fraudulent activities, money laundering, abuse of the services, or other types of unlawful activities;

to ensure physical security, IT and network security.

Sharing your personal data

Your personal information is used only by authorized Sepon workforce who are responsible for managing contracts and fulfilling legal obligations. It is accessed solely for the purposes it was collected and only within the scope of their responsibilities. However, under certain circumstances, we may share your personal data with the third parties for the following reasons:

Partners and suppliers. In some circumstances, we may share your personal data with our partners or suppliers in order for them to fulfill a service to us for your benefit or directly to you. The personal data may include but is not limited to your name, mailing address, phone number, and other data required to provide you with the products, services or support requested. Where required by the laws, we will share your personal data subject to your consent and/or direction with third parties.
Service providers. We may share your personal data with the companies/organizations we engage to provide services to us in connection with your transaction. Such engagement may include companies that provide the following services: processing of credit card payments, hosting and IT services, research and analytics, marketing, providing artificial intelligence solutions, sending mail, analyzing data, providing customer service, and otherwise providing services to us to enable us to serve you and enhance our services. These companies/organizations may have access to personal data as required to permit them to perform their obligations to us. We will require these companies / organizations to undertake to protect such personal data and to only use it in accordance with applicable laws and for the purposes for which they are specifically engaged.
Public Authorities. We may transfer your data to duly authorised public authorities (judicial, supervisory,authorized financial authorities, law enforcement agencies etc.), as part of our legal and regulatory obligations. We reserve the right to disclose your personal information as required by law and when we believe that disclosure is necessary to protect our rights, protect your safety or the safety of others, detect, prevent or investigate fraud, security or technical issues , enforce our Terms, including investigation of potential violations, or respond to requests by public authorities, including to meet national security or law enforcement requirements and/or to comply with a judicial proceedings, court orders, or legal process.
Third party advisors. We may share your data with the regulated professions (lawyers, bailiffs, bankers, auditors, insurers etc.) who may be involved in the implementation of guarantees, collection or litigation.
Parties involved in merger or acquisition. If we engage in the merger, acquisition, reorganization, or other significant corporate changes, we may transfer your data to the third parties involved in this process. A prominent notice on our website of any change in ownership or uses of your personal information, as well as any choices you may have regarding your personal information will be displayed upon any merger or acquisition. We will also take all reasonable efforts to notify you of your data transfer to the unaffiliated third party.

When personal data is shared with our service providers or data processors, they are contractually obligated to process the information solely for the purposes originally specified. We take appropriate measures to ensure that these third parties uphold strict standards of confidentiality and data security.

In all instances, only the data strictly necessary for the intended purpose is disclosed, and we implement safeguards to ensure that any transmission or communication of your data is carried out in a secure manner.

Personal data transfer

Sepon processes your personal data in Canada. Certain information provided may be transmitted to third-party service providers located outside of Canada via secure communication networks, as necessary for the delivery and operation of Sepon services. These service providers are obligated to process personal information solely under our direction and in full compliance with applicable data protection laws. Furthermore, they are required to maintain the integrity and confidentiality of the personal data they handle on our behalf by implementing robust technical and organizational security measures.

Sepon will not share or use your personal data in ways unrelated to the purpose for which you provided us the personal data, without providing you the opportunity to consent to such unrelated uses.

Sepon does not sell, trade or rent personal information to anyone.

Children

Our website and services are not intended for use by individuals under the age of 18. We do not knowingly collect personal information from minors. If you become aware that a child under your care has submitted personal data to us without appropriate consent, we encourage you to contact us promptly.

By accessing or using Sepon's websites or services, you confirm and declare that you are at least 18 years of age.

Personal data protection

Sepon maintains its systems on secure servers and implements encryption protocols to protect all personal information in transit and at rest. These measures are designed to significantly reduce the risk of unauthorized access, use, or disclosure of personal data by third parties. Security is a fundamental component of our service design. We employ industry-standard safeguards, including firewalls and Secure Socket Layer (SSL) technology, to help ensure that personal information is protected against unauthorized access, alteration, loss, or destruction, in accordance with applicable Canadian privacy laws.

Your rights

When using the Sepon websites and services, you have the following rights regarding your personal data:

The right to know. You have the right to receive clear, complete, and understandable information about how Sepon collects, uses, and discloses your personal information.
The right to access. You have the right to request access to the personal information Sepon holds about you. Upon request, we will provide a copy of that information, subject to applicable legal exceptions.
The right to correction. If you believe that any personal information we hold is inaccurate, incomplete, or outdated, you have the right to request that it be corrected or annotated as appropriate;
The right to withdraw consent. Where your personal information is processed based on your consent, you may withdraw that consent at any time, subject to legal or contractual obligations. Withdrawal of consent may impact our ability to provide certain services.
The right to challenge compliance. You may challenge Sepon’s compliance with applicable privacy laws by contacting us directly. If your concern is not resolved, you also have the right to file a complaint with the relevant data protection authority.
Right to Transparency. You are entitled to clear and accessible information about our privacy practices, including how and why your personal information is collected, used, retained, and disclosed.
Right to object to marketing. You have the right to refuse or withdraw consent for the use of your personal information for marketing purposes. We will not use your personal information for marketing without your meaningful consent, and you may opt out at any time.

Additional rights may be available to you under applicable privacy legislation.
You may exercise any applicable rights by submitting a request to us using the contact details provided in this policy.

To help us respond efficiently, please include as much detail as possible in your request—such as the specific right you wish to exercise, the nature of the personal information or processing activities involved, and any other relevant context. We may also require you to verify your identity before processing your request, to ensure the security and confidentiality of your personal information.

Cookies and other tracking technologies

We use cookies and similar tracking technologies (such as web beacons and pixels) to collect information, including personal information, when you browse our website or interact with our services. These technologies help us understand how users access, navigate, and engage with our online platform. We use this data to analyze usage patterns, manage site performance, and enhance the functionality and overall user experience of our website and services.

Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in applicable laws or in how we handle personal information within our operations. In the event of any material changes, we will provide notice either by sending you an email or by posting a prominent notice on our website before the changes take effect.

We recommend that you review this Policy periodically to stay informed about our current privacy practices.

Contact information

Sepon Pay Ltd.

200-1001 1 ST SE, Calgary, Alberta

T2G 5G3, Canada

For questions, enquiries or comments concerning our Privacy Policy, please contact us at: https://www.sepon-pay.com/contact

Last updated: April 01, 2025