Privacy Policy

This Privacy Policy explains how PaySec ("PaySec", "we", "us") collects, uses, stores and protects personal data when you visit www.paysec.ae or submit the contact form or the careers form on this website. Section 12 covers job applications. We handle personal data in line with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and other applicable UAE laws.

This policy covers this website only. The PaySec platform will have its own terms of use and privacy notice.

1. Who we are

PaySec is a business based in Dubai, United Arab Emirates. For any question about this policy or your personal data, email contact@paysec.ae.

2. What personal data we collect

Information you give us through the contact form

• Full name
• Contact number
• Email address
• Business industry
• Your consent confirmation, with the date and time it was given

We also create a reference number for each enquiry. We do not ask for, and you should not submit, Emirates ID numbers, passport details, bank account details or any other sensitive information through this form.

Information collected automatically

When you visit the website, our hosting and security provider, Cloudflare, processes technical information such as your IP address, browser type, device information and the pages you request. This is used to deliver the website, keep it secure and protect it against abuse, including limiting repeated form submissions. Cloudflare may set strictly necessary security cookies.

We do not use analytics cookies, advertising cookies or tracking pixels on this website.

3. Why we use your data and our legal basis

We do not sell your personal data, and we do not use it for automated decision-making or profiling.

4. Who we share your data with

Your data is accessible only to authorised members of the PaySec team who need it to respond to you. We use the following service providers, who process data on our behalf and under our instructions:

• Cloudflare, Inc.: website hosting, security and storage of contact form submissions.
• Resend: delivery of internal email notifications to the PaySec team when a contact form is submitted.
• Our email provider: receiving and storing those notifications in the PaySec mailbox.

We may also disclose personal data where required by UAE law, a court order or a competent authority.

5. International data transfers

Our service providers may store or process personal data outside the United Arab Emirates. Where this happens, we rely on providers that apply appropriate contractual, technical and organisational safeguards to protect your data, in line with the cross-border transfer requirements of the PDPL.

6. How long we keep your data

We keep contact form submissions for up to 24 months after our last contact with you, unless you ask us to delete them sooner or we need to keep them longer to meet a legal obligation. After that, the data is deleted.

7. How we protect your data

The website is served only over encrypted HTTPS connections. Contact form submissions are stored in a restricted database that only authorised PaySec team members can access. We use rate limiting and spam protection on the form, and we review access regularly.

8. Your rights

Subject to the PDPL, you have the right to:

• request access to the personal data we hold about you
• ask us to correct inaccurate or incomplete data
• ask us to delete your data
• ask us to restrict or stop processing your data
• withdraw your consent at any time, without affecting processing that took place before you withdrew it
• raise a complaint with the UAE Data Office

To use any of these rights, email contact@paysec.ae with your name and enquiry reference number if you have it. We may need to verify your identity before acting on your request. We aim to respond within 30 days.

9. Children

This website is intended for businesses and is not directed at anyone under 18. We do not knowingly collect personal data from children.

10. Links to other websites

This website may link to other websites. We are not responsible for their content or privacy practices, and we recommend reading their privacy policies.

11. Changes to this policy

We may update this policy from time to time. The latest version will always be available on this page, with the date it was last updated shown at the top.

12. Job applicants

This section applies when you send an application through the careers form at www.paysec.ae/careers/. Where it differs from the sections above, this section applies.

What we collect

• Full name, email address and contact number
• The area of work you are interested in
• Your LinkedIn profile link and a short note, if you give them
• Your CV (PDF)
• Your consent confirmation, with the date and time it was given
• A one-way code derived from your IP address, used only to limit repeated submissions

Please do not include Emirates ID, passport or visa copies, photographs of documents, bank details or health information in your CV or note. We do not need them at this stage.

Why we use it and our legal basis

We use your application to consider you for current and future roles at PaySec and to contact you about them. Our legal basis is your consent. We check every CV automatically for harmful content when you send it; files that fail the check are rejected and not stored.

Who can see it

Only PaySec team members involved in hiring, who sign in through a protected staff area. Every time a CV is opened, changed or deleted, we record who did it and when. Your application is stored by Cloudflare, Inc. (database and private file storage). Resend delivers our emails: a confirmation to you when you apply, any messages from the PaySec team about your application, and a short notification to the PaySec team that a new application has arrived. None of these emails contain your CV.

How long we keep it

12 months from the date you apply. After that, your details and your CV are deleted automatically. If we offer you a role, the data you provide during hiring will be handled under our employee privacy notice.

Your rights

You can delete your application yourself at any time, with the personal link in your confirmation email or on the delete your application page. It is deleted immediately and we email you a confirmation. You can also withdraw your consent, or ask us to access, correct or delete your application, by emailing careers@paysec.ae from the email address you applied with, with the subject "Delete" (or your request) and your application reference (it starts with CV-). If the request comes from a different address, we will ask you to confirm it from the address you applied with. When we delete an application, we email a confirmation to the address on the application and keep only the reference number and the date of deletion as a record. We aim to act within 30 days, and usually much sooner.