SMARTHUB PAY FINTECH PRIVATE LIMITED ("SmartHub Pay", "Company", "we", "our" or "us") respects the privacy of individuals and businesses that access our website, applications, merchant platforms or services.
This Privacy Policy explains how we collect, use, store, disclose and protect information in connection with our services.
By accessing our website or using our services, you acknowledge this Policy. Where consent is legally required, we will seek the appropriate consent.
This Policy applies to merchants, business customers, authorised users, website visitors, prospective customers and other individuals whose information we process in connection with our services.
Certain services may also be governed by the privacy policies of our banking partners, payment aggregators, payment gateways, technology providers and other third parties.
Depending on the services used, we may collect the following categories of information:
We will collect only information reasonably necessary for the relevant purpose and applicable legal obligations.
We may use information to:
We process personal data on the basis permitted under applicable Indian law, including valid consent where required, legitimate uses recognised by law, contractual or service-related necessity where applicable, and compliance with legal obligations.
Where consent is the applicable basis, individuals may withdraw consent using the available process. Withdrawal does not affect processing already lawfully undertaken and may affect our ability to provide certain services.
We may share relevant information, to the extent necessary and lawful, with:
We do not authorise third parties to use personal information for purposes unrelated to the services or their lawful obligations.
Payment credentials and sensitive authentication data must be handled in accordance with applicable law, payment-network requirements and relevant security standards.
Where card payments are supported, card processing may be performed by authorised payment partners. SmartHub Pay will not knowingly store sensitive authentication data, such as card PINs or card verification values, beyond what applicable rules expressly permit.
Users must never share OTPs, UPI PINs, passwords or other confidential authentication credentials with anyone claiming to represent SmartHub Pay.
We seek to maintain reasonable technical, organisational and operational safeguards appropriate to the nature of the information processed. These may include access controls, authentication, encryption where appropriate, monitoring, staff confidentiality requirements, secure development practices and vendor oversight.
No electronic system or internet transmission can be guaranteed to be completely secure. If a personal data breach occurs, we will take the steps required under applicable law.
We retain personal and transaction information only for as long as reasonably necessary for the stated purposes, service delivery, dispute resolution, accounting, audit, fraud prevention and applicable legal or regulatory requirements.
Information will be erased or its processing restricted when retention is no longer necessary, subject to lawful retention obligations and permitted exceptions.
Subject to applicable law, you may have the right to:
Requests may require identity verification. Certain information cannot be erased while retention is legally required or necessary for an applicable legal claim.
Our website or applications may use cookies and similar technologies for essential functionality, security, preferences, analytics and performance.
Where required, we will provide appropriate notice and consent choices. Users may also manage cookies through their browser settings, although disabling certain cookies may affect functionality.
Our platforms may contain links to or integrations with third-party websites, applications or payment services. Those third parties operate under their own terms and privacy policies.
SmartHub Pay is not responsible for the independent privacy practices of third parties, except to the extent required by applicable law or contract.
Our merchant and business services are not intended to be used independently by children where prohibited by law. We will handle children's personal data in accordance with applicable legal requirements, including any applicable parental consent and safeguards.
Where personal data is processed or transferred outside India, we will follow applicable Indian data protection requirements and any restrictions or conditions imposed by law.
We may revise this Privacy Policy to reflect changes in our services, security practices or legal requirements. The updated version will be published with a revised "Last Updated" date. Where required, we will provide additional notice or seek consent.
For privacy-related requests, complaints or questions, please contact:
We will handle complaints and requests in accordance with applicable law and our published grievance-handling procedure.
This Policy is governed by the laws of India, subject to applicable data protection, payment system and other regulatory requirements.
