PayJoy Perú S.A.C., Política de Privacidad

Introducción

Esta Política de Privacidad (en adelante “Política”) tiene como objetivo informar a los titulares de los datos personales tratados por PayJoy Perú S.A.C, identificada con RUC No 20605122729, con dirección en Avenida Manuel Olguín 325, Piso 12, Santiago de Surco, Lima, Perú (la “Compañía” o “PayJoy”) sobre las implicancias del tratamiento de sus datos personales.

Base Legal

La privacidad de las personas, es de suma importancia para la Compañía. Estamos comprometidos en cumplir con las normas aplicables que rigen la privacidad de las personas a quienes ofrecemos nuestros productos y servicios.

De conformidad con los principios de justicia y transparencia, así como al derecho del titular de los datos personales a ser informado, esta Política le proporciona a usted, el titular de los datos personales, la información sobre el tratamiento de su información de una manera clara, adecuada, transparente y de fácil acceso. Como parte de nuestras actividades, realizamos el tratamiento de datos personales en cumplimiento con lo dispuesto, entre otros, en las siguientes normas:

• Ley N° 29733 – Ley de Protección de Datos Personales (la “Ley”).
• Reglamento de la Ley N° 29733, aprobado por Decreto Supremo N° 003-2013-JUS.
• Directiva de Seguridad de la Información administrada por los Bancos de Datos Personales, aprobada por Resolución Directoral N° 019-2013-JUS/DGPDP.
• Guía práctica para la observancia del deber de informar, aprobada por Resolución Directoral No 80-2019- JUS/DGTAIPD.

Principios

La Compañía se compromete a respetar los principios rectores establecidos en la normativa de Protección de Datos Personales. Estos son:

• Principio de Legalidad: En PayJoy se realiza el tratamiento de datos personales conforme a lo establecido por ley, así como con los requerimientos de la autoridad competente.
• Principio de Consentimiento: La Compañía recaba el consentimiento de los titulares de la Información para su tratamiento, salvo los casos excepcionales previstos en la Ley. En todos los casos, la Compañía informa a cada persona natural, de manera detallada, sencilla, previa, expresa e inequívoca sobre la finalidad para la cual se recopila su información y los usos que se darán a sus datos, la cual se dará al inicio de la vinculación con la persona natural.
• Principio de Finalidad: Los datos personales son recopilados por la Compañía para una finalidad determinada, explícita y lícita, conforme se detalla en la presente Política. El tratamiento de los datos personales no se extenderá a otra finalidad que no haya sido la establecida de manera inequívoca como tal al momento de su recopilación, excluyendo los casos de actividades de valor histórico, estadístico o científico cuando se utilice un procedimiento de disociación o anonimización.
• Principio de Proporcionalidad: Procesamos la información de manera adecuada y relevante y dentro de los fines para los que fueron recopilados.
• Principio de Calidad: PayJoy procura que los datos personales a su disposición sean exactos y veraces, facilitando los canales adecuados y eficaces para que los titulares de la Información los mantengan permanentemente actualizados. Los datos personales se conservarán por la Compañia durante el tiempo necesario para cumplir con la finalidad del tratamiento.
• Principio de nivel de protección adecuado: La Compañía garantiza un nivel suficiente de protección para los datos personales que sean objeto de flujo transfronterizo, de acuerdo con lo previsto en la normativa peruana.

Tratamiento de datos personales

A fin de cumplir con sus finalidades de tratamiento, la Compañía puede recopilar y dar tratamiento a la Información de acuerdo a lo descrito a continuación:

Datos personales de Potenciales Clientes:

1. Banco de datos personales: Los datos personales se encuentran registrados en el banco de datos personales denominado “Potenciales Clientes”, debidamente inscrito en el Registro Nacional de Protección de Datos Personales de la Autoridad Nacional de Protección de Datos Personales del Ministerio de Justicia.
2. Finalidad de tratamiento: Los datos personales se recopilan y utilizan con el propósito de gestionar las solicitudes de crédito de los potenciales clientes a fin de evaluar si califican para adquirir nuestros servicios.
3. Datos personales de carácter obligatorio: Para llevar a cabo las finalidades descritas en el presente documento, es obligatorio que el titular nos proporcione los siguientes datos personales: nombre y apellido, número de DNI o CE, número de teléfono, estado civil, dirección domiciliaria, dirección de correo electrónico, imagen personal, fecha de nacimiento, nacionalidad, sexo, profesión, edad, deudas, ingresos económicos.
4. Consecuencias de no proporcionar los datos obligatorios o negativa de hacerlo: En caso no proporcione los datos personales antes detallados, no será posible gestionar su solicitud de crédito.
5. Plazo de conservación: Los datos personales serán conservados mientras sean necesarios para cumplir con la finalidad antes descrita o hasta que el titular de los datos solicite su cancelación de nuestro banco de datos personales. Una vez vencido el plazo de conservación, PayJoy eliminará de sus registros los datos personales materia de tratamiento.
6. Existencia de decisiones automatizadas: El tratamiento de datos personales realizado respecto a este banco exige la toma de decisiones automatizadas respecto al titular de los datos personales.  Como consecuencia de las mismas, se determinará la aprobación o rechazo de la solicitud de crédito.

Datos personales de Clientes:

1. Banco de datos personales: Los datos personales de nuestros clientes se encuentran registrados en el banco de datos personales denominado “Clientes” inscrito con código de registro N° 24943 en el Registro Nacional de Protección de Datos Personales de la Autoridad Nacional de Protección de Datos Personales del Ministerio de Justicia.
2. Finalidad de tratamiento: Los datos de clientes se recopilan y utilizan con el propósito de gestionar la relación comercial con el cliente.
   Solo en caso el Cliente haya proporcionado su consentimiento para ello, utilizaremos sus datos personales para realizar acciones de prospección comercial y publicitaria.
   El historial de sus datos personales podrá ser reutilizado en caso de adquisición de nuevos servicios financieros con nuestra empresa.‍
3. Datos personales de carácter obligatorio: Para llevar a cabo las finalidades descritas en el presente documento, es obligatorio que el titular nos proporcione los siguientes datos personales: nombre y apellido, número de DNI o CE, número de teléfono, estado civil, dirección domiciliaria, dirección de correo electrónico, imagen personal, voz, firma, firma electrónica, fecha de nacimiento, nacionalidad, sexo, profesión, edad, historial crediticio, deudas, ingresos económicos, IMEI, información del dispositivo móvil asociado al crédito.‍
4. Consecuencias de no proporcionar los datos obligatorios o negativa de hacerlo: En caso no proporcione los datos personales antes detallados, no será posible entablar una relación comercial con nuestra empresa.‍
5. Plazo de conservación: Los datos personales serán conservados mientras sean necesarios para cumplir con la finalidad antes descrita o hasta que el titular de los datos solicite su cancelación de nuestro banco de datos personales. Una vez vencido el plazo de conservación, PayJoy eliminará de sus registros los datos personales materia de tratamiento.
   

Datos de Potenciales Aliados Comerciales

1. Banco de datos personales: Los datos personales se encuentran registrados en el banco de datos personales denominado “Potenciales Aliados Comerciales”, debidamente inscrito con código de registro N° PJ-2025-1488 en el Registro Nacional de Protección de Datos Personales de la Autoridad Nacional de Protección de Datos Personales del Ministerio de Justicia.
2. Finalidad de tratamiento: Los datos personales se recopilan y utilizan con el propósito de gestionar los datos personales de titulares de establecimientos comerciales para su potencial afiliación a nuestra empresa en calidad de aliados comerciales.
3. Datos personales de carácter obligatorio: Para llevar a cabo las finalidades descritas en el presente documento, es obligatorio que el titular nos proporcione los siguientes datos personales: nombre y apellido, nombre comercial, RUC, número de DNI o CE, número de teléfono, estado civil, dirección domiciliaria, dirección de correo electrónico, imagen personal, fecha de nacimiento, nacionalidad, sexo, actividad económica, datos bancarios, firma o firma electrónica, geolocalización de establecimientos comerciales.
4. Consecuencias de no proporcionar los datos obligatorios o negativa de hacerlo: En caso no proporcione los datos personales antes detallados, no será posible entablar una gestionar su potencial como aliado comercial.
5. Plazo de conservación: Los datos personales serán conservados mientras sean necesarios para cumplir con la finalidad antes descrita o hasta que el titular de los datos solicite su cancelación de nuestro banco de datos personales. Una vez vencido el plazo de conservación, PayJoy eliminará de sus registros los datos personales materia de tratamiento.
   

Datos personales de Aliados Comerciales:

1. Banco de datos personales: Los datos personales se encuentran registrados en el banco de datos personales denominado “Aliados comerciales”, debidamente inscrito con código de registro N° 24941 en el Registro Nacional de Protección de Datos Personales de la Autoridad Nacional de Protección de Datos Personales del Ministerio de Justicia.
2. Finalidad de tratamiento: Los datos personales se recopilan y utilizan con el propósito de gestionar la relación contractual con los aliados comerciales que ofrecen y comercializan los equipos de telefonía móvil que son posteriormente financiados por nuestra empresa.
3. Datos personales de carácter obligatorio: Para llevar a cabo las finalidades descritas en el presente documento, es obligatorio que el titular nos proporcione los siguientes datos personales: nombre y apellido, nombre comercial, RUC, número de DNI o CE, número de teléfono, estado civil, dirección domiciliaria, dirección de correo electrónico, imagen personal, fecha de nacimiento, nacionalidad, sexo, actividad económica, datos bancarios, firma o firma electrónica.
4. Consecuencias de no proporcionar los datos obligatorios o negativa de hacerlo: En caso no proporcione los datos personales antes detallados, no será posible entablar una relación contractual de aliado comercial.
5. Plazo de conservación: Los datos personales serán conservados mientras sean necesarios para cumplir con la finalidad antes descrita o hasta que el titular de los datos solicite su cancelación de nuestro banco de datos personales. Una vez vencido el plazo de conservación, PayJoy eliminará de sus registros los datos personales materia de tratamiento.

Datos personales de Proveedores:

1. Banco de datos personales: Los datos personales se encuentran registrados en el banco de datos personales denominado “Proveedores”, debidamente inscrito con código de registro N° 24942 en el Registro Nacional de Protección de Datos Personales de la Autoridad Nacional de Protección de Datos Personales del Ministerio de Justicia.
2. Finalidad de tratamiento: Los datos se recopilan y utilizan con el propósito de gestionar la relación contractual de prestación de servicios de nuestros proveedores.
3. Datos personales de carácter obligatorio:  Para llevar a cabo las finalidades descritas en el presente documento, es obligatorio que el titular nos proporcione los siguientes datos personales: nombre y apellido, nombre comercial, RUC, número de DNI, CE o Pasaporte, número de teléfono, estado civil, dirección domiciliaria, dirección de correo electrónico, imagen personal, fecha de nacimiento, nacionalidad, sexo, actividad económica, datos bancarios, firma o firma electrónica, información tributaria y huella dactilar.
4. Consecuencias de no proporcionar los datos obligatorios o negativa de hacerlo: En caso no proporcione los datos personales antes detallados, no será posible entablar una relación contractual de prestación de servicios en calidad de proveedor.
5. Plazo de conservación: Los datos personales serán conservados mientras sean necesarios para cumplir con la finalidad antes descrita o hasta que el titular de los datos solicite su cancelación de nuestro banco de datos personales. Una vez vencido el plazo de conservación, PayJoy eliminará de sus registros los datos personales materia de tratamiento.

Datos personales de Postulantes Laborales:

1. Banco de datos personales: Los datos personales se encuentran registrados en el banco de datos personales denominado “Postulantes Laborales”, debidamente inscrito en el Registro Nacional de Protección de Datos Personales de la Autoridad Nacional de Protección de Datos Personales del Ministerio de Justicia.
2. Finalidad de tratamiento: Los datos se recopilan y utilizan con el propósito de gestionar los procesos de postulación y selección de talento humano.
3. Datos personales de carácter obligatorio: Para llevar a cabo las finalidades descritas en el presente documento, es obligatorio que el titular nos proporcione los siguientes datos personales: nombre y apellido, número de teléfono, dirección de correo electrónico, imagen personal, sexo, antecedentes laborales, formación académica.
4. Consecuencias de no proporcionar los datos obligatorios o negativa de hacerlo: En caso no proporcione los datos personales antes detallados, no será posible incluirlo en nuestros procesos de postulación y selección de talento humano.
5. Plazo de conservación: Los datos personales serán conservados mientras sean necesarios para cumplir con la finalidad antes descrita o hasta que el titular de los datos solicite su cancelación de nuestro banco de datos personales. Una vez vencido el plazo de conservación, PayJoy eliminará de sus registros los datos personales materia de tratamiento.

Datos personales de Trabajadores:

1. Banco de datos personales: Los datos personales se encuentran registrados en el banco de datos personales denominado “Trabajadores”, debidamente inscrito con código de registro N° 24944 en el Registro Nacional de Protección de Datos Personales de la Autoridad Nacional de Protección de Datos Personales del Ministerio de Justicia.
2. Finalidad de tratamiento: Los datos se recopilan y utilizan con el propósito de gestionar las relaciones laborales con los trabajadores de la empresa.
3. Datos personales de carácter obligatorio: Para llevar a cabo las finalidades descritas en el presente documento, es obligatorio que el titular nos proporcione los siguientes datos personales: nombre y apellido, número de DNI o CE, número de RUC, número de teléfono, dirección de correo electrónico, imagen personal, firma o firma electrónica, estado civil, sexo, fecha de nacimiento, dirección domiciliaria, tipo de vivienda, nacionalidad, profesión, antecedentes laborales, formación académica, datos de derechohabientes, datos de persona de contacto, datos bancarios, información tributaria, bienes patrimoniales, huella dactilar, ingresos económicos, características físicas, datos de afiliación previsional, datos de vínculos familiares, datos de seguros.
4. Consecuencias de no proporcionar los datos obligatorios o negativa de hacerlo: En caso no proporcione los datos personales antes detallados, no será posible su contratación ni la continuación de la relación laboral.
5. Plazo de conservación: Los datos personales serán conservados mientras sean necesarios para cumplir con la finalidad antes descrita o hasta que el titular de los datos solicite su cancelación de nuestro banco de datos personales. Una vez vencido el plazo de conservación, PayJoy eliminará de sus registros los datos personales materia de tratamiento.

Datos personales de Quejas y Reclamos:

1. Banco de datos personales: Los datos personales se encuentran registrados en el banco de datos personales denominado “Quejas y Reclamos”, debidamente inscrito con código de registro N° 24945 en el Registro Nacional de Protección de Datos Personales de la Autoridad Nacional de Protección de Datos Personales del Ministerio de Justicia.
2. Finalidad de tratamiento: Los datos se recopilan y utilizan con el propósito de gestionar y atender las quejas y reclamos recibidos por la empresa.
3. Datos personales de carácter obligatorio: Para llevar a cabo las finalidades descritas en el presente documento, es obligatorio que el titular nos proporcione los siguientes datos personales: nombre y apellido, número de DNI o CE, número de teléfono, dirección de correo electrónico, imagen personal, voz, firma o firma electrónica, dirección domiciliaria, datos bancarios, firma, firma electrónica.
4. Consecuencias de no proporcionar los datos obligatorios o negativa de hacerlo: En caso no proporcione los datos personales antes detallados, no será posible atender su queja o reclamo.
5. Plazo de conservación: Los datos personales serán conservados mientras sean necesarios para cumplir con la finalidad antes descrita o hasta que el titular de los datos solicite su cancelación de nuestro banco de datos personales. Una vez vencido el plazo de conservación, PayJoy eliminará de sus registros los datos personales materia de tratamiento.

Datos personales de Marketing:

1. Banco de datos personales: Los datos personales se encuentran registrados en el banco de datos personales denominado “Marketing”, debidamente inscrito con registro en trámite en el expediente N° 2770-2024-PJ en el Registro Nacional de Protección de Datos Personales de la Autoridad Nacional de Protección de Datos Personales del Ministerio de Justicia.
2. Finalidad de tratamiento: Los datos se recopilan y utilizan con el propósito de elaborar contenido audiovisual a ser utilizado en espacios publicitarios, redes sociales y otros medios de comunicación al público en general.
3. Datos personales de carácter obligatorio: Para llevar a cabo las finalidades descritas en el presente documento, es obligatorio que el titular nos proporcione los siguientes datos personales: nombre y apellido, número de DNI o CE, imagen personal, voz y firma.
4. Consecuencias de no proporcionar los datos obligatorios o negativa de hacerlo: En caso no proporcione los datos personales antes detallados, no será posible utilizar sus datos para la elaboración de contenido audiovisual y su publicación conforme a la finalidad descrita.
5. Plazo de conservación: Los datos personales serán conservados mientras sean necesarios para cumplir con la finalidad antes descrita o hasta que el titular de los datos solicite su cancelación de nuestro banco de datos personales. Una vez vencido el plazo de conservación, PayJoy eliminará de sus registros los datos personales materia de tratamiento.

Datos personales de Vendedores:

1. Banco de datos personales: Los datos personales se encuentran registrados en el banco de datos personales denominado “Vendedores”, debidamente inscrito con registro en trámite con código N° INS-2025-413  en el Registro Nacional de Protección de Datos Personales de la Autoridad Nacional de Protección de Datos Personales del Ministerio de Justicia.
2. Finalidad de tratamiento: Los datos se recopilan y utilizan con el propósito de gestionar el acceso y uso seguro de los vendedores a sus cuentas en la plataforma de colocación de créditos de Payjoy.

1. Solo en caso el Vendedor haya proporcionado su consentimiento para ello, utilizaremos sus datos personales para realizar acciones de prospección comercial y publicitaria.

1. Datos personales de carácter obligatorio: Para llevar a cabo las finalidades descritas en el presente documento, es obligatorio que el titular nos proporcione los siguientes datos personales: nombre y apellido, número de DNI o CE, fecha de nacimiento, nacionalidad, estado civil, sexo, dirección e imagen personal.
2. Consecuencias de no proporcionar los datos obligatorios o negativa de hacerlo: En caso no proporcione los datos personales antes detallados, no será posible proporcionarle acceso como vendedor a la plataforma de Payjoy.
3. Plazo de conservación: Los datos personales serán conservados mientras sean necesarios para cumplir con la finalidad antes descrita o hasta que el titular de los datos solicite su cancelación de nuestro banco de datos personales. Una vez vencido el plazo de conservación, PayJoy eliminará de sus registros los datos personales materia de tratamiento.‍

Transferencia de datos personales

‍

La Compañía puede compartir información sobre usted con:

• Agencias gubernamentales, tribunales o autoridades supervisoras, a fin de cumplir con lo requerido por la legislación aplicable;
• Cualquier agente, contratista, proveedor de servicios u otro tercero en relación con el negocio de la Compañía y con el fin de brindar los servicios; y
• Empresas que pertenezcan al grupo económico de la Compañía, con el fin de cumplir obligaciones corporativas.

El listado completo y detallado de destinatarios de la Información podrá ser consultado en nuestros canales de atención, que aparecen detallados en la parte final de la presente Política o en nuestro sitio web https://www.payjoy.com/pe

Flujo transfronterizo de los datos personales

La Compañía podrá transferir la información personal que recopilamos sobre usted a destinatarios en países distintos del que se recopiló originalmente la información. Estos países pueden no tener la misma legislación de protección de datos que el país en el que usted inicialmente proporcionó la información. Cuando transfiramos su información a destinatarios de otros países (i) realizaremos esas transferencias de acuerdo con los requisitos de la legislación aplicable; y (ii) protegeremos la información personal transferida de acuerdo con la presente Política de Privacidad

El listado completo y detallado de destinatarios de la Información podrá ser consultado en nuestros canales de atención, que aparecen detallados en la parte final de la presente Política o en nuestro sitio web https://www.payjoy.com/pe

Ejercicio de sus derechos como titular del dato personal

Le informamos que usted cuenta con los siguientes derechos en materia de protección de datos de acuerdo con la Ley:

Derecho de Acceso

Tiene derecho a solicitar el acceso o una copia de cualquiera de sus datos personales que la Compañía pueda tener. Asimismo, tiene derecho a que se le brinde toda la información sobre el Tratamiento de sus datos personales, lo cual se cumple a través de la presente Política.

Derecho de actualización, inclusión, rectificación, y supresión

Tiene derecho a la actualización, inclusión rectificación y supresión de sus datos personales materia de tratamiento cuando estos sean parcial o totalmente inexactos, incompletos o cuando se hubiere advertido omisión, error o falsedad. Tiene derecho a solicitar a la Compañía que complete la información que considere incompleta. Asimismo, podrá solicitar la cancelación o supresión de sus datos personales no relacionados o necesarios para el tratamiento a cargo de la Compañía o las dispuestas por la normativa vigente.

Derecho de impedir el suministro

Usted tiene derecho a impedir que sus datos personales sean suministrados.

Derecho a Oponerse al Tratamiento

Tiene derecho a oponerse al Tratamiento de su Información cuando existan motivos fundados y legítimos relativos a una concreta situación personal.

Derecho al Tratamiento Objetivo

Tiene derecho a no verse sometido a una decisión con efectos jurídicos respecto a sus intereses, sustentada únicamente en un tratamiento de datos personales destinado a evaluar determinados aspectos de su personalidad o conducta, excepto cuando sea requerido por Ley.

Derecho a la Tutela

En caso de que la Compañía le deniegue total o parcialmente, el ejercicio de los derechos establecidos en la Ley, este puede recurrir ante la Autoridad Nacional de Protección de Datos Personales en vía de reclamación o al Poder Judicial para los efectos de la correspondiente acción de hábeas data.

Derecho a ser Indemnizado

Tiene derecho a obtener la indemnización correspondiente, conforme a ley, en caso de que sea afectado a consecuencia del incumplimiento de la normativa de la materia por parte de la Compañía.

Cualquier solicitud para ejercer sus derechos puede dirigirse a PayJoy a través de los medios detallados al final de la presente Política.

Antes de procesar su solicitud, la Compañía deberá verificar su identidad. La solicitud debe:

• Proporcionar información suficiente que nos permita verificar razonablemente que usted es la persona sobre la que tratamos datos personales, o un representante legal de dicha persona natural.
• Describir su solicitud con detalles suficientes que nos permita entender, evaluar y responder adecuadamente a la misma.

No podemos responder a su solicitud o proporcionarle información si no es posible verificar su identidad o facultades suficientes para hacer la solicitud y confirmar que la información personal se refiere a usted.

La Compañía no realizará ningún cargo o cobro por procesar su solicitud. Responderemos a su solicitud dentro de un plazo legal aplicable.

Podrá ejercer sus derechos comunicándose al siguiente correo electrónico: privacidadperu@payjoy.com,

Privacidad de los menores de edad

Nuestros servicios no están dirigidos a individuos menores de dieciocho años, por lo que la Compañía no recopila información personal de menores de dieciocho años.

Medidas de Seguridad

La Compañía ha implementado prácticas y procedimientos de seguridad razonables que se ajustan a las normas aceptadas nacional e internacionalmente para la seguridad y protección de la información. Estas prácticas y procedimientos incluyen medidas de control de seguridad directivas, técnicas, operativas y físicas acordes con la naturaleza de la información recopilada y procesada por la Compañía.

Actualizaciones

La Compañía se reserva el derecho de añadir, revisar, enmendar, modificar o eliminar cualquier parte de la presente Política (en parte o en su totalidad) a su discreción. La versión vigente y actualizada de la presente Política se publicará en el sitio web de la Compañía. En caso de cualquier cambio o de cualquier requisito que surja en virtud de la legislación aplicable, esta Política será enmendada o modificada en la medida necesaria para cumplir con dicha modificación a la ley aplicable o para cumplir con cualquier requisito en virtud de dichas leyes aplicables. Siempre que hagamos cambios materiales en la presente Política, los mismos serán válidos, efectivos y vinculantes después de ser: (1) divulgados en nuestra página web o plataforma; o (2) comunicados a usted por correo electrónico; o (3) comunicados a usted de cualquier otra manera. Si usted decide no seguir utilizando los Servicios después de dicho cambio, deberá solicitar la terminación de su relación jurídica con la Compañía.

Cómo ponerse en contacto con nosotros

Si tiene alguna duda o solicitud sobre sus datos personales incluyendo el ejercicio de sus derechos como titular de los datos personales usted puede:

Enviarnos un correo electrónico a: privacidadperu@payjoy.com,

Llamarnos al: (01)641-9779, o

Escribirnos por correo regular a:

PayJoy Perú S.A.C.

Avenida Manuel Olguín 325, piso 12, Santiago de Surco, Lima.

En caso de que su solicitud sea por otro motivo diferente y sin relación con esta política de privacidad podrá ponerse en contacto a través del correo electrónico contacto@payjoy.com, especificando el motivo de la duda e inquietud que presenta.

‍

‍

• PayJoy Mexico Privacy Policy
• PayJoy Ecuador Privacy Policy
• PayJoy South Africa Privacy Policy
• PayJoy Brazil Privacy Policy

Introduction

The privacy of individuals, including our customers and clients, is of utmost importance to PayJoy, Inc (“Company”). We are committed to adhering to the Privacy regulations governing the citizens to whom we provide products and services.

In compliance with fair and transparent principle and the data subject’s right to be informed, this PayJoy Privacy Policy (“Policy”) provides you, the data subject, with information on the processing for your personal information (“Information”) in a clear, suitable and conspicuous manner that is easily accessible.

This Policy aims to set out in clear terms the types of Information collected, the purpose of collection, the source of the Information, the entities with whom such Information may be shared, the data subject’s rights and also the reasonable security practices and procedures adopted by the Company in handling such Information.

Please read this Policy carefully as your proceeding with the use of this website or the use or purchase of any goods or services provided by us (“Services”), or your providing any Information to the Company on or through the use of our website or through any Services, are based upon the assumption that you are providing such Information to the Company voluntarily. further, the subsequent provisions of this Policy are based upon such an assumption

Type of Information Collected

In order to provide the Services, the Company may collect and process the following categories of Information:

Information about You

Including but not limited to,

• (i) Identification Data: name, government ID, e-mail, telephone number, your photograph.
• (ii) Credit Reports, Watchlists & Validation Services: requested copies of your credit history which may contain professional and financial information about you. We check for your information in public watchlists such as OFAC lists. We use Validation Services to ensure the validity and quality of Identification Data we receive.
• (iii) Social Media Data: data provided in your social media accounts, including photo, friends list and name.
• (iv) Copies of Documents: collected documentation. including government IDs
• (v) Payment Information: information about how you pay your obligation with PayJoy
• (vi) Customer Service: information you provide to us in connection with the Services, including when you communicate with us, by any means, for Customer service purposes.

Information Concerning Your Mobile Device

Including but not limited to information regarding the device, operating system, device identifier, SIM information, applications list, internet connection state, application foreground state, etc.

If the device is purchased, rented or leased via PayJoy then we collect information relating to that transaction such as store where transaction occurred, amount of transaction, etc.

Information Concerning Your Communication

If you provide specific authorization, we may collect and process information from your mobile device related but not limited to call logs and SMS messages. Before doing so we will contact you and request your specific consent.

Cookies

A cookie is a small text file that a web server places on your computer or device when your browser accesses a website. Cookies store data specific to a client or website and are designed to create a record of or “remember” online activity. The Company uses cookies to ensure the site functions properly and to deliver an individualized online services experience. You generally have the ability to accept or decline cookies. Most web browsers give you a choice to modify your browser settings to decline some or all cookies.

Please note under the law some of the information above is considered sensitive data. The Company ensures compliance with the legal requirements called out in the law for processing of sensitive data.

Retention of Information

The Company will retain and use the Information for the period necessary to (i) fulfill the purposes described in this Policy; (ii) comply with legal or regulatory obligations applicable to us; or (iii) fulfill evidentiary purposes in legal, administrative or arbitration proceedings. The criteria considered to determine the retention period include the duration of your relationship with the Company, legal retention periods applicable, and legal prescriptions with respect to possible claims, lawsuits, or administrative and arbitration proceedings in connection with the Services we provide.

Purpose of Collection

The Company will, or may, collect, use, receive, possess, process, store, deal, disclose, transfer or handle Information for the following purposes:

1. When you contract PayJoy Services, we need to process your Information to authenticate your identity and assess risk of repayment.
2. We process and store some of your Information for fraud prevention to ensure greater security to PayJoy, to you and to the financial system in general.
3. We also need your Information to contact you by any available means, including electronic means, mail or telephone (SMS and others), on matters related to the Services during your onboarding to our Services and later on throughout the services provision. This includes notifying you of changes in the Platform and/or in the Services. We may also contact you to offer or provide information on products or services that may be of your interest.
4. We also process your Information to manage your payment obligations for payment collection purposes.
5. We may process your Information for data analytics, research and statistics, for assessing and studying the profile of our Service’s users, and for developing better products, offers and services.
6. And in connection with other business of the Company from time to time.

Automated Decisions

Automated decision-making occurs when an electronic system processes personal data in order to make a decision without human intervention. Part of our procedures, especially the assessment of your ability to pay obligations, relies on automated decision mechanisms and, so, we guarantee your right to request the reviewing of any decision made exclusively based on automated processing of your data, according to the law.

Sources of Information

The Company collects Information directly from you, your use of the Services, as well as from any third parties whom you may have authorised to share such Information with the Company.

Direct

Information you directly provide to us.

Indirect

Where permitted by law, the Company may collect Information about you from third parties such as credit reporting agencies.

Mobile device

The Company collects Information from your mobile device via the PayJoy mobile application installed on your mobile phone. You may check what information is being collected by PayJoy’s app in the privacy section of your mobile device.

Website

When you visit our websites, we may collect information from you automatically through cookies or similar technology.

Sharing

The Company may share Information about you with:

• Governmental agencies, courts or regulators, as required under applicable law;
• Any agent, contractor, service provider or other third party in connection with the Company’s business and in connection with the provision of the Services; and
• Any other person under duty of confidentiality to the Company.

If the Company is involved in merger, acquisition, financial due diligence, corporate reorganization, bankruptcy proceedings, sale of assets or transition of outsourced services to another provider, your Information may be sold or transferred as part of such a transaction as permitted by applicable law. The Company makes no representations or warranties concerning how any such receiving entities may use or disclose your Information.

International Transfers

We may transfer the personal information we collect about you to recipients in countries other than the country in which the information was originally collected. Those countries may not have the same data protection laws as the country in which you initially provided the information. When we transfer your information to recipients in other countries: (i) we will perform those transfers in accordance with the requirements of applicable law; and (ii) we will protect the transferred personal information in accordance with this Privacy Policy.

Your Rights as a Data Subject

The company will like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:

Right to Confirm Processing

You have the right to confirm whether the Company is processing your data.

Right to Access

You have the right to request access to or solicit a copy of any of your personal information that the Company may hold.

Right to Rectification

You have the right to request that the Company correct any information you believe is inaccurate. You also have the right to request the Company to complete the information you believe is incomplete.

Right to Erasure

You have the right to request that the Company erase your personal data, under certain conditions.

The right to erasure is subject to certain exceptions under the law such as, but not limited to:

• Information required by the Company to fulfill statutory and regulatory obligations
• Information required to identify fraud, security incidents, exercise certain rights, etc.

Right to Restrict Processing

You have the right to request that the Company restrict the processing of your personal data, under certain conditions.

Right to Object to Processing

You have the right to object to the Company’s processing of your personal data, under certain conditions.

Right to Data Portability

You have the right to request that the Company transfer the data that we have collected to another organization, or directly to you, under certain conditions.

Right to Withdraw Consent

Where the Company has relied on your consent to process particular information and you have provided your consent to process such information, you have the right to withdraw such consent at any time.

Right to Lodge a Complaint

You have a right to bring a claim to the competent data protection authority.

How to Exercise Your Rights

Any request to exercise your rights can be directed to the data protection officer at PayJoy. The identity and contact details of the data protection officer can be found at the end of this Policy.

We will need to verify your identity before processing your request. The request must:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information, or a legal representative of that person
• Describe your request with sufficient detail that allows us to properly understand, evaluate and respond to it

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you.

We do not charge a fee to process your request. We will respond to your request within reasonable time, as defined by the relevant law.

Children’s Privacy

Our services are not directed to children under the age of sixteen and we do not knowingly collect personal information from children under the age of sixteen.

Security Measures

The Company has implemented reasonable security practices and procedures that are in line with internationally accepted standards for the security and protection of Information. These practices and procedures include managerial, technical, operational and physical security control measures commensurate with the nature of Information collected and processed by the Company.

Updates

.The Company reserves the right to add, revise, amend, modify or delete any part of this Policy (in part or in full) at its discretion. The updated version of this Policy in force will be posted on the Company’s website from time to time. In the event of any change or in case of any requirement arising under applicable law, this Policy shall be deemed to be amended or modified to the extent necessary to comply with such amendment to the applicable law or to meet any requirement under such applicable laws. Whenever we make material changes in this Policy, such changes will be valid, effective and binding after being: (1) disclosed in our Platform; or (2) communicated to you by e-mail; or (3) communicated to you in any other way. If you decide not to continue using the Services after such change, you must apply for the cancellation of your account and/or termination of your legal relationship.

How to Contact Us

If you have queries concerning your personal data – including requesting access to or correcting the details of your personal data – you may contact:

Email us at: privacy@payjoy.com

To report security vulnerabilities:
Please email us at: security@payjoy.com

Call us: 888-632-1922

Or write to us at:

PayJoy, Inc

655 4th Street, San Francisco, CA 94107

‍

• PayJoy Mexico Privacy Policy
• PayJoy Ecuador Privacy Policy
• PayJoy South Africa Privacy Policy
• PayJoy Brazil Privacy Policy

Introduction

The privacy of individuals, including our customers and clients, is of utmost importance to PayJoy, Inc (“Company”). We are committed to adhering to the Privacy regulations governing the citizens to whom we provide products and services.

In compliance with fair and transparent principle and the data subject’s right to be informed, this PayJoy Privacy Policy (“Policy”) provides you, the data subject, with information on the processing for your personal information (“Information”) in a clear, suitable and conspicuous manner that is easily accessible.

This Policy aims to set out in clear terms the types of Information collected, the purpose of collection, the source of the Information, the entities with whom such Information may be shared, the data subject’s rights and also the reasonable security practices and procedures adopted by the Company in handling such Information.

Please read this Policy carefully as your proceeding with the use of this website or the use or purchase of any goods or services provided by us (“Services”), or your providing any Information to the Company on or through the use of our website or through any Services, are based upon the assumption that you are providing such Information to the Company voluntarily. further, the subsequent provisions of this Policy are based upon such an assumption

Type of Information Collected

In order to provide the Services, the Company may collect and process the following categories of Information:

Information about You

Including but not limited to,

• (i) Identification Data: name, government ID, e-mail, telephone number, your photograph.
• (ii) Credit Reports, Watchlists & Validation Services: requested copies of your credit history which may contain professional and financial information about you. We check for your information in public watchlists such as OFAC lists. We use Validation Services to ensure the validity and quality of Identification Data we receive.
• (iii) Social Media Data: data provided in your social media accounts, including photo, friends list and name.
• (iv) Copies of Documents: collected documentation. including government IDs
• (v) Payment Information: information about how you pay your obligation with PayJoy
• (vi) Customer Service: information you provide to us in connection with the Services, including when you communicate with us, by any means, for Customer service purposes.

Information Concerning Your Mobile Device

Including but not limited to information regarding the device, operating system, device identifier, SIM information, applications list, internet connection state, application foreground state, etc.

If the device is purchased, rented or leased via PayJoy then we collect information relating to that transaction such as store where transaction occurred, amount of transaction, etc.

Information Concerning Your Communication

If you provide specific authorization, we may collect and process information from your mobile device related but not limited to call logs and SMS messages. Before doing so we will contact you and request your specific consent.

Cookies

A cookie is a small text file that a web server places on your computer or device when your browser accesses a website. Cookies store data specific to a client or website and are designed to create a record of or “remember” online activity. The Company uses cookies to ensure the site functions properly and to deliver an individualized online services experience. You generally have the ability to accept or decline cookies. Most web browsers give you a choice to modify your browser settings to decline some or all cookies.

Please note under the law some of the information above is considered sensitive data. The Company ensures compliance with the legal requirements called out in the law for processing of sensitive data.

Retention of Information

The Company will retain and use the Information for the period necessary to (i) fulfill the purposes described in this Policy; (ii) comply with legal or regulatory obligations applicable to us; or (iii) fulfill evidentiary purposes in legal, administrative or arbitration proceedings. The criteria considered to determine the retention period include the duration of your relationship with the Company, legal retention periods applicable, and legal prescriptions with respect to possible claims, lawsuits, or administrative and arbitration proceedings in connection with the Services we provide.

Purpose of Collection

The Company will, or may, collect, use, receive, possess, process, store, deal, disclose, transfer or handle Information for the following purposes:

1. When you contract PayJoy Services, we need to process your Information to authenticate your identity and assess risk of repayment.
2. We process and store some of your Information for fraud prevention to ensure greater security to PayJoy, to you and to the financial system in general.
3. We also need your Information to contact you by any available means, including electronic means, mail or telephone (SMS and others), on matters related to the Services during your onboarding to our Services and later on throughout the services provision. This includes notifying you of changes in the Platform and/or in the Services. We may also contact you to offer or provide information on products or services that may be of your interest.
4. We also process your Information to manage your payment obligations for payment collection purposes.
5. We may process your Information for data analytics, research and statistics, for assessing and studying the profile of our Service’s users, and for developing better products, offers and services.
6. And in connection with other business of the Company from time to time.

Automated Decisions

Automated decision-making occurs when an electronic system processes personal data in order to make a decision without human intervention. Part of our procedures, especially the assessment of your ability to pay obligations, relies on automated decision mechanisms and, so, we guarantee your right to request the reviewing of any decision made exclusively based on automated processing of your data, according to the law.

Sources of Information

The Company collects Information directly from you, your use of the Services, as well as from any third parties whom you may have authorised to share such Information with the Company.

Direct

Information you directly provide to us.

Indirect

Where permitted by law, the Company may collect Information about you from third parties such as credit reporting agencies.

Mobile device

The Company collects Information from your mobile device via the PayJoy mobile application installed on your mobile phone. You may check what information is being collected by PayJoy’s app in the privacy section of your mobile device.

Website

When you visit our websites, we may collect information from you automatically through cookies or similar technology.

Sharing

The Company may share Information about you with:

• Governmental agencies, courts or regulators, as required under applicable law;
• Any agent, contractor, service provider or other third party in connection with the Company’s business and in connection with the provision of the Services; and
• Any other person under duty of confidentiality to the Company.

If the Company is involved in merger, acquisition, financial due diligence, corporate reorganization, bankruptcy proceedings, sale of assets or transition of outsourced services to another provider, your Information may be sold or transferred as part of such a transaction as permitted by applicable law. The Company makes no representations or warranties concerning how any such receiving entities may use or disclose your Information.

International Transfers

We may transfer the personal information we collect about you to recipients in countries other than the country in which the information was originally collected. Those countries may not have the same data protection laws as the country in which you initially provided the information. When we transfer your information to recipients in other countries: (i) we will perform those transfers in accordance with the requirements of applicable law; and (ii) we will protect the transferred personal information in accordance with this Privacy Policy.

Your Rights as a Data Subject

The company will like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:

Right to Confirm Processing

You have the right to confirm whether the Company is processing your data.

Right to Access

You have the right to request access to or solicit a copy of any of your personal information that the Company may hold.

Right to Rectification

You have the right to request that the Company correct any information you believe is inaccurate. You also have the right to request the Company to complete the information you believe is incomplete.

Right to Erasure

You have the right to request that the Company erase your personal data, under certain conditions.

The right to erasure is subject to certain exceptions under the law such as, but not limited to:

• Information required by the Company to fulfill statutory and regulatory obligations
• Information required to identify fraud, security incidents, exercise certain rights, etc.

Right to Restrict Processing

You have the right to request that the Company restrict the processing of your personal data, under certain conditions.

Right to Object to Processing

You have the right to object to the Company’s processing of your personal data, under certain conditions.

Right to Data Portability

You have the right to request that the Company transfer the data that we have collected to another organization, or directly to you, under certain conditions.

Right to Withdraw Consent

Where the Company has relied on your consent to process particular information and you have provided your consent to process such information, you have the right to withdraw such consent at any time.

Right to Lodge a Complaint

You have a right to bring a claim to the competent data protection authority.

How to Exercise Your Rights

Any request to exercise your rights can be directed to the data protection officer at PayJoy. The identity and contact details of the data protection officer can be found at the end of this Policy.

We will need to verify your identity before processing your request. The request must:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information, or a legal representative of that person
• Describe your request with sufficient detail that allows us to properly understand, evaluate and respond to it

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you.

We do not charge a fee to process your request. We will respond to your request within reasonable time, as defined by the relevant law.

Children’s Privacy

Our services are not directed to children under the age of sixteen and we do not knowingly collect personal information from children under the age of sixteen.

Security Measures

The Company has implemented reasonable security practices and procedures that are in line with internationally accepted standards for the security and protection of Information. These practices and procedures include managerial, technical, operational and physical security control measures commensurate with the nature of Information collected and processed by the Company.

Updates

.The Company reserves the right to add, revise, amend, modify or delete any part of this Policy (in part or in full) at its discretion. The updated version of this Policy in force will be posted on the Company’s website from time to time. In the event of any change or in case of any requirement arising under applicable law, this Policy shall be deemed to be amended or modified to the extent necessary to comply with such amendment to the applicable law or to meet any requirement under such applicable laws. Whenever we make material changes in this Policy, such changes will be valid, effective and binding after being: (1) disclosed in our Platform; or (2) communicated to you by e-mail; or (3) communicated to you in any other way. If you decide not to continue using the Services after such change, you must apply for the cancellation of your account and/or termination of your legal relationship.

How to Contact Us

If you have queries concerning your personal data – including requesting access to or correcting the details of your personal data – you may contact:

Email us at: privacy@payjoy.com

To report security vulnerabilities:
Please email us at: security@payjoy.com

Call us: 888-632-1922

Or write to us at:

PayJoy, Inc

655 4th Street, San Francisco, CA 94107

‍

• PayJoy Mexico Privacy Policy
• PayJoy Ecuador Privacy Policy
• PayJoy South Africa Privacy Policy
• PayJoy Brazil Privacy Policy

Introduction

The privacy of individuals, including our customers and clients, is of utmost importance to PayJoy, Inc (“Company”). We are committed to adhering to the Privacy regulations governing the citizens to whom we provide products and services.

In compliance with fair and transparent principle and the data subject’s right to be informed, this PayJoy Privacy Policy (“Policy”) provides you, the data subject, with information on the processing for your personal information (“Information”) in a clear, suitable and conspicuous manner that is easily accessible.

This Policy aims to set out in clear terms the types of Information collected, the purpose of collection, the source of the Information, the entities with whom such Information may be shared, the data subject’s rights and also the reasonable security practices and procedures adopted by the Company in handling such Information.

Please read this Policy carefully as your proceeding with the use of this website or the use or purchase of any goods or services provided by us (“Services”), or your providing any Information to the Company on or through the use of our website or through any Services, are based upon the assumption that you are providing such Information to the Company voluntarily. further, the subsequent provisions of this Policy are based upon such an assumption

Type of Information Collected

In order to provide the Services, the Company may collect and process the following categories of Information:

Information about You

Including but not limited to,

• (i) Identification Data: name, government ID, e-mail, telephone number, your photograph.
• (ii) Credit Reports, Watchlists & Validation Services: requested copies of your credit history which may contain professional and financial information about you. We check for your information in public watchlists such as OFAC lists. We use Validation Services to ensure the validity and quality of Identification Data we receive.
• (iii) Social Media Data: data provided in your social media accounts, including photo, friends list and name.
• (iv) Copies of Documents: collected documentation. including government IDs
• (v) Payment Information: information about how you pay your obligation with PayJoy
• (vi) Customer Service: information you provide to us in connection with the Services, including when you communicate with us, by any means, for Customer service purposes.

Information Concerning Your Mobile Device

Including but not limited to information regarding the device, operating system, device identifier, SIM information, applications list, internet connection state, application foreground state, etc.

If the device is purchased, rented or leased via PayJoy then we collect information relating to that transaction such as store where transaction occurred, amount of transaction, etc.

Information Concerning Your Communication

If you provide specific authorization, we may collect and process information from your mobile device related but not limited to call logs and SMS messages. Before doing so we will contact you and request your specific consent.

Cookies

A cookie is a small text file that a web server places on your computer or device when your browser accesses a website. Cookies store data specific to a client or website and are designed to create a record of or “remember” online activity. The Company uses cookies to ensure the site functions properly and to deliver an individualized online services experience. You generally have the ability to accept or decline cookies. Most web browsers give you a choice to modify your browser settings to decline some or all cookies.

Please note under the law some of the information above is considered sensitive data. The Company ensures compliance with the legal requirements called out in the law for processing of sensitive data.

Retention of Information

The Company will retain and use the Information for the period necessary to (i) fulfill the purposes described in this Policy; (ii) comply with legal or regulatory obligations applicable to us; or (iii) fulfill evidentiary purposes in legal, administrative or arbitration proceedings. The criteria considered to determine the retention period include the duration of your relationship with the Company, legal retention periods applicable, and legal prescriptions with respect to possible claims, lawsuits, or administrative and arbitration proceedings in connection with the Services we provide.

Purpose of Collection

The Company will, or may, collect, use, receive, possess, process, store, deal, disclose, transfer or handle Information for the following purposes:

1. When you contract PayJoy Services, we need to process your Information to authenticate your identity and assess risk of repayment.
2. We process and store some of your Information for fraud prevention to ensure greater security to PayJoy, to you and to the financial system in general.
3. We also need your Information to contact you by any available means, including electronic means, mail or telephone (SMS and others), on matters related to the Services during your onboarding to our Services and later on throughout the services provision. This includes notifying you of changes in the Platform and/or in the Services. We may also contact you to offer or provide information on products or services that may be of your interest.
4. We also process your Information to manage your payment obligations for payment collection purposes.
5. We may process your Information for data analytics, research and statistics, for assessing and studying the profile of our Service’s users, and for developing better products, offers and services.
6. And in connection with other business of the Company from time to time.

Automated Decisions

Automated decision-making occurs when an electronic system processes personal data in order to make a decision without human intervention. Part of our procedures, especially the assessment of your ability to pay obligations, relies on automated decision mechanisms and, so, we guarantee your right to request the reviewing of any decision made exclusively based on automated processing of your data, according to the law.

Sources of Information

The Company collects Information directly from you, your use of the Services, as well as from any third parties whom you may have authorised to share such Information with the Company.

Direct

Information you directly provide to us.

Indirect

Where permitted by law, the Company may collect Information about you from third parties such as credit reporting agencies.

Mobile device

The Company collects Information from your mobile device via the PayJoy mobile application installed on your mobile phone. You may check what information is being collected by PayJoy’s app in the privacy section of your mobile device.

Website

When you visit our websites, we may collect information from you automatically through cookies or similar technology.

Sharing

The Company may share Information about you with:

• Governmental agencies, courts or regulators, as required under applicable law;
• Any agent, contractor, service provider or other third party in connection with the Company’s business and in connection with the provision of the Services; and
• Any other person under duty of confidentiality to the Company.

If the Company is involved in merger, acquisition, financial due diligence, corporate reorganization, bankruptcy proceedings, sale of assets or transition of outsourced services to another provider, your Information may be sold or transferred as part of such a transaction as permitted by applicable law. The Company makes no representations or warranties concerning how any such receiving entities may use or disclose your Information.

International Transfers

We may transfer the personal information we collect about you to recipients in countries other than the country in which the information was originally collected. Those countries may not have the same data protection laws as the country in which you initially provided the information. When we transfer your information to recipients in other countries: (i) we will perform those transfers in accordance with the requirements of applicable law; and (ii) we will protect the transferred personal information in accordance with this Privacy Policy.

Your Rights as a Data Subject

The company will like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:

Right to Confirm Processing

You have the right to confirm whether the Company is processing your data.

Right to Access

You have the right to request access to or solicit a copy of any of your personal information that the Company may hold.

Right to Rectification

You have the right to request that the Company correct any information you believe is inaccurate. You also have the right to request the Company to complete the information you believe is incomplete.

Right to Erasure

You have the right to request that the Company erase your personal data, under certain conditions.

The right to erasure is subject to certain exceptions under the law such as, but not limited to:

• Information required by the Company to fulfill statutory and regulatory obligations
• Information required to identify fraud, security incidents, exercise certain rights, etc.

Right to Restrict Processing

You have the right to request that the Company restrict the processing of your personal data, under certain conditions.

Right to Object to Processing

You have the right to object to the Company’s processing of your personal data, under certain conditions.

Right to Data Portability

You have the right to request that the Company transfer the data that we have collected to another organization, or directly to you, under certain conditions.

Right to Withdraw Consent

Where the Company has relied on your consent to process particular information and you have provided your consent to process such information, you have the right to withdraw such consent at any time.

Right to Lodge a Complaint

You have a right to bring a claim to the competent data protection authority.

How to Exercise Your Rights

Any request to exercise your rights can be directed to the data protection officer at PayJoy. The identity and contact details of the data protection officer can be found at the end of this Policy.

We will need to verify your identity before processing your request. The request must:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information, or a legal representative of that person
• Describe your request with sufficient detail that allows us to properly understand, evaluate and respond to it

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you.

We do not charge a fee to process your request. We will respond to your request within reasonable time, as defined by the relevant law.

Children’s Privacy

Our services are not directed to children under the age of sixteen and we do not knowingly collect personal information from children under the age of sixteen.

Security Measures

The Company has implemented reasonable security practices and procedures that are in line with internationally accepted standards for the security and protection of Information. These practices and procedures include managerial, technical, operational and physical security control measures commensurate with the nature of Information collected and processed by the Company.

Updates

.The Company reserves the right to add, revise, amend, modify or delete any part of this Policy (in part or in full) at its discretion. The updated version of this Policy in force will be posted on the Company’s website from time to time. In the event of any change or in case of any requirement arising under applicable law, this Policy shall be deemed to be amended or modified to the extent necessary to comply with such amendment to the applicable law or to meet any requirement under such applicable laws. Whenever we make material changes in this Policy, such changes will be valid, effective and binding after being: (1) disclosed in our Platform; or (2) communicated to you by e-mail; or (3) communicated to you in any other way. If you decide not to continue using the Services after such change, you must apply for the cancellation of your account and/or termination of your legal relationship.

How to Contact Us

If you have queries concerning your personal data – including requesting access to or correcting the details of your personal data – you may contact:

Email us at: privacy@payjoy.com

To report security vulnerabilities:
Please email us at: security@payjoy.com

Call us: 888-632-1922

Or write to us at:

PayJoy, Inc

655 4th Street, San Francisco, CA 94107

‍

• PayJoy Mexico Privacy Policy
• PayJoy Ecuador Privacy Policy
• PayJoy South Africa Privacy Policy
• PayJoy Brazil Privacy Policy

Introduction

The privacy of individuals, including our customers and clients, is of utmost importance to PayJoy, Inc (“Company”). We are committed to adhering to the Privacy regulations governing the citizens to whom we provide products and services.

In compliance with fair and transparent principle and the data subject’s right to be informed, this PayJoy Privacy Policy (“Policy”) provides you, the data subject, with information on the processing for your personal information (“Information”) in a clear, suitable and conspicuous manner that is easily accessible.

This Policy aims to set out in clear terms the types of Information collected, the purpose of collection, the source of the Information, the entities with whom such Information may be shared, the data subject’s rights and also the reasonable security practices and procedures adopted by the Company in handling such Information.

Please read this Policy carefully as your proceeding with the use of this website or the use or purchase of any goods or services provided by us (“Services”), or your providing any Information to the Company on or through the use of our website or through any Services, are based upon the assumption that you are providing such Information to the Company voluntarily. further, the subsequent provisions of this Policy are based upon such an assumption

Type of Information Collected

In order to provide the Services, the Company may collect and process the following categories of Information:

Information about You

Including but not limited to,

• (i) Identification Data: name, government ID, e-mail, telephone number, your photograph.
• (ii) Credit Reports, Watchlists & Validation Services: requested copies of your credit history which may contain professional and financial information about you. We check for your information in public watchlists such as OFAC lists. We use Validation Services to ensure the validity and quality of Identification Data we receive.
• (iii) Social Media Data: data provided in your social media accounts, including photo, friends list and name.
• (iv) Copies of Documents: collected documentation. including government IDs
• (v) Payment Information: information about how you pay your obligation with PayJoy
• (vi) Customer Service: information you provide to us in connection with the Services, including when you communicate with us, by any means, for Customer service purposes.

Information Concerning Your Mobile Device

Including but not limited to information regarding the device, operating system, device identifier, SIM information, applications list, internet connection state, application foreground state, etc.

If the device is purchased, rented or leased via PayJoy then we collect information relating to that transaction such as store where transaction occurred, amount of transaction, etc.

Information Concerning Your Communication

If you provide specific authorization, we may collect and process information from your mobile device related but not limited to call logs and SMS messages. Before doing so we will contact you and request your specific consent.

Cookies

A cookie is a small text file that a web server places on your computer or device when your browser accesses a website. Cookies store data specific to a client or website and are designed to create a record of or “remember” online activity. The Company uses cookies to ensure the site functions properly and to deliver an individualized online services experience. You generally have the ability to accept or decline cookies. Most web browsers give you a choice to modify your browser settings to decline some or all cookies.

Please note under the law some of the information above is considered sensitive data. The Company ensures compliance with the legal requirements called out in the law for processing of sensitive data.

Retention of Information

The Company will retain and use the Information for the period necessary to (i) fulfill the purposes described in this Policy; (ii) comply with legal or regulatory obligations applicable to us; or (iii) fulfill evidentiary purposes in legal, administrative or arbitration proceedings. The criteria considered to determine the retention period include the duration of your relationship with the Company, legal retention periods applicable, and legal prescriptions with respect to possible claims, lawsuits, or administrative and arbitration proceedings in connection with the Services we provide.

Purpose of Collection

The Company will, or may, collect, use, receive, possess, process, store, deal, disclose, transfer or handle Information for the following purposes:

1. When you contract PayJoy Services, we need to process your Information to authenticate your identity and assess risk of repayment.
2. We process and store some of your Information for fraud prevention to ensure greater security to PayJoy, to you and to the financial system in general.
3. We also need your Information to contact you by any available means, including electronic means, mail or telephone (SMS and others), on matters related to the Services during your onboarding to our Services and later on throughout the services provision. This includes notifying you of changes in the Platform and/or in the Services. We may also contact you to offer or provide information on products or services that may be of your interest.
4. We also process your Information to manage your payment obligations for payment collection purposes.
5. We may process your Information for data analytics, research and statistics, for assessing and studying the profile of our Service’s users, and for developing better products, offers and services.
6. And in connection with other business of the Company from time to time.

Automated Decisions

Automated decision-making occurs when an electronic system processes personal data in order to make a decision without human intervention. Part of our procedures, especially the assessment of your ability to pay obligations, relies on automated decision mechanisms and, so, we guarantee your right to request the reviewing of any decision made exclusively based on automated processing of your data, according to the law.

Sources of Information

The Company collects Information directly from you, your use of the Services, as well as from any third parties whom you may have authorised to share such Information with the Company.

Direct

Information you directly provide to us.

Indirect

Where permitted by law, the Company may collect Information about you from third parties such as credit reporting agencies.

Mobile device

The Company collects Information from your mobile device via the PayJoy mobile application installed on your mobile phone. You may check what information is being collected by PayJoy’s app in the privacy section of your mobile device.

Website

When you visit our websites, we may collect information from you automatically through cookies or similar technology.

Sharing

The Company may share Information about you with:

• Governmental agencies, courts or regulators, as required under applicable law;
• Any agent, contractor, service provider or other third party in connection with the Company’s business and in connection with the provision of the Services; and
• Any other person under duty of confidentiality to the Company.

If the Company is involved in merger, acquisition, financial due diligence, corporate reorganization, bankruptcy proceedings, sale of assets or transition of outsourced services to another provider, your Information may be sold or transferred as part of such a transaction as permitted by applicable law. The Company makes no representations or warranties concerning how any such receiving entities may use or disclose your Information.

International Transfers

We may transfer the personal information we collect about you to recipients in countries other than the country in which the information was originally collected. Those countries may not have the same data protection laws as the country in which you initially provided the information. When we transfer your information to recipients in other countries: (i) we will perform those transfers in accordance with the requirements of applicable law; and (ii) we will protect the transferred personal information in accordance with this Privacy Policy.

Your Rights as a Data Subject

The company will like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:

Right to Confirm Processing

You have the right to confirm whether the Company is processing your data.

Right to Access

You have the right to request access to or solicit a copy of any of your personal information that the Company may hold.

Right to Rectification

You have the right to request that the Company correct any information you believe is inaccurate. You also have the right to request the Company to complete the information you believe is incomplete.

Right to Erasure

You have the right to request that the Company erase your personal data, under certain conditions.

The right to erasure is subject to certain exceptions under the law such as, but not limited to:

• Information required by the Company to fulfill statutory and regulatory obligations
• Information required to identify fraud, security incidents, exercise certain rights, etc.

Right to Restrict Processing

You have the right to request that the Company restrict the processing of your personal data, under certain conditions.

Right to Object to Processing

You have the right to object to the Company’s processing of your personal data, under certain conditions.

Right to Data Portability

You have the right to request that the Company transfer the data that we have collected to another organization, or directly to you, under certain conditions.

Right to Withdraw Consent

Where the Company has relied on your consent to process particular information and you have provided your consent to process such information, you have the right to withdraw such consent at any time.

Right to Lodge a Complaint

You have a right to bring a claim to the competent data protection authority.

How to Exercise Your Rights

Any request to exercise your rights can be directed to the data protection officer at PayJoy. The identity and contact details of the data protection officer can be found at the end of this Policy.

We will need to verify your identity before processing your request. The request must:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information, or a legal representative of that person
• Describe your request with sufficient detail that allows us to properly understand, evaluate and respond to it

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you.

We do not charge a fee to process your request. We will respond to your request within reasonable time, as defined by the relevant law.

Children’s Privacy

Our services are not directed to children under the age of sixteen and we do not knowingly collect personal information from children under the age of sixteen.

Security Measures

The Company has implemented reasonable security practices and procedures that are in line with internationally accepted standards for the security and protection of Information. These practices and procedures include managerial, technical, operational and physical security control measures commensurate with the nature of Information collected and processed by the Company.

Updates

.The Company reserves the right to add, revise, amend, modify or delete any part of this Policy (in part or in full) at its discretion. The updated version of this Policy in force will be posted on the Company’s website from time to time. In the event of any change or in case of any requirement arising under applicable law, this Policy shall be deemed to be amended or modified to the extent necessary to comply with such amendment to the applicable law or to meet any requirement under such applicable laws. Whenever we make material changes in this Policy, such changes will be valid, effective and binding after being: (1) disclosed in our Platform; or (2) communicated to you by e-mail; or (3) communicated to you in any other way. If you decide not to continue using the Services after such change, you must apply for the cancellation of your account and/or termination of your legal relationship.

How to Contact Us

If you have queries concerning your personal data – including requesting access to or correcting the details of your personal data – you may contact:

Email us at: privacy@payjoy.com

To report security vulnerabilities:
Please email us at: security@payjoy.com

Call us: 888-632-1922

Or write to us at:

PayJoy, Inc

655 4th Street, San Francisco, CA 94107

‍