Privacy Policy

I. General Notes

Vaiipay Ltd, Trust Company Complex, Ajeltake Road, Ajeltake Island, Majuro, Marshall Islands, MH 96960 (hereinafter “Vaiipay”), as operator of the website and payment-gateway platform vaiipay.com, takes the protection of personal data very seriously. We treat personal data confidentially and in accordance with the applicable data protection regulations, in particular the General Data Protection Regulation (GDPR), as well as this Privacy Policy. Personal data is information relating to an identified or identifiable natural person (e.g. name, address, email address).

This Privacy Policy informs you pursuant to Art. 12 et seq. GDPR about the handling of your personal data when using our website: what data we collect, for what purposes, and on what legal basis.

II. Controller

The controller within the meaning of the GDPR is:

Vaiipay Ltd
Trust Company Complex
Ajeltake Road
Ajeltake Island
Majuro
Marshall Islands, MH 96960
Email: [email protected]

III. Purposes and Legal Bases of Processing

1. Access to our website – server log files. To provide the website technically, we process information automatically transmitted by your browser and stored in server log files: browser type and version, operating system, referrer URL, hostname of the accessing computer, date and time of access, and the IP address of the requesting computer. This is necessary to provide a functional website and to ensure system security (Art. 6(1)(b) and (f) GDPR). Your IP address is stored for a maximum of 30 days for IT-security purposes. This data is not merged with other sources or used for marketing.

2. Contact. If you contact us (e.g. by email or a contact form), your message and contact details are stored and processed to handle and answer your enquiry and any follow-up questions (Art. 6(1)(b) GDPR within a contractual relationship, otherwise Art. 6(1)(f) GDPR). The data is retained until the purpose no longer applies; mandatory retention periods remain unaffected.

3. Cookies and similar technologies. We use cookies to make the website user-friendly, effective and secure and to enable certain functions. Most are session cookies that are deleted at the end of your visit; others are persistent. You can configure your browser to inform you about cookies and to allow, restrict or refuse them; disabling cookies may limit functionality. Where we use non-essential cookies (e.g. for analytics), this is based on your consent (Art. 6(1)(a) GDPR), which you may withdraw at any time; essential cookies are based on our legitimate interest in a functional, secure website (Art. 6(1)(f) GDPR).

4. Registration on the platform. When you register, we collect your first name and surname, email address and, where applicable, the addresses of the digital wallets used for payments. This processing serves the performance of your contract for use of our platform (Art. 6(1)(b) GDPR). Where required, we also process identification and verification (KYC/AML) data to comply with our legal obligations (Art. 6(1)(c) GDPR).

5. Other purposes. We also process personal data to comply with legal obligations (e.g. commercial and tax retention periods, Art. 6(1)(c) GDPR), to assert or defend legal claims and to prevent or investigate criminal offences (Art. 6(1)(f) GDPR), and, where you have given consent, for the purposes covered by that consent (Art. 6(1)(a) GDPR), which you may withdraw at any time with effect for the future.

IV. Recipients of Data

Within Vaiipay, access is granted to those functions that need the data to fulfil our contractual and legal obligations. Service providers acting as processors on our behalf (e.g. technical service providers, email delivery, KYC providers) may receive data strictly on our instructions. We limit any transfer to what is necessary. In individual cases we transmit data to advisers in legal or tax matters who are bound to confidentiality.

V. Transfer to Third Countries

Where necessary to perform your contract for use of our platform, transfer of the data mentioned above may be required (Art. 6(1)(b) GDPR). Otherwise we do not transfer your personal data to countries outside the EU/EEA or to international organisations unless expressly stated in this Privacy Policy; where such transfers occur, we ensure appropriate safeguards.

VI. Duration of Storage

We store personal data for as long as the respective purpose requires, including the initiation and processing of a contract. Data is deleted once our contractual and legal obligations are fulfilled, unless further processing is required to comply with statutory retention obligations or to preserve evidence within limitation periods.

VII. Data Security

We protect personal data with appropriate technical and organisational measures. This website uses SSL/TLS encryption to protect the transmission of confidential content, recognisable by “https://” and the lock symbol in your browser. We note that data transmission over the internet can have security vulnerabilities, so complete protection against third-party access is not possible.

VIII. Your Rights as a Data Subject

Under the statutory conditions you have the right to information (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), withdrawal of consent with effect for the future, and objection (Art. 21 GDPR). You also have the right to lodge a complaint with a competent supervisory authority (Art. 77 GDPR). To exercise these rights, an informal message (e.g. by email to [email protected]) is sufficient.

Information on your right of objection (Art. 21 GDPR): You have the right to object at any time, on grounds relating to your particular situation, to processing based on Art. 6(1)(e) or (f) GDPR. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds overriding your interests, or the processing serves to assert, exercise or defend legal claims. Objections should preferably be addressed to Vaiipay Ltd, address as above, Email: [email protected].

IX. Obligation to Provide Data

In principle you are not obliged to provide us with your personal data. However, if you do not, we may not be able to provide full access to our platform or answer your enquiries. Data that is not strictly necessary is marked as voluntary.

X. Automated Decision-Making / Profiling

We do not use automated decision-making or profiling.

XI. Status and Amendment of this Privacy Policy

This Privacy Policy has the status of 19 July 2026. Due to the further development of our website and offers, or changed legal requirements, it may become necessary to amend this Privacy Policy.