Privacy Policy

This Privacy Policy explains how TomiPay Ltd and its affiliates collect, use, and protect your personal information when you use the TomiPay website, mobile app, and related services.

1. Introduction

TomiPay Ltd (“TomiPay”) is committed to protecting your privacy and ensuring transparency in how your data is processed. By using our services, you agree to this Privacy Policy.

2. Data Controller

TomiPay Ltd
20 Wenlock Road, London N1 7GU, United Kingdom
Email: [email protected]

Data may also be processed jointly by:

  • TomiPay Canada Inc. – Montréal, QC, Canada
  • TomiPay Europe – Dublin, Ireland

3. Data Collected

We collect only the information necessary to provide and improve our services:

  • Identification data: name, email, phone number
  • Payment data: card information (via regulated PSPs), IBAN, transaction history
  • Commercial data: sales, loyalty points, cashback programs
  • Technical data: IP address, device ID, and connection logs

No biometric or sensitive data is collected.

4. Purpose of Processing

Your data is used to:

  • Provide and secure TomiPay’s payment and loyalty services
  • Manage user accounts and business operations
  • Prevent fraud and comply with KYC/AML obligations
  • Inform users of product updates, offers, or security improvements

We never sell your data to third parties.

5. Data Sharing

Your data may be shared only with:

  • Regulated financial partners (PSPs, banks, card issuers)
  • Technical providers (AWS hosting, email/SMS platforms)
  • Authorities or regulators where legally required

All partners comply with GDPR, UK GDPR, and PIPEDA standards.

6. Data Retention

Your data is retained:

  • For as long as your account is active, and
  • Up to 5 years after your last transaction, to meet legal obligations (KYC/AML).

7. Data Security

We apply the highest security standards:

  • Encryption in transit and at rest (TLS 1.3 / AES-256)
  • Hosting on AWS Canada (ca-central-1)
  • Protection by TomiAI, our proprietary AI-based system

8. Your Rights

Under GDPR, UK GDPR, and PIPEDA, you may request:

  • Access, correction, or deletion of your data
  • Data portability
  • Restriction of processing

Contact: [email protected]

9. Cookies

TomiPay uses essential and analytical cookies to improve navigation and secure sessions. No advertising cookies are used without your explicit consent.

10. International Transfers

Data may be transferred between the UK, Canada, and the EU under Standard Contractual Clauses (SCCs) ensuring compliance with data protection laws.

11. Updates

This Privacy Policy may be updated to reflect regulatory or technical changes. The latest version is always available at www.tomipay.co/privacy.

12. Contact

For questions or complaints regarding data protection:

Email: [email protected]
Address: TomiPay Ltd, 20 Wenlock Road, London N1 7GU, United Kingdom