Last updated on 15/12/2021
https://ar-pay.com/ is owned and operated by HKS Global Group DMCC, with legal address: Unit No 1306, The Dome Tower, Plot No: JLT-PH1-N1 Jumeirah Lakes Towers, Dubai, UAE, doing business as ARPAY
‘personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
‘processing’ means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;
‘controller’ means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data;
‘processor’ means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;
‘recipient’ means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not.
‘third party’ means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data;
‘consent’ of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by clear affirmative action, signifies agreement to the processing of personal data relating to him or her;
ARPAY complies with the core principles of personal data processing. The six overall guiding principles are:
- Lawfulness, fairness and transparency
- Purpose limitation
- Data minimisation
- Storage limitation
- Integrity and confidentiality
What personal data do we collect?
ARPAY collects different information depending on how you use the website and interact with us. The personal data we collect is likely to include:
- Identity information, such as your name, company name, organisation type.
- Contact data, such as your address, email address, telephone number and social media handles.
- Proof of identity/Proof of address, such as a copy of the identity card, passport or certificate of registration.
- Technical data, such as your internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access the website.
- Usage data, which includes information about how you use the website and our services, and any communications we may receive from you.
- Marketing and communications data, including your preferences in receiving marketing and other communications from us.
The personal data you provide us with should be accurate and up to date. Failure to provide such information may cause usage limitations of ARPAY services.
How do we use personal data?
We use your personal information to activate your account and provide you with all services on the website. As part of our routine business operations, we process through third parties bank and credit/debit card information and identity checks to validate the data accuracy. All financial data is stored in an encrypted and secure form.
The purpose of these checks is to identify and verify customers, reduce fraud and other financial or operational risks on our website. In case it is not possible to establish the user identity with certainty, the data controller/processor has the right to re-inquire any personal data from you.
We also use your personal data together with other information for administration purposes, marketing, and customer services.
Consent - we will only use your personal data for advertising and marketing, personalisation of content and services, analytical purposes and to track purchases if we have your specific consent to do so. This includes the use of data provided by you and our partners with the ultimate purpose of improving our products and services.
Legitimate interests - the legitimate interests pursued by us are to duly process, deliver and collect the payment for your order, keep relevant records on our relations with customers, analyse website traffic and products/services in use, further develop them and grow our business, without prejudice to adequate preventive measures from fraud, hacks and any data breaches.
Performance of a contract - when you purchase a product or service from us, we will need to process your details in order to supply the item to you.
Legal obligation – we need to process your data to comply with a legal obligation.
Retention of personal data
Disclosing personal data
We may send personal information such as your name, address and country of residence to our suppliers in order to improve the payment process, reconcile business processes and combat fraud and money laundering.
We require all the recipients of your personal data to respect its security and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.
We reserve the right to disclose your personal information to comply with applicable laws and government or regulatory bodies' lawful requests for information. The information may also be released because of a legal requirement on us or pursuant to a court order.
Right of access – you have the right to request a copy of the data that we hold about you.
Right of rectification – you have a right to correct data that we hold about you that is inaccurate or incomplete.
Right to be forgotten – you can ask for the data we hold about you to be erased from our records.
Right to restriction of processing – you can ask us to restrict how we process your data.
Right of portability – you have the right to have the data we hold about you transferred to another organisation.
Right to object – you have the right to object to our processing your data where we rely on a legitimate interest to process it.
Right to withdraw your consent – you have the right to withdraw your consent at any time.
Please note that these rights are not absolute, and certain exemptions apply.
Our website may contain links to and from third-party websites. Please be advised that we are not responsible for their privacy policies. We strongly recommend reading these privacy statements before you submit any personal data to these websites.
Control over personal information
In case of a change in your personal information, you are responsible for timely updating this data on your account – either manually by logging in or requesting assistance from customer support.
We decline responsibility for any losses arising from your failure to maintain the confidentiality of your data.
If you want to close your account, you need to contact our customer service. We are committed to preserving some of your records for a period not less than five years after the account is closed.
A cookie is a small file placed on your device. You can instruct your browser to refuse all cookies or indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some parts of our services. Cookies can be "Persistent" or "Session". Persistent cookies remain on your personal computer or mobile device when you go offline, while session cookies are deleted as soon as the web browser is closed.
We use both Session and Persistent cookies to provide you with services available through the website and enable some of their features. Cookies help to authenticate users and prevent fraudulent use of user accounts. They also remember your choices when you use the website, such as remembering your login details or language preference.
The cookies allow us to track traffic to the website and how users use the website. The information gathered via these cookies may directly or indirectly identify you as an individual visitor. We may also use it to test new pages, features, or new website functionality to see how our users react to them.
Notification of changes
How to contact us
Email: [email protected]
HKS Global Group DMCC
Unit No: 1306
The Dome Tower
Plot No: JLT-PH1-N1
Jumeirah Lakes Towers