Privacy Policy

1. Introduction

KUNAR LTD ("KunarPay", "we", "us", or "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our payment processing platform and related services (the "Services").

Please read this policy carefully. By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy.

2. Information We Collect

2.1 Information You Provide

• Account registration details (name, email address, business name)
• Contact information (email address, phone number, postal address)
• Business verification documents
• Banking and payout details
• Communications you send to us

2.2 Transaction Data

• Payment amounts, currency, and order references
• Transaction timestamps and status
• Partial card details (last 4 digits, card type) — full card numbers are never stored by KunarPay
• Billing address and delivery information submitted during checkout

2.3 Technical Data

• IP addresses and device identifiers
• Browser type and operating system
• Pages visited and session duration
• Cookies and similar tracking technologies (see Section 7)

3. How We Use Your Information

We use the information we collect to:

• Process payments and manage merchant accounts
• Verify identity and comply with anti-money laundering (AML) obligations
• Detect, prevent, and investigate fraud and abuse
• Provide customer support and respond to enquiries
• Send transactional notifications and service updates
• Comply with legal and regulatory obligations
• Improve and develop our platform

4. Legal Basis for Processing (UK GDPR)

We process personal data under the following lawful bases:

• Contract performance — to provide payment processing services you have agreed to
• Legal obligation — to comply with financial regulations, AML requirements, and HMRC obligations
• Legitimate interests — for fraud prevention, platform security, and improving our services
• Consent — where you have explicitly opted in to marketing communications

5. Sharing Your Information

We do not sell your personal data. We may share information with:

• Payment processors and banking partners — to facilitate transactions (including Stripe, Inc.)
• Identity verification providers — to comply with KYC/AML requirements
• Cloud and infrastructure providers — who process data on our behalf under data processing agreements
• Law enforcement or regulators — where required by applicable law or court order

6. Data Retention

We retain personal data for as long as necessary to provide our Services and comply with legal obligations:

• Transaction records: 7 years (HMRC requirement)
• Account data: Duration of account plus 2 years after closure
• Fraud and security logs: Up to 3 years
• Marketing preferences: Until you withdraw consent

7. Cookies

Our website uses cookies to maintain session state, prevent fraud, and analyse usage. We use:

• Essential cookies — required for login sessions and security
• Analytics cookies — to understand how our platform is used (anonymised)

You can control cookies through your browser settings. Disabling essential cookies may affect platform functionality.

8. Your Rights (UK GDPR)

You have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your data where no legal basis for retention exists
• Restriction — request that we limit processing of your data
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interests

To exercise any of these rights, contact us at admin@kunar-pay.com. We will respond within 30 days.

9. International Transfers

Where we transfer personal data outside the UK, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner's Office (ICO).

10. Security

We implement industry-standard security measures including 256-bit TLS encryption, access controls, and regular security audits. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

11. Third-Party Links

Our platform may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on our platform. Continued use of our Services after changes constitutes acceptance of the updated policy.

13. Contact Us

For any questions, complaints, or requests regarding your personal data, please contact:

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.