PRIVACY AND POLICY

Welcome to PayZy!

Payzy is owned and operated by PAYZY PAYMENTS (PVT) LTD

Payzy values your privacy. values your privacy and the protection of your personal data. This privacy policy describes what information we
from you, how we collect it, how we use it, how we obtain your consent, how long we keep it in our databases and, if necessary, with whom we share it.

By using the platform, you are accepting the practices described in this Privacy Policy. Your use of the platform is also subject to our Terms and Conditions.

This privacy policy may change from time to time. Your continued use of the after we make changes will be deemed acceptance of the
changes to this privacy policy, so please check this privacy policy periodically for updates and changes. This Privacy Policy has been developed
and is maintained in accordance with all applicable federal and international laws and regulations and, specifically, with the GDPR (General Data Protection Regulation - European regulation).

1.GENERAL INFORMATION

The personal data of users that are collected and processed through :

  • https://payzy.lk
  • Payzy (Buy Now Pay Later Platform)
  • Will be under responsibility and in charge of :

2.TYPES OF INFORMATION GATHERED

The information we learn from customers helps personalize and continually improve your experience at Payzy. Here are the types of information we gather:

Information You Give Us. You provide information when you register as a user, make purchases at third-party merchants and use the platform to
pay in installments and/or communicate with us through our contact information or our contact forms. As a result of those actions, you might
supply us with the following information:

  • ✅ First Name
  • ✅ Last Name
  • ✅ Date Of Birth
  • ✅ Place Of Birth
  • ✅ Phone Number
  • ✅ Address
  • ✅ Zip/Postal Code

Payzy will not collect any personally identifiable information about you, unless you provide it.

Information Collected Automatically: By accessing and using the website you automatically provide us with the following information :

The device and usage information you use to access the website

  • ✅ Your IP address
  • ✅ Browser and device characteristics
  • ✅ Operating system
  • ✅ Referring URLs
  • ✅ Your location

What parts of the website you use and how often
If you access the website through a mobile phone, we will collect the following information :

  • ✅ Mobile device ID
  • ✅ Model and manufacturer
  • ✅ Operating system
  • ✅ IP address

GOOGLE Analytics. We use Google Analytics provided by Google, Inc., USA (“Google”). These tool and technologies collect and analyze certain
types of information, including IP addresses, device and software identifiers, referring and exit URLs, feature use metrics and statistics, media
access control address (MAC Address), mobile unique device identifiers, and other similar information via the use of cookies. The information
generated by Google Analytics (including your IP address) may be transmitted to and stored by Google on servers in the United States. We use the
GOOGLE Analytics collection of data to enhance the platform and improve our service.

Please consult Google's privacy policy here :

Facebook Pixel: Our website uses the Facebook Pixel. Through the Facebook Pixel we can collect user information for different purposes. We use
the Facebook Pixel for the following purposes :

  • ✅ Collect statistics about our platform (for example, the number of users who visited a page).
  • ✅ Collect information about how you interact with our platform (for example, whether you opened or followed links contained in them).
  • ✅ Personalize online services and marketing communications.
  • ✅ Tailor advertisements to users and optimize advertising campaigns.
  • ✅ The information collected through the Facebook Pixel will be collected and stored by Facebook and will be treated in accordance with its privacy

    policy. The information we collect through the Facebook Pixel does not personally identify the user and will never be used for purposes other than
    those contained in this privacy policy and Facebook's privacy policy.

Please consult Facebook's privacy policy here :

https://www.facebook.com/privacy/explanation
Social Media: On our platform you will find links and functions linked to different social media, where you can share your information. It is advisable
to consult the privacy policy and data protection of each social network used on our platform.

Why We Collect Personal Data for Our BNPL Platform

At Payzy, your privacy and security are paramount. We collect certain types of information to personalize and enhance your experience with our platform.
Your trust is our priority, and we want to be transparent about why we collect personal data.

3.HOW LONG WE KEEP YOUR DATA

The personal data provided by users through the platform and services will be kept for the time necessary to provide the functionalities available
on the platform and to collect the installments established by the users according to the chosen plan. Payzy may be allowed to retain personal
data for a longer period whenever the user has given consent to such processing, as long as such consent is not withdrawn. Furthermore, Payzy
may be obliged to retain personal data for a longer period whenever required to do so for the performance of a legal obligation or upon order of an
authority. Once the retention period expires, personal data shall be deleted. Therefore, the right to access, the right to erasure, the right to
rectification and the right to data portability cannot be enforced after expiration of the retention period.

4.HOW WE USE YOUR INFORMATION

In general, we use the information we collect primarily to provide, maintain, protect and improve our current platform and services. We use
personal information collected through our site as described below and described elsewhere in this Policy to :

  • ✅ Identify you as a user in our system.
  • ✅ Provide the platform.
  • ✅ User registration.
  • ✅ Process payments.
  • ✅ Automatically charge the installments according to the plan chosen by the user.
  • ✅ Improve our platform, our website and the way we operate.
  • ✅ Understand and enhance your experience using our platform and services.
  • ✅ Respond to your comments or questions through our support team
  • ✅ Send you related information, including confirmations, invoices, technical notices, updates, security alerts and support and administrative messages.
  • ✅ Communicate with you about upcoming events, offers and news about services offered by Payzy and our selected partners. Marketing purposes of Payzy.
  • ✅ Link or combine your information with other information we get from third parties to help understand your needs and provide you with better service.
  • ✅ Protect, investigate and deter against fraudulent, unauthorized or illegal activity.

5.HOW WE USE YOU GET MY CONSENT ?

By registering and using the platform, purchasing products and services from third party merchants using our platform, selecting an installment
payment plan, contacting us via the contact forms or our contact information, accepting the use of cookies by our website and providing us with
personal information to communicate with you, you consent to our collection, storage and use of your information on the terms contained in this
privacy policy. You consent to the use of cookies on our website when you give your acceptance through the pop-up window shown on the home
page when you enter the website. You may withdraw your consent by sending us your request via the contact information or the contact page.

6.HOW WE SHARE INFORMATION

The personal information of our users is an important and fundamental part of our business. Under no circumstances will we sell or share
information with third parties that has not been previously authorized by the user, client or owner of the personal data. We share user and
customer information only and exclusively as described below.


Third-Party Service Providers. We use the services of third parties to perform certain functions on our behalf and through our platform. Examples
include, building the platform and hosting the website, delivering products, sending emails, analyzing data (Google Analytics), creating ads
(Facebook, Google), providing marketing assistance, and delivering search results and links.


These third-party services and tools may have access to personal information needed to perform their functions, but may not use that information
for other purposes. Information shared with these third-party services will be treated and stored in accordance with their respective privacy
policies and our privacy policy. Please refer to the privacy policy of these third-party services.


Business Transfers. In the event that Payzy creates, merges with, or is acquired by another entity or company, your information will likely be
transferred. Payzy will send you an email or post a prominent notice on our platform before your information becomes subject to another privacy
policy and the transfer and handling of your private information will comply with all applicable requirements.


Protection of Payzy and others. We release personal information when we believe release is appropriate to comply with the law, enforce or apply
our Terms and conditions and other agreements, or protect the rights, property, or safety of Payzy, our users or others. This includes exchanging
information with other companies and organizations for fraud protection and credit risk reduction.


With Your Consent. Other than as set out above, you will receive notice when personally identifiable information about you might go to third
parties, and you will have an opportunity to choose not to share the information.


Anonymous Information. Payzy uses the anonymous browsing information collected automatically by our servers primarily to help us administer
and improve the Website. We may also use aggregated anonymous information to provide information about the Website to potential business
partners and other unaffiliated entities. This information is not personally identifiable.


Email Address. The email address that you supply to us for purposes of receiving our email communications will never be rented or sold to a third party.

7.PROTECTING FOR INFORMATION

Payzy will make all reasonable efforts to protect the personal information of users it obtains, and the personal information will be protected by
dedicated data security personnel. In order to prevent users' personal information from being illegally accessed, copied, modified, transmitted, lost,
destroyed, processed or used in unexpected and unauthorized situations, Payzy has and will continue to take the following measures to protect
your personal information: 1) The user's personal information is encrypted and stored by adopting encryption technology, and is isolated by
isolation technology. 2) When using personal information, such as personal information display and personal information association calculations,
we will use a variety of data desensitization technologies including content replacement, encryption desensitization, etc. to enhance the security
of personal information in use. 3) Establish a strict data use and access system, adopt strict data access authority control and multiple identity
authentication technologies to protect personal information, and prevent data from being used in violation of regulations.


Other security measures taken to protect personal information 1) Manage and regulate the storage and use of personal information by establishing
a data classification and grading system, data security management specifications, and data security development specifications. 2) Data security
personnel are responsible for security emergency response to promote and protect personal information security. 3. Notification of personal
information security incidents 1) In the event of a security incident caused by personal information, Payzy will report the first incident to the
corresponding competent authority, and immediately carry out troubleshooting and emergency measures.

8.RIGHTS

Users who provide information through our website, as data subjects and data owners, have the right to access, rectify, download or delete their
information, as well as to restrict and object to certain processing of their information. While some of these rights apply generally, others apply
only in certain limited circumstances. We describe these rights below :

  • Access and portability: to access and know what information is stored in our servers, you can send us your request through our contact information.

  • Rectify, Restrict, Limit or/and Delete: You can also rectify, restrict, limit or delete much of your information.

  • Right to be informed: Users of our website will be informed, upon request, about what data we collect, how it is used, how long it is retained and whether it is shared with third parties.
  • Object : When we process your information based on our legitimate interests as explained above, or in the public interest, you may object to this
    processing in certain circumstances. In such cases, we will stop processing your information unless we have compelling legitimate reasons to
    continue processing it or where it is necessary for legal reasons.

  • Revoke consent : Where you have previously given your consent, such as to allow us to process and store your personal information, you have the
    right to revoke your consent to the processing and storage of your information at any time. For example, you may withdraw your consent by
    updating your settings. In certain cases, we may continue to process your information after you have withdrawn your consent if we have a legal
    basis for doing so or if your withdrawal of consent was limited to certain processing activities.

  • Complaint : If you wish to file a complaint about our use of your information (and without prejudice to any other rights you may have), you have
    the right to do so with your local supervisory authority. Users can exercise all these rights by contacting us through the contact information or
    the contact page.

  • Rights related to automated decision-making, including profiling: website users may request that we provide a copy of the automated processing
    activities we conduct if they believe that data is being unlawfully processed.

  • Users may exercise their rights in relation to the personal data they provide to Payzy, at any time, by sending us their request through our contact
    information and we will process and respond to their request as soon as possible.

9.CHILDREN'S ONLINE PRIVACY PROTECTION

We are in compliance with the requirements of the GDPR (General Data Protection Regulation - European regulation), regarding the protection of
the personal data of minors. We do not collect any information from anyone under 18 years of age. Our platform and services are all directed to
people who are at least 18 years old or older. If you become aware that your child has provided us with personal information, please contact us.
If we become aware that a child has provided us with personal information, we will take steps to delete that information, terminate that person's
account, and restrict access to that person.

10.EDITING AND DELETING INFORMATION

If you believe that any information, we are holding on you is incorrect or incomplete, please write to or email us as soon as possible. We will
promptly correct any information found to be incorrect. You can change, modify, rectify and delete your Information at any time, please contact us
through the contact information. To opt-out of Payzy email, follow the instructions included in the email. Your request should be processed within 48 hours.

11.THIRD PARTIES

Except as otherwise expressly included in this Privacy Policy, this document addresses only the use and disclosure of information Payzy collects
from you. If you disclose your information to others, whether other users or suppliers on Payzy, different rules may apply to their use or disclosure
of the information you disclose to them. Payzy does not control the privacy policies of third parties, and you are subject to the privacy policies of
those third parties where applicable. Payzy is not responsible for the privacy or security practices of other websites on the Internet, even those
linked to or from the “Payzy” website. Payzy encourages you to ask questions before you disclose your personal information to others.

12. ACCOUNT DELETION

At Payzy, we understand that users might want to delete their accounts for various reasons. To ensure a smooth account deactivation process,
please follow the specified steps below, depending on whether you are accessing Payzy through the web or our mobile application.

Account Deletion

Using Web Application:
1. Login to Your Account: First, log in to your Payzy account using your credentials.
2. Navigate to Account Section: Click on the account section to access your account settings.
3. Delete Account: Scroll down to the bottom and click on "Delete Account"
4. Complete Requirements: Before deactivating, ensure that there are no pending payments associated with your account. Additionally, remove all the bank cards linked to your account.
5. Confirmation and Logout: Once you have fulfilled these requirements, confirm the deactivation. You will be automatically logged out of your account after the process is complete.

Using Mobile Application:
1. Login to the App: Open the Payzy app on your mobile device and log in using your credentials.
2. Access Settings: Navigate to the account settings by clicking on the settings option in the bottom navigation bar.
3. Account Deletion: In the settings menu, find the option for account deletion.
4. Follow Instructions: Follow the on-screen instructions to delete your account. Make sure there are no pending payments and remove any linked bank cards.
5. Confirmation: Confirm the deletion to proceed.

Important Notes:
- No Reactivation: Once your account is successfully deleted, it cannot be reactivated. If you wish to use Payzy services again, you will need to create a new account.
- Email Reuse: If you choose to create a new account in the future, you can use the same email address without any restrictions.

13.CONTACT US

If you have questions or concerns about these Privacy Policy and the handling and security of your data, please contact us through our contact page or via the contact
information below :

PAYZY PAYMENTS (PVT) LTD - Payzy.

[email protected]