1.Who is responsible
Deonhub LTD is responsible for the personal data we use to run DeonPay: our merchants’ account details, portal users and website visitors.
When a business collects a payment from its customer, the business decides why it collects that payment, and DeonPay processes the customer’s details on the business’s behalf to complete it. If you paid a business through DeonPay, that business is your first point of contact, but you can also contact us.
2.What we collect
- Account requests: business name, contact person, phone number, email, type of business, expected volume, how you want to collect, your message, and the IP address and browser the request came from.
- Merchant accounts: business name, address, phone, email, website, bank account details, registration and identity documents you give us, and the names, usernames and emails of the owner and officers.
- Portal use: your password (stored in a form we cannot read back), sign-in sessions with the IP address and browser used, and failed sign-in attempts.
- Payments: amount, the customer’s mobile number, the network, the payment status and the references from Selcom and the network, plus a customer name or email if the business sends one.
- Cash-outs and withdrawals: amount, the recipient’s mobile number or the business’s bank details, and status.
- Emails we exchange with you.
The website does not use advertising or tracking cookies. The portal uses one cookie to keep you signed in, and the website remembers your language choice in your browser.
3.How we use it
- to set up and run your account, and to process payments, cash-outs and withdrawals;
- to show you your payments, balance and statements;
- to send you account emails, such as withdrawal notices and password resets;
- to keep DeonPay secure and to prevent and investigate fraud;
- to meet our legal duties, including anti-money laundering, tax and record-keeping rules;
- to answer your questions and requests.
We use personal data because it is needed to provide the service you asked for, to meet legal obligations, or for our legitimate interest in running a secure payment service. We do not sell personal data, and we do not use it for advertising.
5.How long we keep it
We keep payment, cash-out, withdrawal and account records for as long as the law requires, which for financial records can be up to 10 years after the transaction or after an account closes. Sign-in sessions expire after at most 7 days. Account requests that do not lead to an account are kept for up to 12 months. When we no longer need data, we delete or anonymise it.
6.Security
All connections to DeonPay use HTTPS. Access to personal data is limited to people who need it to run the service. API keys are shown only once, and callbacks to merchants are signed. No system is perfectly secure; if a breach affects your personal data, we will tell you and the Personal Data Protection Commission as the law requires.
7.Your rights
You can ask us for a copy of your personal data, ask us to correct it, ask us to delete it, or object to how we use it. Email payments@deonpay.app. We will reply within 30 days. We may need to confirm who you are first, and we cannot delete records we are required by law to keep.
If you are not happy with our answer, you can complain to the Personal Data Protection Commission of Tanzania.
DeonPay is a service for businesses and is not meant for anyone under 18.
8.Changes and contact
We may update this policy. The date at the top shows the latest version, and we will email merchants about important changes.
Questions or requests about personal data: payments@deonpay.app.
Questions? Email payments@deonpay.app.