Privacy Notice

MeroFin Ltd. operates Ppay, a digital financial-services product designed to support secure, connected payment-access and institutional workflow services.

In this Privacy Notice, "MeroFin", "Ppay", "we", "us", and "our" refer to MeroFin Ltd. and the Ppay product and platform.

MeroFin Ltd. Ppay. Address available on request.

We may collect information you provide directly, information generated when you use the Ppay website or services, and information received from authorised organisations, partners, service providers, or public sources where permitted by law.

• Identity and contact information, such as your name, organisation, job title, email address, telephone number, and business contact details.
• Account and access information, such as user roles, organisation membership, authentication details, permissions, and activity records.
• Service and workflow information, including payment, beneficiary, approval, reconciliation, reporting, or support information where a service makes those features available.
• Technical information, such as IP address, browser type, device information, operating system, cookies, usage data, diagnostics, and security logs.
• Communications, including support requests, feedback, partnership enquiries, complaints, and correspondence with Ppay or MeroFin.
• Compliance and verification information where required for onboarding, risk management, fraud prevention, legal obligations, or authorised partner services.

We use information only where necessary and appropriate to operate, protect, improve, and provide Ppay services.

• Provide, maintain, support, and improve the Ppay website, platform, products, and services.
• Create and administer accounts, organisational workspaces, user roles, access permissions, and authorised workflows.
• Respond to support requests, partnership enquiries, complaints, and other communications.
• Verify identity, authority, eligibility, and organisational relationships where required.
• Protect against fraud, misuse, unauthorised access, security incidents, and other harmful activity.
• Meet legal, regulatory, audit, recordkeeping, risk-management, and reporting obligations.
• Monitor reliability, analyse performance, improve user experience, and maintain platform security.

We may share information where necessary to operate the Services, meet legal obligations, protect security, or support authorised organisational workflows.

• With MeroFin personnel, affiliates, and authorised representatives who need the information for legitimate business purposes.
• With your organisation and its authorised administrators, users, or representatives where you use Ppay through an organisation.
• With approved providers such as hosting, security, communications, verification, technology, professional-advisory, banking, payment, telecommunications, or other service partners where applicable.
• With regulators, courts, law-enforcement bodies, auditors, tax authorities, or other public authorities when required or permitted by applicable law.
• With prospective purchasers, investors, successors, or advisers in connection with a corporate transaction, subject to appropriate safeguards.

Information may be processed in South Sudan and other countries where MeroFin, Ppay, our affiliates, providers, partners, or service suppliers operate. Where information is transferred internationally, we will use reasonable safeguards appropriate to the nature of the information and applicable requirements.

We retain information for as long as necessary to provide services, maintain security, meet legal or regulatory requirements, resolve disputes, enforce agreements, conduct audits, and support legitimate business operations.

Retention periods vary according to the type of information, the relevant service, applicable obligations, and whether an investigation, dispute, compliance review, or security matter is ongoing.

We use reasonable technical, organisational, and administrative measures designed to protect information from unauthorised access, loss, misuse, alteration, disclosure, or destruction.

Security measures may include role-based access controls, authentication controls, logging, monitoring, secure-development practices, supplier controls, and incident-response procedures. No internet-based system can be guaranteed completely secure.

Subject to applicable law, you may request access to, correction of, deletion of, restriction of, or information about personal information held by us. You may also withdraw consent where processing depends on consent.

We may need to verify your identity and authority before responding. Some requests may be limited where information must be retained for legal, regulatory, security, fraud-prevention, audit, or legitimate operational reasons.

We may use cookies, local storage, and similar technologies to operate the website, remember preferences, protect security, understand performance, and improve user experience.

You may manage cookies through browser settings. Disabling certain cookies may affect the availability or performance of some website features.

We may update this Privacy Notice to reflect changes in law, technology, service operations, or information practices. We will publish the updated version on this page and revise the Last updated date.

For privacy enquiries, data requests, support, partnership enquiries, or concerns about this Privacy Notice, contact us using the details below.