Privacy Policy

• Identity data (name, date of birth, government ID, selfie)
• Contact data (email, phone, postal address)
• Financial data (account balances, transactions, beneficiaries)
• Technical data (IP address, device, cookies, log files)
• Communications with our support, risk and compliance teams

We process personal data to operate the services, verify your identity, prevent fraud and money laundering, comply with legal obligations, improve our products and (with your consent where required) send marketing communications.

We rely on contract performance, legal obligation, our legitimate interests (e.g. fraud prevention, network security) and, where required, your consent.

We share data with card schemes (Visa, Mastercard), issuing and acquiring partners, KYC/AML providers, cloud infrastructure providers, professional advisors and regulators when required by law.

Personal data may be processed outside the UAE. We use Standard Contractual Clauses or equivalent safeguards where applicable.

We retain transaction and KYC records for at least 5 years after the relationship ends, or longer where required by law.

Subject to applicable law you may access, rectify, erase, restrict or port your data, and object to certain processing. Contact privacy@lexpayments.net.

Lexpay maintains PCI-DSS Level 1, ISO 27001 and SOC 2 controls. Cards are tokenised and sensitive data is encrypted at rest and in transit.