Our Data Processing Agreement (DPA) sets forth the procedures and protocols for managing personal data by Vitative Fintech on behalf of our users (Merchants), ensuring compliance with relevant data protection laws and regulations. This agreement outlines the roles, responsibilities, and safeguards in place to ensure the security and confidentiality of personal data.
In our payment gateway services, the Merchant typically acts as the Data Controller, determining the purposes and means of processing personal data. Vitative Fintech operates as the Data Processor, processing personal data on behalf of the Data Controller, strictly following their instructions to facilitate payment transactions and related services.
Personal data includes any information related to an identified or identifiable individual, such as names, addresses, email addresses, and payment card details. This data is collected when users engage with our payment gateway services.
Processing encompasses all operations performed on personal data, including collection, recording, organization, storage, retrieval, usage, disclosure, restriction, erasure, or destruction. These actions are carried out in accordance with the instructions provided by the Data Controller.
We employ stringent security measures to safeguard personal data. These measures include encryption, access controls, regular security audits, continuous monitoring, and incident response procedures. These protections ensure the confidentiality, integrity, and availability of processed personal data.
All personal data handled via our platform is treated with the utmost confidentiality and is only used for the purposes stated in the Data Processing Agreement. We enforce strict confidentiality obligations on our employees and third-party service providers involved in data processing.
Users of our payment gateway services have specific rights concerning their personal data. These include the right to access, rectify, restrict, or erase their data, object to data processing, and request data portability. We facilitate the exercise of these rights in compliance with applicable data protection laws.
In the event of a data breach, we take immediate action to mitigate its impact and notify affected individuals as required by relevant laws and regulations. Our response includes taking swift measures to contain and resolve the breach.
We may engage third-party sub processors to assist in delivering our services. These sub processors adhere to the same stringent standards for security and data protection as we do, ensuring consistent safeguarding of personal data.
We strictly adhere to all relevant Indian laws and regulations governing the handling of personal data. Our data processing practices are lawful, fair, and transparent, ensuring we meet all legal obligations.
Upon request, we provide access to audit reports or other documentation that demonstrates our compliance with data protection regulations. This transparency ensures our data processing practices meet the necessary standards.
Personal data is deleted when no longer necessary for the purposes it was collected for, or upon request. Data is retained only as long as needed for legal, regulatory, or legitimate business purposes as outlined in our agreement.
In the event of a significant data breach, we promptly notify affected individuals, providing relevant information and detailing steps being taken to mitigate its impact, in compliance with applicable laws.
Our liability is limited to the extent permitted by law. Users agree to indemnify us against any claims arising from their use of our services, ensuring mutual protection against legal liabilities.
These terms are governed by the laws of India, with any disputes subject to the jurisdiction of Indian courts.
Transforming the way you handle payments. Experience hassle-free, secure transactions anytime, anywhere.