PRIVACY POLICY

Last Updated: May 14, 2026

1. Introduction

KhlasPay respects your privacy and is committed to protecting personal data in accordance with applicable Moroccan laws and international data protection standards, where applicable.

This Privacy Policy explains how we collect, use, process, store, and protect information when you access our website, platform, or payment-related services.

2. Information We Collect

Business Information

  • Company name

  • Business registration details

  • Tax identification numbers

  • Merchant account information

  • Business contact details

Personal Information

  • Full name

  • Email address

  • Phone number

  • Billing information

  • Identity verification documents

Transaction Information

  • Payment amounts

  • Transaction references

  • Settlement details

  • Banking metadata

  • Payment status information

Technical Information

  • IP address

  • Device information

  • Browser type

  • Operating system

  • Website activity

  • Cookies and analytics data

3. How We Use Information

KhlasPay may use information to:

  • Provide payment and merchant services

  • Verify merchant identity

  • Facilitate payment processing

  • Monitor fraud and suspicious activity

  • Improve platform functionality

  • Communicate with users

  • Comply with legal and regulatory obligations

  • Maintain security and compliance controls

  • Provide customer support

4. Legal Basis for Processing

Where applicable, KhlasPay processes data based on:

  • Contractual necessity

  • Legal and regulatory obligations

  • Legitimate business interests

  • User consent, where required

5. Sharing Information

We may share information with:

  • Regulated financial institutions

  • Payment processors

  • Compliance and verification providers

  • Banking partners

  • Fraud prevention providers

  • Technology infrastructure providers

  • Legal or regulatory authorities, where required by law

KhlasPay does not sell personal information.

6. Data Security

KhlasPay uses commercially reasonable technical and organizational safeguards designed to protect data, including:

  • Encryption technologies

  • Access controls

  • Secure APIs

  • Monitoring systems

  • Authentication controls

  • Security reviews and audits

Despite these measures, no online platform can guarantee absolute security.

7. Data Retention

We retain data only for as long as necessary to:

  • Provide services

  • Meet legal and regulatory obligations

  • Resolve disputes

  • Enforce agreements

  • Maintain compliance records

Retention periods may vary depending on applicable laws and operational requirements.

8. International Data Transfers

Your information may be processed or stored in jurisdictions where KhlasPay, its infrastructure providers, technology partners, or financial institutions operate.

Where appropriate, reasonable safeguards may be implemented for international data transfers.

9. Your Rights

Depending on applicable laws, users may have rights to:

  • Access personal data

  • Correct inaccurate data

  • Request deletion

  • Restrict processing

  • Object to certain processing activities

  • Request data portability

  • Withdraw consent, where applicable

Requests may be submitted using the contact details provided on our website.

10. Cookies & Analytics

KhlasPay may use cookies and analytics technologies to:

  • Improve website functionality

  • Analyze usage trends

  • Maintain security

  • Enhance user experience

Users may manage browser cookie preferences independently.

11. Third-Party Links

Our website may contain links to third-party websites or services.

KhlasPay is not responsible for the privacy practices, security, or content of external websites.

12. Children’s Privacy

KhlasPay services are not intended for individuals under the age of 18.

We do not knowingly collect information from minors.

13. Changes to This Privacy Policy

KhlasPay may update this Privacy Policy periodically.

Updated versions become effective upon publication on the website.