How Emcenton Technology Limited collects, uses and protects personal data on the Payixay platform.
This policy covers personal data processed when you visit payixay.com, apply for or operate a merchant account, or when your customers pay through the Platform. We process personal data in accordance with the Kenya Data Protection Act, 2019 and, where it applies to our processing, the EU General Data Protection Regulation.
We share data with the partners needed to deliver the service — gateway provider (Akurateco), acquiring and banking partners, card networks and M-Pesa — and with regulators or law enforcement where legally required. We do not sell personal data.
Some partners process data outside Kenya. Where personal data is transferred internationally, we rely on contractual safeguards with the receiving party and transfer only what the service requires.
Onboarding and transaction records are retained for the periods required by anti-money-laundering and tax law, typically seven years, and then deleted or anonymized.
Subject to applicable law, you may request access to, correction or deletion of your personal data, object to certain processing, and lodge a complaint with the Office of the Data Protection Commissioner (Kenya) or your local supervisory authority. Contact info@payixay.com to exercise these rights; we respond within the statutory timelines.
Data is encrypted in transit and at rest. Access is role-based and logged. Card data is tokenized on certified gateway infrastructure and never stored on our marketing website.
We will post updates to this policy on this page and revise the “Last updated” date above. Material changes affecting merchants are notified by email.