Privacy Policy

Overview

14788001 Canada Inc., doing business as Solutions de paiement Tap2Pay (also “Tap2Pay”, “we”, “us”, or “our”) operates https://tap2pay.ca and provides merchant payment solutions and related services. This Privacy Policy explains how we collect, use, disclose, and protect personal information, including mobile phone numbers and SMS opt-in data.

1. Information We Collect

• Contact & identity: name, email, phone number, postal address, company name.
• Account & billing: payment method details, billing address, corporation number.
• Messaging data: mobile phone numbers, SMS opt-in/opt-out status, opt-in timestamps, message logs (timestamps and message contents as required for support and compliance).
• Usage & device data: IP address, device identifiers, browser/user agent, cookies and similar technologies, analytics.
• Support records: customer support emails, chat transcripts, and call logs.

2. How We Use Personal Information

We use personal information to: provide and operate our services; send transactional messages and promotional messages when you opt in; verify identity and process payments; provide customer support; detect and prevent fraud and abuse; and comply with legal obligations.

3. SMS / Mobile Data — Carrier & A2P Compliance

No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. Information sharing to subcontractors in support services, such as customer service, is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

4. Lawful Basis & Consent

Where required by law, we will process personal data only with a lawful basis (consent, contract necessity, legal obligation, vital interests, public task, or legitimate interests). For promotional SMS we rely on your express opt-in consent.

5. Opt-In & Opt-Out for SMS

• Opt-in: We only send promotional SMS after you provide express consent (via website form, paper form, QR code, or other explicit opt-in), and where applicable we confirm by sending a confirmation message.
• Opt-out: Reply STOP to any Tap2Pay SMS to unsubscribe. We will confirm unsubscribe status and cease non-exempt messaging to that number. For help, reply HELP or email admin@tap2pay.ca.

6. Sharing & Sub-Processors

We share personal data only with service providers who perform services on our behalf, under written agreements that require confidentiality and appropriate security. Sub-processor categories include: payment processors (Nuvei) and terminal providers (PAX Technology) for transaction services; CRM and lead management providers for sales operations; cloud hosting and application infrastructure providers for service delivery; advertising analytics providers (Meta Platforms / Facebook, consent-gated); and web font and analytics providers (Google). These providers may only use the data as necessary to provide their services. We may also disclose data to comply with legal obligations, respond to lawful requests, protect rights or safety, or in connection with a business transfer (merger, acquisition, sale of assets). A current list of named sub-processors is available on request to admin@tap2pay.ca.

7. Data Retention

We retain personal data only as long as necessary for the purposes described, to meet legal obligations, resolve disputes, and enforce agreements. Concrete retention periods: lead and contact form data — 36 months from last interaction; newsletter subscriptions — until you unsubscribe; chat transcripts — 12 months; SMS opt-in and message logs — retained as required by carrier/A2P 10DLC compliance rules; support tickets — 24 months after resolution; accounting and payment records — 7 years as required by Canadian tax law. You may request earlier deletion of your data at any time (see Your Rights).

8. Security Measures

We implement layered administrative, technical, and physical safeguards aligned with SOC 2 and ISO 27001 control objectives: TLS 1.2+ encryption for all data in transit; encryption at rest for stored data (managed by our hosting infrastructure); role-based access controls with least-privilege enforcement — customer lead data is restricted to authenticated admin users only; server-side rate limiting on all public-facing form and chat endpoints to prevent abuse; honeypot and disposable-email detection on lead forms; input sanitization and prompt-injection defenses on the AI assistant; centralized logging with periodic review; and a designated privacy officer (see Quebec section). No method of transmission or storage is 100% secure, but we apply industry-standard protections and review them regularly.

8a. Cookies & Tracking Technologies

We use cookies and similar technologies for: (a) essential site functionality — these cannot be disabled; and (b) analytics and advertising measurement (Meta Pixel) — these load only after you give explicit consent via our cookie banner. You can withdraw consent at any time by clearing your browser storage for tap2pay.ca, after which tracking cookies will not be reloaded until you re-consent. We do not sell personal data to third parties.

8b. Breach Notification

In the event of a personal data breach that poses a real risk of significant harm to individuals, Tap2Pay will document the breach, contain it, and notify the affected individuals and the relevant privacy authorities as required by PIPEDA and Quebec's Law 25, without undue delay and within the statutory timeframes.

9. Your Rights & How to Exercise Them

Depending on your jurisdiction (PIPEDA federally, Law 25 in Quebec), you have the right to: access the personal data we hold about you; correct inaccurate data; delete your data (subject to legal retention obligations); restrict or object to processing; obtain a portable copy; and withdraw consent at any time. To exercise any right, email admin@tap2pay.ca with the subject line “Privacy Request”. We will verify your identity, respond within 30 days, and provide the information free of charge (subject to legal limits). If you are unsatisfied with our response, you may complain to the Office of the Privacy Commissioner of Canada or the Commission d’accès à l’information du Québec.

10. Quebec — Privacy Officer (Loi 25)

Conformément à la Loi 25 du Québec, nous avons nommé une personne responsable de la protection des renseignements personnels : Privacy Officer: Khaled Ranni Title: Président (President) Email: admin@tap2pay.ca

11. International Transfers

Tap2Pay may transfer personal data to countries other than your country of residence (including the U.S.). We implement appropriate safeguards as required by law.

12. Children

Our services are not directed at children under the age of 13 (or greater minimum age under applicable local law). We do not knowingly collect personal information from children without parental consent.

13. Changes to this Privacy Policy

We will post updates here and update the “Last updated” date. Material changes will receive more prominent notice.

14. Contact

For privacy questions or to exercise rights:
Email: admin@tap2pay.ca
Phone: +1 800-455-9090
Legal: 14788001 Canada Inc. (Solutions de paiement Tap2Pay)