CPA Platform Privacy Policy

1. Who we are

Caribbean Payments Alliance ("CPA") provides payment technology to merchants across the Caribbean. This policy covers information handled by CPA as the technology provider. It is not the privacy policy of the merchant you are paying — each merchant publishes their own, linked on their checkout page.

2. Information we collect

• Payer details you enter at checkout — name, email and payment description.
• Transaction data — amount, currency, date/time, reference, approval code and result.
• Limited payment method data returned by the processor — card brand and last four digits only.
• Technical data — IP address, device/browser information, used for fraud prevention.
• Merchant account data — business details, contact information and settings.

We never receive or store full card numbers, CVV codes or your online banking credentials.

3. How we use it

To process and confirm payments, issue receipts, prevent and investigate fraud and chargebacks, provide merchant reporting and support, and meet legal, regulatory and card-scheme obligations.

4. Who we share it with

With the merchant you paid, the payment processor handling the transaction, and service providers acting on our instructions (for example email delivery and hosting). We may disclose information to regulators or law enforcement where legally required. We do not sell personal information.

5. Retention and security

Transaction records are retained as required for financial, tax and regulatory purposes. Data is transmitted over HTTPS/TLS, credentials are encrypted at rest, and access is restricted to authorised personnel.

6. Your rights

You may request access to, correction of, or deletion of your personal information, subject to records we must keep by law. Contact us using the details below and we will respond promptly.

7. Cookies

We use only cookies and local storage necessary to operate the payment pages and merchant dashboards securely, such as maintaining your session.