Privacy Policy
Last Updated: January 2025
Introduction
go monaco ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal information. As a Merchant of Records platform providing payment processing and revenue cycle management services, we adhere to the highest standards of data protection in compliance with the General Data Protection Regulation (GDPR) and other applicable privacy laws.
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access our services.
1. Information We Collect
1.1 Personal Information
We collect personal information that you provide directly to us, including but not limited to:
- Name and contact information (email address, phone number, postal address)
- Business information (company name, VAT number, business address)
- Financial information (bank account details, credit card information, payment history)
- Government-issued identification numbers (for AML and KYC compliance)
- Transaction data and invoice details
1.2 Automatically Collected Information
When you access our services, we automatically collect certain information, including:
- Device information (IP address, browser type, operating system)
- Usage data (pages visited, time spent, click patterns)
- Location data (country, region, city based on IP address)
- Cookies and similar tracking technologies
1.3 Payment Processing Information
As a payment processor, we collect and process:
- Credit card and payment method details (encrypted and tokenized)
- Transaction amounts and currencies
- Cryptocurrency wallet addresses (for crypto payments)
- SEPA transfer details and IBAN information
- PayPal account information
2. How We Use Your Data
We use the collected information for the following purposes:
Payment Processing
To process transactions, manage billing, and facilitate payments through various methods
Compliance & Security
AML, KYC, and anti-fraud measures to ensure regulatory compliance
Service Management
Account creation, customer support, and service improvement
3. Legal Basis for Processing (GDPR)
We process your personal data based on the following legal grounds:
Processing necessary for the performance of our services contract with you
Compliance with AML, tax, and financial regulations
Fraud prevention, security, and service improvement
Marketing communications and optional services (where applicable)
4. Data Sharing and Disclosure
We may share your information with:
- Payment Partners: Banks, card networks, and payment gateways necessary for transaction processing
- Regulatory Authorities: Government agencies for compliance with legal obligations
- Service Providers: Third-party vendors who assist in our operations (under strict confidentiality agreements)
- Business Transfers: In case of merger, acquisition, or asset sale
We never sell, rent, or trade your personal information to third parties for marketing purposes.
5. Data Security
We implement industry-standard security measures to protect your data:
End-to-End Encryption
All sensitive data is encrypted in transit and at rest using AES-256 encryption
PCI DSS Compliance
Level 1 PCI DSS certified for secure payment card processing
Regular Audits
Annual security audits and continuous monitoring
6. Your Rights Under GDPR
As a data subject, you have the following rights:
Right to Access
Request copies of your personal data
Right to Rectification
Request correction of inaccurate data
Right to Erasure
Request deletion of your data ("right to be forgotten")
Right to Restrict
Request restriction of processing
Right to Portability
Receive your data in a portable format
Right to Object
Object to processing based on legitimate interests
To exercise any of these rights, please contact our Data Protection Officer at privacy@activepay.com
8. Data Retention
We retain personal data for as long as necessary to:
- Provide our services and maintain your account
- Comply with legal obligations (typically 7-10 years for financial records)
- Resolve disputes and enforce agreements
- Support legitimate business interests
9. International Data Transfers
Your data may be transferred to and processed in countries outside the European Economic Area (EEA). We ensure appropriate safeguards through:
- Standard Contractual Clauses approved by the European Commission
- Adequacy decisions for countries with equivalent data protection
- Binding Corporate Rules for intra-group transfers
10. Contact Information
go monaco Headquarters
46, Boulevard des Moulins
Monaco, 98000
Monaco - MCO
11. Updates to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by:
- Posting the new Privacy Policy on this page
- Updating the "Last Updated" date
- Sending email notification for significant changes
Continued use of our services after changes constitutes acceptance of the updated policy.