Privacy policy

This is a general policy covering how this website handles personal data. It is not legal advice, have it reviewed against your actual data flows and the jurisdictions you operate in before relying on it.

1. Who is responsible

The controller for personal data collected through this website is Beecher Business Center LLC, 216 N Main St, Buffalo, WY 82834, United States. You can reach us at office@vtorapay.com for any question about this policy or your data.

2. What we collect

We collect only what you give us and what a web server necessarily records.

• Data you submit. When you complete the merchant application or the contact form, we receive the name, business email, company name, website or domain, country of incorporation, industry, monthly revenue band, current payment provider, chargeback rate, phone or messenger handle, and anything you write in the message field.
• Server logs. Our hosting provider records the IP address, user agent, requested URL, referrer and timestamp of each request. These logs exist for security and troubleshooting.
• Local storage. Your selection of solutions is stored in your own browser under the key vtora_cart_v1. It never reaches our servers, and clearing your browser data removes it.

We do not use advertising cookies, tracking pixels or cross-site analytics on this website.

3. Why we use it, and on what basis

• To answer your enquiry and assess your application. Basis: steps taken at your request prior to entering a contract, and our legitimate interest in evaluating prospective merchants.
• To operate and secure the website. Basis: our legitimate interest in keeping the service available and free of abuse.
• To meet legal obligations, including know-your-customer, anti-money-laundering and sanctions screening where an application proceeds. Basis: compliance with a legal obligation.

4. Who else sees it

We share personal data only where it is needed to deliver what you asked for:

• Hosting. This website is served by Vercel Inc., which processes request data on our behalf.
• Fonts. Typefaces are loaded from Google Fonts. Your browser contacts Google's servers to fetch them, which discloses your IP address to Google.
• Acquiring and compliance partners. If your application proceeds, the details you supplied are passed to the licensed acquiring partners and, where a company structure is requested, to the local corporate service providers who carry out the incorporation.

We do not sell personal data, and we do not share it for anyone else's marketing.

5. Transfers outside your country

We are established in the United States and several of our partners operate in the United States, the United Kingdom and Hong Kong. Where data relating to individuals in the European Economic Area is transferred to a country without an adequacy decision, we rely on standard contractual clauses or another lawful transfer mechanism.

6. How long we keep it

Enquiries that do not lead to an account are deleted within twelve months. Where an account is opened, records are retained for as long as the relationship lasts and afterwards for the period required by applicable anti-money-laundering and accounting rules. Server logs are kept for a short period for security purposes.

7. Your rights

Depending on where you live, you may have the right to access the personal data we hold about you, to have inaccurate data corrected, to have data erased, to restrict or object to processing, and to receive your data in a portable format. Where we rely on consent, you can withdraw it at any time without affecting processing that already took place.

Write to office@vtorapay.com to exercise any of these. If you are in the EEA or the UK and believe we have handled your data improperly, you may also complain to your national supervisory authority.

8. Security

Traffic to this website is encrypted in transit. Access to application data is limited to the people who need it to assess and service an account. No system is perfectly secure, and we cannot guarantee absolute security.

9. Children

This is a service for businesses. It is not directed at children, and we do not knowingly collect data from them.

10. Changes

If this policy changes materially, we will update the date at the top of this page. Please check back before submitting anything you would rather we did not keep.