Privacy Policy

Last updated: February 4, 2026

This Privacy Policy explains how MPT Pay LTD ("we", "our", or "us") collects, uses, stores, and protects your personal information when you visit our website at www.mptpay.com or contact us. We are committed to protecting your privacy and handling your data in accordance with applicable data protection laws, including the UK GDPR and the Data Protection Act 2018.

Data Controller

MPT Pay LTD, a company registered in England and Wales, is the data controller responsible for your personal data. Our registered address is 71-75 Shelton Street, London, United Kingdom. For privacy-related inquiries, please contact us at ai@odam.dev.

Data We Collect

We collect the following categories of personal data: (1) Contact information you provide when using our contact form, including name, email address, company name, and message content; (2) Technical data automatically collected when you visit our website, such as IP address, browser type and version, device information, time zone, and pages visited; (3) Usage data about how you interact with our website, including click patterns and navigation paths. We do not collect sensitive personal data unless you voluntarily provide it in your communications with us.

How We Use Your Data

We use your personal data for the following purposes: (1) To respond to your inquiries and provide customer support; (2) To operate, maintain, and improve our website functionality and user experience; (3) To ensure website security, prevent fraud, and protect against unauthorized access; (4) To comply with legal obligations and enforce our legal rights; (5) For internal analytics to understand website usage patterns and improve our services. We process your data based on legitimate interests, consent, or legal obligation as applicable under UK GDPR.

Legal Basis for Processing

We process your personal data under the following legal bases: (1) Legitimate interests for website operation, security, and business communications; (2) Consent when you voluntarily provide information through our contact form; (3) Legal obligation to comply with applicable laws and regulations. You have the right to withdraw consent at any time where processing is based on consent.

Data Sharing and Disclosure

We do not sell, rent, or trade your personal data. We may share your data with: (1) Trusted service providers who assist in website hosting, email delivery, and technical support, subject to strict confidentiality agreements; (2) Legal and regulatory authorities when required by law or to protect our legal rights; (3) Business partners or successors in the event of a merger, acquisition, or sale of assets, with appropriate notice. All third parties are required to protect your data in accordance with applicable data protection laws.

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, secure server infrastructure, access controls, and regular security assessments. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law. Contact form submissions are typically retained for up to 3 years from the date of submission, or until you request deletion. Technical and usage data may be retained in anonymized or aggregated form for analytical purposes.

Your Rights

Under UK GDPR, you have the following rights regarding your personal data: (1) Right of access - request a copy of your personal data; (2) Right to rectification - correct inaccurate or incomplete data; (3) Right to erasure - request deletion of your data in certain circumstances; (4) Right to restrict processing - limit how we use your data; (5) Right to data portability - receive your data in a structured format; (6) Right to object - object to processing based on legitimate interests; (7) Right to withdraw consent - withdraw consent where processing is based on consent. To exercise these rights, contact us at ai@odam.dev. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) if you believe we have violated your data protection rights.

International Data Transfers

Your personal data is primarily processed and stored within the United Kingdom and European Economic Area (EEA). If we transfer data outside the UK/EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by relevant authorities, or adequacy decisions by the European Commission or UK government.

Children's Privacy

Our website is not intended for children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately and we will take steps to delete such information.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date. Your continued use of our website after such changes constitutes acceptance of the updated policy.

Contact Us

If you have questions, concerns, or wish to exercise your rights regarding this Privacy Policy or our data practices, please contact us at ai@odam.dev or write to us at MPT Pay LTD, 71-75 Shelton Street, London, United Kingdom.