Privacy Policy

This Privacy Policy explains how Velta, LLC, doing business as Lollipay ("Lollipay", "we", "us"), collects, uses, shares, and protects information about you. It applies to:

• Merchants using Lollipay for their business.
• Buyers purchasing from Lollipay-powered businesses.
• Developers building with Lollipay APIs.
• Visitors to our website or anyone contacting support.

Lollipay acts as the Merchant of Record for purchases made through Lollipay-powered storefronts. This means we are an independent controller of the personal data we collect to process payments, calculate and remit taxes, detect fraud, and meet our legal obligations. For personal data we process on a Merchant's behalf, see our Data Processing Agreement.

If we make significant changes to this policy, we will notify you by email or through the platform.

1. Information We Collect

1.1 Information You Provide

• Account details (name, email, password).
• Business information (business name, address, tax ID).
• Payment information (bank account details for payouts, billing information).
• Communications with us (support tickets, emails).

1.2 Information We Collect Automatically

• Device and browser information (IP address, browser type, operating system).
• Usage data (pages visited, features used, timestamps).
• Transaction data (purchase amounts, products, payment methods).

1.3 Information from Third Parties

• Identity verification data from our verification partners.
• Payment data from Card Schemes and payment processors.

2. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the platform.
• Process transactions and send related communications.
• Calculate, collect, and remit taxes.
• Detect and prevent fraud.
• Comply with legal obligations.
• Communicate with you about your account and send transactional and service-related messages. We send marketing or promotional messages only with your prior express opt-in consent, which you may withdraw at any time.
• Provide customer support.

3. How We Share Your Information

We share your information with:

• Payment processors and Card Schemes — to process transactions.
• Tax authorities — to comply with tax obligations.
• Identity verification providers — to verify your identity.
• Cloud infrastructure providers — to host and operate the platform.
• Communications providers — to deliver transactional email and SMS messages.
• Product analytics providers — to understand how the platform is used.
• Error-monitoring and logging providers — to detect, diagnose, and resolve technical issues.
• AI and machine-learning providers — to support automated fraud detection and analysis, as described in the Automated Decision-Making section below.
• Law enforcement — when required by law, subpoena, or court order.

For the current list of named sub-processors, their purposes, and locations, see our Data Processing Agreement. We do not sell your personal information.

4. Cookies

We use cookies and similar technologies to:

• Keep you signed in.
• Remember your preferences.
• Understand how you use the platform.
• Improve performance and security.

Essential cookies are required for the platform to function. Analytics cookies help us understand usage patterns and can be disabled through the cookie banner.

You can manage cookies through your browser settings. Disabling essential cookies may affect platform functionality.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide services. After account closure, we retain data as required by law (typically for tax and compliance purposes) and delete it when no longer needed.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access your personal data.
• Correct inaccurate data.
• Delete your data (subject to legal retention requirements).
• Export your data in a portable format.
• Object to or restrict certain processing.
• Withdraw consent where processing is based on consent.

To exercise these rights, contact privacy@lollipay.cc.

California Residents (CCPA): You have the right to know what personal information we collect, request deletion, and opt out of the sale of personal information. We do not sell personal information.

EU/EEA Residents (GDPR): Our legal bases for processing are contract performance, legitimate interests, legal obligation, and consent. You may lodge a complaint with your local data protection authority.

Automated Decision-Making. We use automated systems, including automated fraud screening and risk scoring, to detect and prevent fraud and abuse. In limited cases this may result in automated decisions that produce legal or similarly significant effects, such as declining a transaction or restricting an account. Where required by law, you have the right to obtain human review of, express your point of view on, and contest such decisions by contacting privacy@lollipay.cc.

7. Security

User data is primarily stored in secure data centers located in Ashburn, Virginia, United States. Some service providers process limited data elsewhere; see our Data Processing Agreement for sub-processor locations. We implement industry-standard security measures including encryption in transit and at rest, access controls, and regular security assessments. No system is perfectly secure — if you discover a vulnerability, please report it to security@lollipay.cc.

8. International Transfers

Your data may be transferred to and processed in the United States. For EU/EEA transfers, we rely on Standard Contractual Clauses or other approved transfer mechanisms.

9. Children and Minors

Lollipay is not directed to children. You must be at least 18 years of age to create or hold a Merchant account, and Lollipay does not knowingly collect personal information from individuals under the age of 18 in connection with a Merchant account.

To make a purchase, Buyers must be at least 18 years of age, or the age of majority in their jurisdiction. Where a purchase is made for a minor, it must be completed by a parent or legal guardian who accepts the Purchase Terms and provides any required consent on the minor's behalf. Where a minor is the end user of a purchased Product, any associated personal data is provided and authorized by that parent or legal guardian, who remains responsible for it.

Lollipay does not knowingly collect personal information from children under the age of 14. This is Lollipay's own standard and is stricter than the under-13 threshold set by the Children's Online Privacy Protection Act (COPPA); we comply with COPPA and equivalent regulations for children under 13.

If you believe that a person under the age of 18 has provided us with personal information in connection with a Merchant account, or that we have collected information from a child under the age of 14, please contact us at privacy@lollipay.cc and we will delete it promptly.

10. Contact

For questions or concerns about this Privacy Policy, contact us at privacy@lollipay.cc.