Privacy Policy
Effective Date: 18 September 2025
Summary
Centrapay (“we”, “us”, “our”) is committed to protecting your personal information and respecting your privacy. This privacy policy explains how we collect, use, disclose, and safeguard your information when you interact with our services.
How and when this privacy policy applies to you
This privacy policy sets out how we collect, use, share and protect your personal information. We collect and use your personal information in two different ways. Where we determine how your data is processed, we are the “data controller”. Where we simply process your data on behalf of another data controller, we are the “data processor”. This privacy policy applies only in relation to our collection and use of personal information as a data controller.
When we act as a Data Controller
We act as a data controller when we collect and use personal information for our own business purposes. For example, when you visit our website, onboard to one of our products as a merchant, or contact our support team. In these cases:
We determine the purposes and means of processing your personal information, which are set out in this privacy policy.
We are responsible for ensuring your data is handled lawfully, fairly, and transparently.
When we act as a Data Processor
We act as a data processor when we provide services to our business customers (e.g. payment processing or digital wallet infrastructure), we process personal information solely on their instructions and behalf. In these cases:
We only process personal information to provide our services under a contract.
We do not sell the data for our own purposes.
We do not use the data for our own purposes.
For information about how your personal information is used in this context, please refer to the privacy policy of the business or financial institution you engaged with.
Who We Are
Centrapay Limited unlocks new ways for businesses, brands, customers and consumers, to connect engage and pay. You can see our website www.centrapay.com for additional information.
Our postal address is Shed 10, City Works Depot, 77 Cook Street, Auckland, New Zealand.
What Information We Collect
When you interact with us directly (e.g. via our website or through the onboarding process), we may collect:
Contact Information – name, email address, phone number
Business details – Legal name, email address, physical address
Bank Account information – Account name, Bank account number
Technical Data – IP address, browser type, pages visited (via cookies or analytics tools)
Authentication Data – authentication/verification information
Metadata – from user interactions (session duration, device identifiers, etc.)
Any information you voluntarily provide
How We Use This Information
We use your personal information to:
Respond to your enquiries and support requests
Enable merchant onboarding to use our app and services
Provide and manage billing services securely and efficiently
Send marketing communications (where you’ve opted in)
Improve our website and services
Legal Bases for Processing
We rely on the following legal bases under applicable data protection laws:
Consent – where you have given your explicit permission
Legitimate Interests – such as responding to enquiries or securing our website
Contractual Necessity – when processing is needed to take steps before entering a contract
Legal Obligations – where required by law
Sharing Your Information
We may share your information with:
Our service providers (e.g., cloud storage, recruitment platforms, analytics) so that we can provide our services.
Regulators or law enforcement, where required by law.
Partners involved in delivering our services (under contract).
We ensure that appropriate safeguards and contracts are in place before sharing any personal information.
International Data Transfers
When we transfer your information outside Centrapay, it may be to a company in New Zealand or overseas. Our contract with the company will require the company to protect your personal information.
We’ll use reasonable security safeguards, like file encryption, to protect your personal information.
Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes we collected it for, including for legal, accounting, or reporting requirements. For example:
Contact form submissions: retained for 12 months
Job applications: retained for 12 months unless you request deletion sooner
Data Subject Rights
You have rights under applicable privacy laws, which may include:
Accessing the personal information we hold about you as a data controller
Correcting inaccurate information
Requesting deletion of your data
Objecting to or restricting processing of your data
Withdrawing your consent
To exercise these rights, contact us at: privacy@centrapay.com. We will respond no later than 20 working days. Please note, to exercise any of these rights in relation to personal information we process on behalf of our customers (such as financial institutions), you will need to contact those customers directly, following the steps outlined in their privacy policies.
Cookies and Website Analytics
We use cookies and similar technologies to improve your browsing experience and gather website analytics. You can manage your cookie preferences via your browser settings or our cookie banner.
Internet use and third-party websites
While we take reasonable steps to maintain secure internet connections, if you provide us with personal information over the internet, the provision of that information is at your own risk. If you follow a link on our website to another site, the owner of that site will have its own privacy policy relating to your personal information.
Contact Us
If you have any questions or concerns about this Privacy Policy or your personal information, please contact us at: privacy@centrapay.com
What to do if you’re not satisfied with our resolution process
If you’ve been through our complaints and resolution process but aren’t satisfied, you can use the below independent dispute resolution service:
For privacy complaints
Office of the New Zealand Privacy Commissioner
Online: privacy.org.nz
Phone: 0800 803 909
(From overseas) +64 (0)4 474 7590
Email: enquiries@privacy.org.nz
Changes to This Policy
We may update this policy from time to time to reflect changes in our practices or legal obligations. When we do, we will revise the “Effective Date” at the top of this page.