Privacy Policy
"Data controllers" are the people who or organisations which determine the purposes for which, and the manner in which, any Personal Data is processed, who/which make independent decisions in relation to the Personal Data and/or who/which otherwise control that Personal Data.
For the purposes of the GDPR, ArmadilloPay Ireland Limited is the data controller with regard to the Personal Data described in this Privacy Policy and Notice. ArmadilloPay Ireland Limited is based in Ireland and offers International Payment Solutions.
Our Data Protection Co-Ordinator can be contacted at: info@ArmadilloPay.com
The purpose of this document is to provide you as our data subject with a statement regarding the Data Protection and Privacy practices and obligations of ArmadilloPay Ireland Limited and an explanation of your rights as a data subject. This Notice applies to our business practices, our website, which is accessible from http://ArmadilloPay.com/ and its sub-domains, as well as any associated digital platforms and mobile applications owned and controlled by the Organisation. We are not responsible for the content or the privacy notices for any websites to which we provide external links.
Ireland — General Data Protection Regulation (EU Regulation 679/2016) · Data Protection Act 2018 · ePrivacy Regulations 2011 implementing EU Privacy and Electronic Communications Directive 2002/58/EC
Our practices as described here may be changed, but any changes will be posted, and changes will only apply to activities and information on a going forward, not retroactive basis. You are encouraged to review this Notice periodically.
Lawfulness, fairness and transparency: Personal data must be processed lawfully, fairly and in a transparent manner.
Purpose Limitation: Personal data must be collected for specified, explicit and legitimate purposes.
Data Minimisation: Personal data must be adequate, relevant and limited to what is necessary.
Accuracy: Personal data must be accurate and, where necessary, kept up to date.
Retention: Personal data should be kept in an identifiable format for no longer than is necessary.
Integrity and confidentiality: Personal data should be kept secure.
Accountability: We must not only comply with the above principles but must be able to demonstrate compliance.
We will collect personal data in accordance with the purposes outlined in this document, typically your name and email address and from time to time other information needed to facilitate a service relationship.
Special Category Personal Data: We will not collect special category data from you unless you are an employee.
Children's Personal Data: As our service is not aimed at children, if we learn that a child has submitted Personal Data to us without correct permissions we will delete such data. You must be at least 18 years old to create an account.
Contact form: when you send us a message, we collect your name, work email address, company, enquiry type and message. We use this information to respond to your enquiry, on the basis of our legitimate interest in answering the people who contact us. Messages are stored by our website host and delivered to our company email.
Bot protection: our contact form uses Cloudflare Turnstile, provided through our website host, to check that messages are sent by people rather than automated programs. It processes your IP address and technical information about your browser and device for this purpose only.
Website visits: when you visit our website, our host and its content delivery networks process your IP address and browser information to deliver the pages and to keep the service secure. We do not use analytics or tracking tools to profile visitors.
Directors and employees of the Organisation who are bound by confidentiality agreements will process personal data on behalf of the business. Categories of service providers we use include:
Cloud Web and App Hosting Services · Cloud Data Verification Services · Contract Developers · Professional Service Providers · Financial Transaction Providers · Telecoms Service and Carrier Providers · KYC Providers
For our website, these service providers are:
Webflow, Inc. (United States) — hosts our website and stores contact form messages · Cloudflare, Inc. (United States) — contact form bot protection, provided through Webflow · jsDelivr — delivers the icon font used on the site
If we transfer your Personal Data out of the EEA, we ensure an adequate degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented: (1) transfer only to countries deemed adequate by the European Commission; (2) use of specific contracts approved by the European Commission; (3) where we use US-based providers, transfer only to those part of an equivalent privacy protection framework. Our website host, Webflow, Inc., is based in the United States, so website data is transferred under these safeguards.
We do not use automated decision making or profiling in our normal course of business.
We follow strict security procedures in the storage and disclosure of your Personal Data, and to protect it against accidental loss, destruction or damage. The data you provide to us is protected using modern encryption, intrusion prevention, and account access techniques.
We have a documented data retention schedule. Generally, we will only retain your Personal Data for as long as necessary to fulfil the purposes we collected it for and for up to seven (7) years afterwards.
We will not share your Personal Data with any third party for marketing purposes. You may object to direct marketing by using the contact details herein to opt-out.
Our website does not set cookies or use tracking technologies. It stores one entry in your browser's local storage to remember your choice on our cookie notice. Your IP address is considered personal data under the GDPR. See our Cookie Policy for details.
Access: Request information about whether we hold personal information about you and receive a copy.
Correction: Request correction of any incomplete or inaccurate information we hold about you.
Erasure: Ask us to delete or remove personal information where there is no good reason for us continuing to process it.
Object: Object to processing of your personal information where we are relying on a legitimate interest.
Restriction: Ask us to suspend the processing of personal information about you in certain circumstances.
Portability: Request transfer of your personal information in an electronic and structured form to you or to another party.
Data subjects must make a formal request to our Data Protection Coordinator, who will respond within 30 days. Contact: info@ArmadilloPay.com
You have the right to complain at any time to the Data Protection Commission of Ireland: www.dataprotection.ie
Approved by: Liam Sheehan, President, Europe — Date: 01 August 2026