Privacy Statement

PayShare Limited collects and holds personal information for the purposes described in this statement.

Privacy Officer contact: [email protected] (mark messages for the attention of the Privacy Officer).

For privacy requests, email [email protected]. Further identifying agency contact details can be provided on request while the published business address is finalised.

This statement applies to visitors to payshare.nz, merchants and platforms evaluating or using PayShare, integration partners, and customers who join a PayShare Session through a participating site.

PayShare is a multi-party checkout / orchestration layer. It is not a payment method, does not operate a pooled consumer wallet, does not hold customer balances, and is not the merchant of record for the underlying booking or order.

PayShare is a merchant checkout product for adult bookings and orders. It is not directed at children, and we do not knowingly collect personal information from children.

If you believe a child has provided personal information to PayShare, contact [email protected] and we will delete or otherwise handle that information as required.

Depending on how you interact with PayShare, we may collect:

• contact details you provide (such as email address and, where used, display name);

• website contact or partner-enquiry fields (such as name, business name, and message);

• Session and participant identifiers and Session progress (for example joined, in checkout, authorised, or paid);

• share amount and Session currency;

• support correspondence; and

• technical or security information needed to operate and protect the service (for example logs and, where configured, bot-protection tokens).

In the standard hosted pay flow, participant email is required so PayShare can send receipts and important payment or Session communications.

PayShare may also receive personal or business information from merchants/platforms, payment providers (currently Stripe for the live PayShare for Stripe release), and related integration systems so Sessions can be created, authenticated, reconciled, and completed.

Examples can include merchant order references, external payment references, payment status, integration or account identifiers, and booking or order context supplied for the Session.

We collect this information because it is necessary to operate the Session, verify payment state, support merchants/platforms, and meet security, billing, and legal obligations, subject to applicable privacy law (including rules about collection from someone other than you).

We use personal information to:

• operate PayShare Sessions and authenticate participants;

• send receipts and important payment/Session notices;

• process or coordinate refunds or releases where supported;

• verify payment and completion state;

• prevent fraud, abuse, and security incidents;

• troubleshoot and provide support;

• support merchant/platform integrations;

• perform billing, audit, and reconciliation;

• meet legal or regulatory obligations; and

• respond to contact, partner, or support requests.

We do not use participant Session email addresses for unrelated marketing unless the person has separately consented or another lawful basis applies.

Where the hosted Session flow requires email (or name and email), you may be unable to continue or pay without providing it.

Some website contact-form fields may be optional depending on the form. If you choose not to provide optional information, we may still respond using the details you do provide, but support or onboarding may be limited.

PayShare does not collect or store full card numbers in the hosted Session flow. Payment-method details are entered into the merchant/platform’s payment-provider checkout (for example Stripe).

PayShare may handle payment metadata needed to operate Sessions, such as external payment references, amounts, currency, and payment status.

PayShare uses only functional cookies needed to run the service — for example keeping a signed merchant, partner, or admin session, remembering a guest’s join slot during a Session, and similar security or anti-abuse measures.

We do not use advertising cookies or analytics tracking pixels on PayShare Session pages or the current public website. If that changes, we will update this statement.

You can block cookies in your browser. Session join, partner dashboard, and similar features may then not work.

We do not sell personal information. We may share information with:

• the merchant or platform responsible for the underlying booking or order;

• the payment provider where required to process or reconcile payments;

• infrastructure and database providers;

• transactional email providers;

• security or bot-protection providers where configured; and

• professional advisers, regulators, or law enforcement where lawfully required.

Current operational categories include hosting (for example Vercel), database hosting (for example Neon), transactional email (for example Brevo), and Stripe as the current live payment provider for PayShare for Stripe.

Our infrastructure and service providers may store or process information outside New Zealand.

Where personal information is disclosed to overseas providers, PayShare takes appropriate steps to protect that information and to comply with applicable cross-border privacy requirements. Cloud processing arrangements can vary by provider and configuration.

We retain personal information only for as long as needed for the purposes described above, including Session operation, merchant support, billing/audit evidence, security, and legal obligations.

Different categories may be retained for different periods (for example Session/payment audit records, billing records, support correspondence, logs, and backups).

The current product does not automatically purge historic Session records. Retention is managed operationally pending a formal retention schedule.

You may request access to, or correction of, personal information PayShare holds about you by contacting [email protected].

For New Zealand Privacy Act requests, we aim to respond as soon as reasonably practicable and within 20 working days, subject to lawful extensions or withholding grounds.

Depending on the law that applies to you, you may also have additional rights such as deletion or restriction. NZ privacy law does not create a universal right to deletion equivalent to some overseas regimes.

Booking, fulfilment, and some payment records may also be held by the merchant/platform or payment provider — contact them for information they control.

If you have a privacy concern, contact PayShare’s Privacy Officer first at [email protected].

If you are not satisfied with our response, New Zealand individuals may complain to the Office of the Privacy Commissioner. See privacy.org.nz for current complaint information.

We implement appropriate technical and organisational measures to protect personal information. No method of transmission or storage is completely secure.

PayShare will handle notifiable privacy breaches in accordance with applicable law.

We may update this Privacy Statement as our service or legal obligations change. We will update the date above and, where appropriate, provide additional notice of material changes.