Privacy notice
This notice explains how Olivet Payments Ltd. ("Olivet", "we") collects, uses and protects personal information in connection with our payment services. We are a Canadian company subject to the Personal Information Protection and Electronic Documents Act (PIPEDA) and the Personal Information Protection Act of British Columbia. Where we process personal information of individuals in Brazil, we also observe the Lei Geral de Proteção de Dados (LGPD).
Who we are
Olivet Payments Ltd., incorporated in British Columbia, Canada (BC1569684), registered office at 1285 West Broadway, Suite 600, Vancouver, BC V6H 3X8. We are registered with the Financial Transactions and Reports Analysis Centre of Canada (FINTRAC) as a money services business. Questions about this notice: compliance@olivetpay.com.
Information we collect
- Merchants and their representatives: legal name, registration and tax identifiers, address, bank account details for payouts, identity documents of directors and beneficial owners, contact details, and records of our communications.
- Payers (customers of our merchants): full name, Brazilian tax number (CPF), phone number, email, payment method data as processed by the payment partners, and the transaction details.
- Website visitors: technical data such as IP address, browser type and pages viewed, collected through server logs. We do not use advertising trackers.
Why we use it
- To onboard merchants and verify their identity and business, as required by Canadian anti-money-laundering law (PCMLTFA) and our own risk policies.
- To process, settle and reconcile payments, and to provide the merchant dashboard and support.
- To detect and prevent fraud, money laundering and misuse of the service.
- To meet record-keeping and reporting obligations towards FINTRAC and other authorities, and towards the financial institutions that execute collection, foreign exchange and remittance.
- To communicate about the service, including security and operational notices.
Who we share it with
Financial institutions and payment partners that collect payments in Brazil and execute foreign-exchange conversion and remittance; identity-verification and screening providers; cloud hosting and email providers; professional advisers; and public authorities when the law requires it. We do not sell personal information.
International transfers
Information is processed in Canada, Brazil and the countries where our service providers operate, including the United States. We use contractual and technical safeguards appropriate to each transfer.
Retention
Merchant and transaction records are kept for at least five years after the end of the relationship or the transaction, as required by Canadian anti-money-laundering law, and longer where another law requires it. Website logs are kept for a short period for security purposes.
Your rights
You may ask to access or correct your personal information, withdraw consent where consent is the basis for processing, or raise a complaint. Write to compliance@olivetpay.com. You may also contact the Office of the Privacy Commissioner of Canada or, for Brazilian data subjects, the Autoridade Nacional de Proteção de Dados.
Security
We use encryption in transit, access controls, logging and vendor due diligence. No method is perfectly secure; if we become aware of a breach affecting you, we will notify you and the authorities as the law requires.
Changes
We may update this notice. The date at the top shows the current version.