Draft: not yet reviewed by legal
Privacy notice
JTPay is JTamatic Group's payment service. This notice says which details JTPay takes when you pay, and why. It says who else receives them, and for how long they are kept.
The details JTPay takes
The pay page asks for three details. The merchant may enter them for you.
- Your full name, so each payment shows who paid.
- Your mobile number, because UnionBank needs it to take the payment.
- Your email, because UnionBank needs it to take the payment.
JTPay staff use all three to look into a payment you ask about. The merchant you pay receives your name, mobile number and email with that payment.
Card and e-wallet details are typed on UnionBank's page, never on JTPay's.
Who else receives them
- UnionBank receives your full name, mobile number and email to take the payment. JTPay is a biller under UnionBank's UPay.
- Microsoft Azure hosts JTPay in Hong Kong, in its East Asia region. Your details are stored there.
Only these two others receive your details.
What staff see
JTPay staff see your details in full when they look into a payment. Files staff export show your email and mobile number masked.
How long they are kept
Your details are kept as long as the law requires for payment records, then deleted.
Your rights
The Data Privacy Act of 2012 gives you these rights over your details:
- to be told how they are used, as this notice does;
- to see the details JTPay holds about you;
- to have wrong details corrected;
- to object to how they are used;
- to have them blocked or deleted;
- to get a copy of them;
- to be paid for damage caused by their misuse;
- to file a complaint with the National Privacy Commission.
Questions about your details
To use a right, write to the data protection officer.
Data protection officer: to be added
About a payment, write to ops@jtamatic.com with your payment reference. It starts with JTP.