Privacy policy

Last updated October 27, 2026

This policy explains what personal data CashOrca collects, why, and the choices you have. It covers our website, dashboard, mobile app and payment services.

What we collect

• Details you give us: name, work email, company, website and information about your business when you contact us or sign up.
• Payment data when merchants process payments with us: amount, currency, payment method details (card numbers are tokenised by our PCI DSS certified partners), customer email and country.
• Technical data: IP address, device and browser type, and logs needed to keep the service secure.

Why we use it

• To provide and secure the payment service, including fraud prevention and routing payments to acquirers.
• To reply to enquiries and onboard merchants, including identity and business verification required by law.
• To meet legal obligations such as anti-money-laundering rules and record keeping.

Who we share it with

Licensed acquirers, payment institutions and card schemes that process payments; identity verification and fraud prevention providers; hosting providers; and authorities when the law requires it. We do not sell personal data.

Cookies

The website uses only cookies that are strictly necessary for it to work. If we add analytics or marketing cookies, we will ask for your consent first.

How long we keep it

Enquiry data for up to 24 months. Payment and verification records for as long as financial regulations require, normally five to ten years.

Your rights

You can ask for access to, correction or deletion of your personal data, or object to how we use it. Email us at info@cashorca.com.