PPRO US State-Specific Privacy Notice

Last updated: 30 January 2026

Who are we

we are PPRO, Inc, part of the PPRO Group. We are a B2B payment services company. We connect merchants, Payment Service providers and Local Payment Systems. We are intermediaries who make sure you can purchase from the merchant of your choice using the payment method of your choice.

Your payment never stops with us, but is immediately routed to the intended recipient. As payment services providers, we cannot initiate a refund, or a chargeback. Please refer to your bank, or to the payment system you used, to initiate such processes.

This US State-Specific Privacy Notice applies to US residents and supplements the PPRO Privacy Notice to include additional disclosures required by certain US state privacy laws. Any defined terms used throughout have the meaning assigned in the PPRO Privacy Notice.

California residents

The California Consumer Privacy Act (“CCPA”) requires us to provide specific disclosures about the personal information we collected in the preceding 12 months.

The categories of personal information that we collect from you depend on your interactions and engagement with us. For example, we collect:

Direct Identifiers, such as your name, address, date of birth, gender, age, IP address, online identifiers, email address, phone number, payment card or financial account numbers and related information required to process payments, and other similar identifiers. We collect this information to provide you with our services, and to manage your enquiries.
Information Subject to Protection Under Law, such as the identifiers above, which we use to provide our services to our client’s customers, to conduct studies, research, and statistical analyses, improve and continuously develop our services or secure our services.
Non-precise geolocation, which we use to direct your requests to the relevant team in our group, run analytics to better understand how you interact with our website and services.
Internet Activity Information, such as your cookies, browser and device type, and information regarding your interactions with pages you visit on our Website. We collect this information to understand your use of the Website and our Services.
Professional and Employment-Related Information, such as information about your current employment, salary, professional degrees and certifications, and education background. We collect this information to manage your employment application and, if you are successful, your employment engagement with us.

Some of the information we collect may be considered sensitive personal information under privacy laws, such as your social security number and certain financial information. We use your sensitive personal information only for legitimate business purposes, including to (i) perform services or provide goods reasonably expected by an average person; (ii) detect security incidents; (iii) resist malicious, deceptive or illegal actions; (iv) ensure the physical safety of individuals; (v) perform or provide internal business services; or (vi) verify or maintain the quality or safety of a service or device. We do not sell your personal information, either sensitive or not.

We may collect personal information directly from you and automatically through our use of cookies and other data collection technologies on our Website. We may also collect your personal information from third-party sources.

We may use your information as described in the PPRO Privacy Notice.

We may share each of the above categories of personal information with the third parties described in the PPRO Privacy Notice, for the sole purpose of providing our services.

We do not sell personal information, of any kind, for any reason.

We do not knowingly sell the personal information of minors under 16.

We will retain your personal information as described in the PPRO Privacy Notice.

California Individual Privacy Rights:

The right to know. You have the right to request to know what personal information we have collected about you, including the categories of personal information we have collected, the categories of sources from which we collected it, the business or commercial purpose for collecting, selling, or sharing personal information, the categories of third parties to whom we disclosed personal information, and the specific pieces of personal information we collected.
The right to correct. You have the right to request that we correct inaccurate personal information that we maintain about you.
The right to deletion. You have the right to request that we delete the personal information that we have collected or maintain about you. We may deny your request as permitted by law under certain circumstances, such as if we need to comply with our legal obligations or complete a transaction for which your personal information was collected. If we deny your request for deletion, we will let you know the reason why such request was denied.
The right to data portability. You have the right to request a copy of your personal information in an accessible format.
The right to opt out of the sale or sharing of your personal information. We do not sell your personal information. We share your personal information only with your consent (e.g. to approach you with information about our services, and you can opt out of this by contacting us) or for contractual obligations (i.e. to complete a transaction you have initiated via one of our partners –you can not opt out of this, but you can ask the merchant or your financial institution for a refund).
The right to equal service. If you choose to exercise any of these rights, we will not discriminate against you in any way. If you exercise certain rights, understand that you may be unable to use or access certain features of the Websites or our services or properties.
The right to appeal. If we do not grant your consumer request, you may have the right to appeal that denial.

If you are a resident of California, unless your requests are unfounded, excessive or repetitive, you may exercise your rights free of charge. To exercise your rights, please contact us by email at data@PPRO.com.

Where required by applicable law, we will take steps to verify your identity before processing your request. We will not fulfill your request unless you have provided sufficient information for us to reasonably verify you are the individual about whom we collected personal information. We may request additional information about you so that we can match the information you provide to information we already maintain about you. We will only use the personal information provided in the verification process to verify your identity or authority to make a request and to track and document request responses, unless you initially provided the information for another purpose.

You may use an authorized agent to submit a request to know or a request to delete. When we verify your agent’s request, we may verify both your and your agent’s identity and request a signed document from you that authorizes your agent to make the request on your behalf. To protect your personal information, we reserve the right to deny a request from an agent that does not submit proof that they have been authorized by you to act on their behalf.

Shine the Light: California Civil Code Section 1798.83 gives California residents the right to request from us once per calendar year certain information regarding our disclosure of their personal information to third parties for those third parties’ direct marketing purposes. We do not share your personal information with any third parties for their own marketing purposes.

California Delete Act Metrics: Based on available information, we compile the following metrics about California privacy requests we have received between January 1 and December 31, every year and publish them online:

California Requests Identified	0
Requests Complied With	0
Requests Denied	0
Median Response Timeline	0 days
Mean Response Timeline	0 days

Other U.S. State Privacy Rights

CO, CT, DE, IN, KY, MD, MI, MO, NE, NH, NJ, OR, RI, TN, TX, VA

We provide residents of Colorado, Connecticut, Delaware, Indiana, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, and Virginia with the privacy rights required under applicable law as further described below.

Consumer Privacy Rights

If you are a resident of Colorado, Connecticut, Delaware, Indiana, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, and Virginia you may have the following rights, subject to any applicable exemptions or limitations:

The right to access. You have the right to confirm whether we are processing your personal information and to access such personal information
The right to correct. You have the right to request that we correct inaccurate personal information that we maintain about you.
The right to delete. You have the right to request that we delete your personal information under specific circumstances.
The right to opt-out. You have the right to object or opt out of certain types of processing, including: (1) processing for the purpose of targeted advertising, (2) processing for the purpose of the sale of personal information, and (3) processing for the purpose of certain types of profiling and automated decision- making. We do not engage in either targeted advertising, sale of personal information, profiling, and automated decision-making. We are therefore outside of the scope for the right to opt out.
The right to data portability. You have the right to request a copy of your personal information in an accessible format.
The right to equal service. If you choose to exercise any of these rights, we will not discriminate against you in any way. If you exercise certain rights, understand that you may be unable to use or access certain features of the Sites or our services or properties.

If you are a resident of Colorado, Connecticut, Delaware, Indiana, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, and Virginia, to exercise your rights, please contact us at data@PPRO.com.

Where required by applicable law, we will take steps to verify your identity before processing your request. We will not fulfill your request unless you have provided sufficient information for us to reasonably verify you are the individual about whom we collected personal information. We may request additional information about you so that we can match the information you provide to information we already maintain about you. We will only use the personal information provided in the verification process to verify your identity or authority to make a request and to track and document request responses, unless you initially provided the information for another purpose.

You may use an authorized agent to submit a request to know or a request to delete. When we verify your agent’s request, we may verify both your and your agent’s identity and request a signed document from you that authorizes your agent to make the request on your behalf. To protect your personal information, we reserve the right to deny a request from an agent that does not submit proof that they have been authorized by you to act on their behalf.

IA, UT

We provide residents of Iowa or Utah with the privacy rights required under applicable law as further described below.

Consumer Privacy Rights

If you are a resident of Iowa or Utah you may have the following rights, subject to any applicable exemptions or limitations:

The right to access. You have the right to confirm whether we are processing your personal information and to access such personal information.
The right to delete. You have the right to request that we delete your personal information under specific circumstances.
The right to data portability. You have the right to request a copy of your personal information in an accessible format.
The right to equal service. If you choose to exercise any of these rights, we will not discriminate against you in any way. If you exercise certain rights, understand that you may be unable to use or access certain features of the Sites or our services or properties.

If you are a resident of Iowa or Utah, to exercise your rights, please contact us at data@PPRO.com.

Where required by applicable law, we will take steps to verify your identity before processing your request. We will not fulfill your request unless you have provided sufficient information for us to reasonably verify you are the individual about whom we collected personal information. We may request additional information about you so that we can match the information you provide to information we already maintain about you. We will only use the personal information provided in the verification process to verify your identity or authority to make a request and to track and document request responses, unless you initially provided the information for another purpose.

You may use an authorized agent to submit a request to know or a request to delete. When we verify your agent’s request, we may verify both your and your agent’s identity and request a signed document from you that authorizes your agent to make the request on your behalf. To protect your personal information, we reserve the right to deny a request from an agent that does not submit proof that they have been authorized by you to act on their behalf.

Browser Signals

Do Not Track

Some web browsers have “Do Not Track” or similar features that allow you to tell each website you visit that you do not want your activities on that website tracked. At present, our Website does not respond to “Do Not Track” signals and consequently, the Website will continue to collect information about you even if your browser’s “Do Not Track” feature is activated. We only track the pages visited on our own Website (Web analytics), and do not engage in cross-site tracking.

Global Privacy Control (GPC)

Global Privacy Control (GPC) allows individuals to automatically signal their privacy preferences to websites and other online services through their browser or through an extension. If we receive a GPC signal to opt-out of website tracking, we will honor such requests.

Changes

This Policy may be revised from time to time, so please revisit this page to remain fully informed of our privacy practices. When we post revisions to this Privacy Policy, we will revise the “Last updated” date at the top of this page, which also serves as the effective date of the current Privacy Policy.