Privacy Policy

Effective date: June 2025

Quanthio FZE ("we", "us", "our") operates wayto.you and is committed to protecting your personal data in accordance with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and other applicable regulations.

1. Data Controller

The data controller is Quanthio FZE, Block B-B41-181, SRTI Park, Sharjah, Sharjah 1111, UAE. For privacy enquiries, contact quanthiofze@gmail.com.

2. Data We Collect

We collect only the minimum personal data necessary to provide our service:

• Email address — provided by senders and recipients to identify parties to a transaction.
• Payment amounts and currency — required to process transfers.
• Transaction metadata — timestamps, payment identifiers, status updates, and processing logs.
• Device and usage data — IP address, browser type, and page interactions, collected automatically for fraud prevention and service improvement.

We do not collect card numbers, bank account details, or government identification documents directly. Such data is handled exclusively by our regulated payment processors.

3. Purpose of Processing

We process your personal data for the following purposes:

• To facilitate payment transfers between senders and recipients.
• To send transaction notifications and claim links via email.
• To prevent fraud and detect suspicious activity.
• To comply with applicable legal and regulatory obligations.
• To improve and maintain the wayto.you service.

4. Data Sharing

We share your data only as strictly necessary:

• Lean Technologies — open banking payment processor, for bank transfer initiation and verification.
• Tap Payments — card and Apple Pay processor, for card payment processing.
• SendGrid (Twilio) — transactional email delivery service, for sending payment notifications.
• Legal authorities — where required by law, court order, or regulatory request.

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

5. Data Retention

We retain financial transaction records for 7 years in accordance with UAE commercial and financial record-keeping requirements. Non-financial personal data (such as email addresses used for notifications only) may be deleted earlier upon request, subject to the retention obligations above.

6. Your Rights

Under UAE PDPL and applicable law, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Correction — request correction of inaccurate or incomplete data.
• Deletion — request deletion of your data, except where retention is required by law (e.g., financial records).
• Restriction — request that we restrict processing of your data in certain circumstances.
• Portability — receive your data in a structured, commonly used format.

To exercise any of these rights, email quanthiofze@gmail.com. We will respond within 30 days.

7. Cookies

wayto.you uses only functional cookies strictly necessary for the operation of the service (e.g., session management). We do not use tracking, advertising, or analytics cookies. No consent banner is displayed because no non-essential cookies are set.

8. Security

We implement industry-standard security measures including HMAC token verification, TLS encryption in transit, and secure server-side storage. Payment credentials are never stored on our servers and are processed exclusively by our PCI-DSS compliant payment partners.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with a revised effective date. Continued use of wayto.you constitutes acceptance of the updated policy.

10. Contact

For any privacy-related queries, please contact quanthiofze@gmail.com.