Privacy Policy

A. Commitment

M3 Innovative Insights Limited (operating as RubitPay, hereinafter "RubitPay", "we", "us", or "our") is dedicated to upholding the privacy of your personal information. We are committed to complying with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong to protect your privacy and ensure the security of your data.

B. Information We Collect

RubitPay gathers information about you through our website, API interactions, or direct contact. This may include:

• Registration data: name, address, telephone number, mobile number, email address, company name, company registration number, and country of incorporation
• Account data: transaction history, account balances, settlement records, and API usage logs
• Technical data: device information, IP addresses, browser type, and internet cookie data
• Communication data: records of correspondence with our support and sales teams
• Verification data: KYB/KYC documents obtained during merchant onboarding

RubitPay may also obtain information from third-party sources such as credit checking bureaus, identity verification services, or government authorities where permitted by law.

C. How We Use Your Information

We use collected information to:

• Provide, operate, and improve our payment processing services
• Process transactions and send related notifications
• Conduct KYB/KYC verification and comply with AML obligations
• Respond to enquiries and provide customer support
• Detect, prevent, and investigate fraud and security incidents
• Comply with applicable laws and regulatory requirements
• Send service-related communications and important updates

D. Protection of Personal Data

RubitPay implements appropriate technical and organisational measures to safeguard personal and transactional data, ensuring compliance with the Personal Data (Privacy) Ordinance (Cap. 486) and all other applicable laws. These measures include:

• Encryption of data in transit using TLS/HTTPS
• Encryption of sensitive data at rest
• Access controls and role-based permissions for staff
• Regular security assessments and PCI DSS compliance
• Incident response procedures for data breaches

E. Data Sharing and Disclosure

We do not sell your personal data to third parties. We may share data with:

• Payment processors and banking partners necessary to complete transactions
• Regulatory authorities where required by law or court order
• Service providers acting as data processors on our behalf under confidentiality agreements
• Group companies within the M3 Innovative Insights corporate structure

F. Data Retention

We retain personal data for as long as necessary to fulfil the purposes for which it was collected, and to comply with legal, regulatory, and contractual obligations. Transaction records are typically retained for a minimum of 5 years in accordance with financial regulations.

G. Your Rights

Under the Personal Data (Privacy) Ordinance (Cap. 486), you have the right to:

• Request access to the personal data we hold about you
• Request correction of inaccurate personal data
• Request information about our data policies and practices

To exercise these rights, please contact us at sales@rubitpay.com.

H. Cookies

Our website uses cookies to improve your browsing experience and analyse website traffic. Cookies are small text files stored on your device. You can control cookie settings through your browser, though disabling certain cookies may affect website functionality. We do not use cookies for advertising or tracking across third-party websites.

I. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.

J. Contact Us

For privacy-related enquiries or to exercise your data rights, please contact our Data Protection team at sales@rubitpay.com or visit our Contact page.