Privacy Policy — Find Payment Partner

1. Who we are

Find Payment Partner ("the Platform", "we", "us") is published by Ai Risk Intelligence AS, a company established in Norway. For the purposes of the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and equivalent UK/EEA data protection law, Ai Risk Intelligence AS is the data controller for personal data processed via https://findpaymentpartner.com.

Contact for privacy matters (access, rectification, erasure, objection, portability, complaints): ah@airi.no.

2. What personal data we process

Information you submit. When you complete the partner-matching wizard, request expert review, claim a profile, submit a listing, or contact us, we process the information you provide (e.g. name, work email, company, role, country, product details, volumes, message content).
Technical data. Server logs generated automatically when your browser requests a page — IP address, user-agent, referring URL, timestamp — used to operate the site, prevent abuse and maintain security.
Cookies and local storage. Strictly necessary storage only (e.g. wizard progress). See our Cookie Policy.
Public and regulatory data. Information about payment providers listed on the Platform comes from public registers (e.g. EBA EUCLID, FCA, Finanstilsynet), public filings and provider-submitted data. Where a listed provider is a natural person (e.g. a named contact), that data is processed under the legitimate-interest basis set out below.

3. Why we process it, and on what legal basis

To operate the Platform and respond to your requests (Art. 6(1)(b) GDPR — performance of a contract or pre-contractual steps).
To keep the site secure, prevent fraud and abuse, and improve reliability (Art. 6(1)(f) — legitimate interests).
To publish independent, factual intelligence about payment providers based on public and provider-submitted sources (Art. 6(1)(f) — legitimate interests in journalism / market transparency, balanced against the rights of data subjects).
To comply with legal obligations, including responding to lawful requests from regulators or courts (Art. 6(1)(c)).

We do not use your personal data for automated decision-making with legal or similarly significant effects, and we do not sell personal data.

4. Sharing and international transfers

We share personal data only with service providers that help us run the Platform (hosting, email delivery, error monitoring), acting as processors on our documented instructions. Where such providers are located outside the EEA/UK, transfers are covered by an adequacy decision or by the European Commission's Standard Contractual Clauses with appropriate supplementary measures.

5. Retention

Wizard and contact submissions: kept only as long as needed to respond, and then archived for up to 24 months for quality and dispute purposes.
Server and security logs: typically 30–90 days.
Content published about providers: kept as part of the editorial record; correction and takedown requests are handled per Section 6.

6. Your rights under the GDPR

You have the right to:

access your personal data and receive a copy;
have inaccurate data rectified;
request erasure ("right to be forgotten") where applicable;
restrict or object to processing, including processing based on legitimate interests;
data portability where the processing is based on consent or contract;
withdraw consent at any time where processing is based on consent, without affecting the lawfulness of prior processing;
lodge a complaint with a supervisory authority — in Norway, this is Datatilsynet (datatilsynet.no); you may also complain to the authority in your country of residence.

To exercise these rights, email ah@airi.no. We respond within one month, extendable by two further months for complex requests, in line with Art. 12(3) GDPR.

7. Security

We apply technical and organisational measures appropriate to the risk, including TLS in transit, access controls, least-privilege administration, and monitoring. No online service is 100% secure; you use the Platform at your own risk.

8. Children

The Platform is a business-to-business service and is not directed at children under 16. We do not knowingly collect data from children.

9. Changes to this policy

We may update this policy to reflect changes in our practices or the law. Material changes are indicated by the "Last updated" date above.

10. Contact

Ai Risk Intelligence AS, Norway. Privacy contact: ah@airi.no.