Privacy Policy

This Privacy Policy describes how NexaPay Pte. Ltd. ("NexaPay", "we", "us", or "our"), incorporated in Singapore (UEN: 202417570W), collects and handles personal data through the b2b-nexapay.com marketing website.

This website is an informational resource. It does not provide financial services directly. No payment processing, account management, or merchant services are delivered through this website to unauthenticated visitors.

NexaPay complies with the Singapore Personal Data Protection Act 2012 (PDPA) as amended. Where applicable, we also respect the obligations of LGPD (Brazil), PIPEDA (Canada), and applicable US state privacy laws in connection with our overall business operations.

This marketing website collects a minimal amount of personal data. We do not require registration, login, or any form submission to browse the site.

Category	What We Collect	How It Is Collected
Technical	IP address, browser type, device type, pages visited, time on site	Automatically via server logs and analytics cookies
Contact	Name, email address, business name, inquiry message	Only when you voluntarily submit an inquiry form or contact us directly
Communication	WhatsApp or email correspondence content	Only when you initiate contact with our team

We do not collect sensitive personal data, financial account details, or identity documents through this website. Those are collected exclusively within the authenticated merchant platform under a separate agreement.

We use the limited data collected on this website solely for the following purposes:

Purpose	Data Used
Responding to your inquiry	Contact data you submitted
Website analytics and performance improvement	Technical/anonymised browsing data
Security and fraud prevention	IP address and technical data
Legal compliance	Any data where required by law

We do not use your data for automated decision-making, profiling, or targeted advertising.

Under the Singapore PDPA, we process personal data on the following bases:

Consent — when you voluntarily submit an inquiry form, you consent to us using your contact information to respond.

Legitimate Interests — for technical data collected automatically to maintain the security and functionality of our website.

Legal Obligation — where we are required to retain or disclose data under applicable law.

You may withdraw consent at any time by contacting us at contact@b2b-nexapay.com. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

We do not sell, rent, or trade your personal data. We may share limited data with the following categories of recipients:

Recipient	Reason
NexaPay Group entities	Internal operations and support (NexaPay Brazil LTDA, NexaPay Fintech Inc, NexaPay Fintech LLC)
Website hosting and analytics providers	Technical infrastructure required to operate this website
Regulatory or government authorities	Where required by law or court order

Any third-party service providers are contractually required to handle personal data in accordance with applicable privacy laws and our instructions.

Inquiry and contact data is retained for up to 24 months from the date of last contact, after which it is securely deleted or anonymised.

Technical/analytical data is retained in aggregated, anonymised form and does not identify individual visitors.

We retain data for longer periods only where required by applicable law or to defend against legal claims.

Under the Singapore PDPA, you have the right to:

Right	What This Means
Access	Request a copy of the personal data we hold about you
Correction	Request correction of inaccurate or incomplete data
Withdrawal of Consent	Withdraw consent to processing at any time
Erasure	Request deletion of your data where no legal retention obligation applies

To exercise any of these rights, please contact our Data Protection Officer at the address below. We will respond within 30 days.

You also have the right to lodge a complaint with the Personal Data Protection Commission (PDPC) at www.pdpc.gov.sg.

We implement industry-standard technical and organisational measures to protect the limited personal data processed through this website, including HTTPS encryption, access controls, and regular security reviews.

In the event of a personal data breach that is likely to result in significant harm, we will notify the PDPC and affected individuals in accordance with the PDPA mandatory breach notification requirements.

NexaPay has designated a Data Protection Officer as required under the Singapore PDPA. For all privacy-related inquiries, requests, or complaints:

We may update this Privacy Policy from time to time. Changes will be published on this page with an updated date. Continued use of this website after changes are posted constitutes acceptance of the updated policy.