Privacy policy

1. Who We Are

Ummah Services Ltd is a company incorporated in England and Wales and operates a technology platform that enables businesses to access payment and financial services.

Nova Advisory Ireland Limited is an affiliated entity and acts as a regulated payment facilitator responsible for payment processing, onboarding, and compliance.

Depending on the context, Ummah and Nova may act as independent data controllers or jointly process personal data.

2. Scope of this Policy

This Privacy Policy applies to:

- merchants using the Ummah platform;

- individuals associated with merchants, including directors, shareholders, and beneficial owners;

- users interacting with our website or services.

3. Personal Data We Collect

We may collect and process the following categories of personal data:

Identity Information: name, date of birth, nationality, identification documents, and verification data.

Business Information: company details, registration information, ownership structure, and business activities.

Contact Information: email address, phone number, and correspondence.

Financial Information: bank account details, transaction data, and payment information.

Verification Data: KYC/KYB documentation, sanctions screening results, and risk assessments.

Technical Information: IP address, device information, browser type, and usage data.

Transaction Information: details of payments processed through the platform, including amounts, counterparties, and timestamps.

4. How We Collect Data

We collect personal data:

- directly from you during onboarding and account use;

- from Nova and payment processing partners;

- from identity verification providers (such as Sumsub);

- from publicly available sources and regulatory databases;

- automatically through the use of our platform and website.

5. How We Use Personal Data

We use personal data for the following purposes:

To provide and operate the platform and services.

To onboard merchants and verify identity;

To comply with legal and regulatory obligations, including anti-money laundering and fraud prevention;

To process and monitor transactions;

To manage risk, detect fraud, and prevent misuse of services;

To communicate with users and provide support;

To improve and develop our services.

6. Legal Basis for Processing

We process personal data on the following legal bases:

Performance of a contract, where processing is necessary to provide services;

Compliance with legal obligations, including regulatory and anti-money laundering requirements;

Legitimate interests, including fraud prevention, risk management, and service improvement;

Consent, where required by law.

7. Data Sharing

We may share personal data with:

Nova Advisory Ireland Limited for payment processing, onboarding, and compliance;

Payment processors and acquiring partners, including Adyen;

Identity verification providers (such as Sumsub);

Financial institutions, banks, and payment networks;

Regulators, law enforcement agencies, and governmental authorities;

Professional advisors and service providers.

We may also share data where required to prevent fraud, enforce our terms, or comply with Applicable Law.

8. International Data Transfers

Personal data may be transferred to and processed in countries outside the United Kingdom or European Economic Area. Where such transfers occur, we ensure appropriate safeguards are in place in accordance with applicable data protection laws.

9. Data Retention

We retain personal data for as long as necessary to:

- provide our services;

- comply with legal and regulatory obligations;

- resolve disputes and enforce agreements.

In many cases, data is retained for a minimum period required under financial regulations, which may be five (5) years or longer.

10. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. However, no system can be guaranteed to be completely secure.

11. Your Rights

Depending on your location, you may have the right to:

- access your personal data;

- request correction of inaccurate data;

- request deletion of your data;

- restrict or object to processing;

- request data portability.

These rights may be subject to limitations, particularly where data must be retained for legal or regulatory purposes.

12. Cookies and Tracking

We may use cookies and similar technologies to improve user experience, analyse usage, and support platform functionality. Further details are available in our cookie notice.

13. Third-Party Services

Our services rely on third-party providers, including payment processors and verification partners. These providers may process personal data in accordance with their own privacy policies.

14. Changes to this Policy

We may update this Privacy Policy from time to time. Updated versions will be published on our website or platform. Continued use of the services constitutes acceptance of any changes.

15. Contact

If you have any questions or requests regarding this Privacy Policy, please contact:

Email: compliance@ummah.com