How we handle your information.

1. Who this policy covers

This is the privacy policy of payFURL Pty Ltd (ABN 19 695 198 675) and its related bodies corporate (together “payFURL”, “we”, “us”), for payfurl.com. It covers information collected through payfurl.com (the demo request form, the whitepaper download form, and general site analytics), the only payFURL web property this policy addresses. It does not cover the payFURL platform itself (the client dashboard behind login).

payFURL is a payment orchestration platform. We do not hold or touch client funds, and this website does not collect payment card details. Card data is handled entirely within the payFURL platform, not through this marketing site.

2. What personal information we collect

Through this website, we collect:

• Information you provide directly: when you request a demo call, download the whitepaper, or otherwise contact us, including your name, email address, phone number, company name, and any message content you submit.
• Information collected automatically: device and browser type, IP address, pages viewed, referring site, and general location (country/city) collected via the analytics tools listed in section 3.
• Information from third parties: when you submit a form, our form-enrichment provider (Apollo.io) may supplement what you gave us with additional publicly available professional information (e.g. job title, company details) associated with your email address, to help our sales team respond appropriately.
• Visitor identification: separately from form submissions, Apollo.io may also attempt to identify the company associated with an anonymous website visitor from their IP address, even before that visitor has given us any information directly.

We do not knowingly collect information from children, and this site is not directed at children.

3. Cookies and tracking technologies

This site uses the following, confirmed directly against the live site:

Provider	Purpose	Cookies set
Google Analytics	Site usage analytics	_ga, _gid, _ga_*
Google Tag Manager	Loads/manages the tags on this page	(none directly; loads the above)
Google reCAPTCHA	Spam/bot protection on our forms	Set on google.com, not this domain
HubSpot	Form processing and marketing follow-up	hubspotutk, __hssrc, __hstc
Apollo.io	Visitor identification and form enrichment	Set on apollo.io, not this domain
Ahrefs Analytics	Site/SEO analytics	Set on ahrefs.com, not this domain

You can control or delete cookies through your browser settings. Blocking cookies may affect form submission and site functionality (in particular, HubSpot’s reCAPTCHA-protected forms require cookies to function).

4. Why we collect, use and hold this information

We use personal information to:

• Respond to demo requests and enquiries
• Deliver the whitepaper you requested
• Understand how visitors use the site, to improve it
• Qualify and prioritise sales enquiries (via Apollo’s enrichment)
• Meet our legal and regulatory obligations

If you download the whitepaper, we’ll also send you related marketing emails via HubSpot. These emails are tracked (opens and clicks), and each one includes an unsubscribe link. You can opt out at any time.

We do not sell personal information to third parties. Apollo’s terms of service permit them to use information we submit to grow, enrich and verify their Contributor Database, a shared database available to other Apollo customers, subject to de-identification safeguards Apollo applies before doing so.

5. Who we disclose information to

We disclose personal information to the service providers listed in section 3, each of which processes data under their own privacy policy:

• Google (Analytics, Tag Manager, reCAPTCHA): a US-headquartered company; data may be processed in the United States.
• HubSpot: a US-headquartered company; form submissions and contact records are stored in HubSpot’s CRM, with data processed in the United States.
• Apollo.io: a US-headquartered company; form submissions are enriched via Apollo’s service, with data processed in the United States.
• Ahrefs: a Singapore-headquartered company; site and SEO analytics. Ahrefs’ own privacy policy confirms they collect IP addresses as part of standard analytics data, which may constitute personal information under the APPs.

This means personal information collected through this site is likely to be disclosed to recipients in the United States (via Google, HubSpot and Apollo) and Singapore (via Ahrefs). Our own hosting (see section 6) is based in Australia. Before disclosing information to these providers, we considered whether their information-handling practices provide a standard of protection for your personal information that is at least equivalent to the Australian Privacy Principles. Each provider is independently audited against recognised security standards (for example, ISO 27001 and SOC 2 Type II) and is contractually bound by data processing terms that impose privacy and security obligations on how they handle personal information. We consider these measures to be reasonable steps for the purposes of APP 8.1.

6. Data security

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure. This includes encrypting data in transit (via HTTPS), limiting access to personal information to staff who need it to do their jobs, and maintaining routine backups.

This website’s own forms do not process payment card data; card data is handled entirely within the payFURL platform, a separate system from this marketing website.

Where a data breach involving personal information is likely to result in serious harm, we will notify the individuals affected and the Office of the Australian Information Commissioner, consistent with the Notifiable Data Breaches scheme.

7. How long we keep this information

We keep personal information collected through this site for as long as reasonably necessary to fulfil the purposes described in this policy, or as required by law. Once it’s no longer needed for those purposes, we take reasonable steps to destroy or de-identify it, consistent with our obligations under the Australian Privacy Principles. Analytics event data collected via Google Analytics is retained for 2 months from the date of collection; data associated with your user identifier is retained for 14 months, reset on new activity. Records enriched or identified through Apollo are retained under Apollo’s own data retention practices; Apollo’s terms do not commit to a fixed retention period and instead retain data only for as long as required by applicable law. We aim to delete or de-identify form-submission and CRM records held in HubSpot after 24 months of inactivity; this process is not yet fully automated.

8. Your rights

Under the Australian Privacy Principles, you can ask what personal information we hold about you, and ask us to correct it if it’s inaccurate or out of date (APP 12 and APP 13). To make a request, contact us using the details in section 10. We aim to respond within 30 days.

Separately, and as something we do as a matter of practice rather than a right the Australian Privacy Principles confer, we will delete information we hold about you on request, where we are not required to keep it.

9. Making a complaint

If you believe we’ve mishandled your personal information, contact us first using the details below. We’ll acknowledge your complaint promptly and aim to resolve it within 30 days. If you’re not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Scoping note: this policy describes rights available under Australian law. If you are located in the United Kingdom or European Union, you may have additional rights under the UK GDPR or EU GDPR, including the right to access, correct, restrict, object to, or port your personal information, and the right to request erasure. You can exercise these rights using the contact details in section 10, or lodge a complaint with your local data protection authority (for example, the ICO in the United Kingdom, or your national supervisory authority in the EU).

10. Contact us

payFURL Pty Ltd (ABN 19 695 198 675)
Phone: 1800 975 336
Email: contact@payfurl.com

11. Changes to this policy

We may update this policy from time to time. Changes take effect from the date they are posted on this page.