Privacy Policy

Effective Date: June 1, 2026

This Privacy Policy explains how Mara Linux and Business Solutions, Inc. ("Company", "we", "our", or "us") collects, processes, stores, shares, and protects personal information in connection with the Payfusion Payment Aggregator System ("System").

This Policy is intended to comply with the requirements of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and applicable regulatory requirements.

Information We Collect

Merchant Information

Full name;
Company name;
Business registration information;
Government-issued identification;
Tax identification numbers;
Contact information;
Banking and settlement information;
Financial and compliance documents.

Customer Information

Name;
Email address;
Mobile number;
Billing information;
Payment account information;
Transaction details.

System and Technical Information

Device identifiers;
IP addresses;
Browser and operating system information;
Login and access logs;
Location information where permitted by law.

Purpose of Processing

Personal information may be processed for the following purposes:

Account creation and management;
Payment processing and settlement;
Transaction routing and monitoring;
Fraud prevention and risk management;
Customer support;
Regulatory reporting and compliance;
AML and sanctions screening;
Audit and investigation activities;
Service improvement and analytics;
Legal and contractual obligations.

Legal Basis for Processing

We process personal information based on:

Consent of the data subject;
Performance of contractual obligations;
Compliance with legal obligations;
Protection of legitimate interests;
Establishment, exercise, or defense of legal claims.

Sharing of Information

Personal information may be disclosed to:

Banks and financial institutions;
Payment networks and payment service providers;
Regulatory authorities and government agencies;
AML and compliance service providers;
Technology and cloud service providers;
Auditors, consultants, and professional advisers.

Such disclosures shall only occur where necessary and subject to appropriate safeguards.

Cross-Border Data Transfers

Where necessary, information may be processed or stored outside the Philippines by authorized service providers.

The Company shall implement reasonable safeguards to ensure lawful and secure cross-border transfers.

Data Security

The Company implements appropriate administrative, technical, and organizational safeguards, including:

Access controls;
Encryption technologies;
Security monitoring;
Vulnerability management;
Employee confidentiality obligations;
Incident response procedures.

While reasonable measures are employed, no method of transmission or storage can be guaranteed to be completely secure.

Data Retention

Personal information shall be retained only for as long as necessary to:

Fulfill the purposes stated in this Policy;
Comply with legal and regulatory obligations;
Resolve disputes and enforce agreements.

Records may be retained beyond account closure where required by law or regulatory requirements.

Rights of Data Subjects

Subject to applicable laws, data subjects may exercise the following rights:

Right to be informed;
Right to access;
Right to object;
Right to rectification;
Right to erasure or blocking;
Right to data portability;
Right to damages;
Right to lodge a complaint with the National Privacy Commission.

Requests may be submitted through the contact details provided below.

Cookies and Similar Technologies

The System may use cookies, log files, analytics tools, and similar technologies to:

Improve functionality;
Enhance security;
Analyze usage patterns; and
Support fraud detection.

Users may manage cookie settings through their browser preferences.

Regulatory Compliance

The Company may collect, process, retain, and disclose information as necessary to comply with:

Bangko Sentral ng Pilipinas regulations;
Anti-Money Laundering Act and related regulations;
Data Privacy Act;
Court orders and lawful government requests;
Payment network and acquiring bank requirements.

Amendments

The Company may revise this Privacy Policy from time to time.

Updated versions shall be posted through the System and shall become effective upon publication unless otherwise stated.

Contact Information

For privacy-related inquiries or requests, please contact:

Data Protection Officer
Mara Linux and Business Solutions, Inc.
Unit I CK Bldg., Don A. Roces Ave cor South A, Paligsahan, Quezon City
[email protected]
02 8477-4889