Dated August 14, 2026

1. GENERAL PROVISIONS

This Privacy Policy (hereinafter – the “Policy”) explains how PayAdmit (referred to in this Policy as “PayAdmit”, “we”, “us” or “our”) collects, uses, stores, discloses and otherwise processes personal data in connection with its website, technology, software products, platforms and services (collectively – the “Services”).

This Policy applies to personal data relating to individuals who:

– visit or use PayAdmit’s Website;

– communicate with PayAdmit;

– represent or are employed by PayAdmit’s business clients, counterparties or service providers;

– use or interact with PayAdmit’s software and technology where PayAdmit processes their personal data; or

– otherwise interact with PayAdmit in connection with its business activities.

PayAdmit is dedicated to safeguarding personal data and respecting the privacy rights of individuals. We process personal data in accordance with applicable data protection and privacy legislation, including the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018, to the extent applicable to our processing activities.

This Policy explains the categories of personal data we may process, the purposes and lawful bases for processing, how personal data may be shared, how we protect personal data, how long we retain it, and the rights available to individuals.

Please note that personal data may be processed or accessed in countries outside the United Kingdom where PayAdmit, its affiliates, clients or service providers operate, or where relevant technology, systems or infrastructure are located. Where the transfer of personal data constitutes a restricted transfer under applicable UK data protection law, PayAdmit will ensure that such transfer is carried out in accordance with applicable legal requirements and using an appropriate lawful transfer mechanism. PayAdmit will take appropriate measures to ensure that personal data transferred internationally is subject to an adequate level of protection and is processed in accordance with applicable data protection requirements.

2. OUR ROLE AND RESPONSIBILITIES

PayAdmit operates as a technology and infrastructure service provider. PayAdmit does not receive, hold, safeguard or control customer funds and does not itself determine the movement of funds belonging to its clients or their customers.

Where PayAdmit provides technology or infrastructure that is integrated into the services of a client or another service provider, the relevant client or service provider may separately process personal data in accordance with its own privacy notice and applicable legal obligations.

Depending on the circumstances and the nature of the processing, PayAdmit may act as a data controller or, where processing personal data on behalf of a client, as a data processor. Where PayAdmit acts as a data processor, the processing of personal data will be governed by the applicable contractual arrangements and data protection requirements between PayAdmit and the relevant client.

3. PERSONAL DATA WE MAY COLLECT

In connection with your interaction with PayAdmit and use of our Services, we may process the following categories of personal data, including:

3.1. Identification and contact information (includes: name; business email address; telephone number; business address; job title or position; company or organisation details; and other contact information provided to us).

3.2. Business and professional information (includes: your employer or organisation; your professional role; corporate ownership and management information; information relating to authorised representatives; information required for client onboarding and due diligence; and information concerning the nature and purpose of the business relationship).

3.3. Technical and usage information (includes: IP address; browser type and version; device information; operating system; website interaction information; access times and dates; log and diagnostic information; and other technical information generated through the use of our Services).

PayAdmit may collect personal data from a variety of sources, depending on the nature of the relationship and the circumstances in which the information is provided. These sources may include:

– Directly from you (we may collect personal data that you provide directly to us when you contact PayAdmit, submit an enquiry, request information, enter into a business relationship with us, communicate with our personnel, use our Website or Services, or otherwise provide information to us).

– From your employer or organisation (where you act on behalf of a company, organisation or other entity, we may receive personal data from your employer or the organisation you represent, including your name, position, business contact details and information relating to your role or authority to act on its behalf).

– From PayAdmit’s business clients and counterparties (we may receive personal data from our business clients, partners, counterparties or other organisations with which we have a business relationship, where such information is relevant to the provision, operation, support or administration of our Services or to the management of the relevant business relationship).

– Through your use of our Website and Services (we may automatically collect certain technical and usage information when you access or interact with our Website, platforms or services; this may include IP address, device information, browser type, operating system, access dates and times, log information and information concerning interactions with our Services).

– From third-party service providers and business partners (we may receive personal data from third-party service providers, contractors and other business partners that support PayAdmit’s operations, including providers of technology, hosting, IT, security, compliance, verification, screening, communication and other business services).

– From publicly available sources (we may obtain personal data from publicly accessible sources, including company websites, professional networking platforms, public registers, corporate registries, official publications and other publicly available information sources, where such information is relevant to our legitimate business or compliance purposes).

– From corporate, regulatory and compliance databases (where relevant to our client onboarding, due diligence, compliance or risk-management activities, we may obtain information from corporate registries, regulatory registers, sanctions databases, politically exposed person databases, adverse media sources and other recognised compliance or verification databases).

– From competent authorities and public bodies (where permitted or required by applicable law, we may receive information from courts, regulators, law enforcement agencies, governmental authorities and other competent public bodies).

– From other lawful sources (we may obtain personal data from other sources where the collection and use of such information is lawful and necessary for purposes consistent with this Policy, including for the establishment, management, protection or enforcement of our business relationships and legal rights).

In case we receive personal data from a third party, we take reasonable steps to ensure that the information has been obtained and provided to us lawfully and that its use is consistent with applicable data protection requirements.

4. PURPOSES OF PROCESSING

PayAdmit may process personal data for the following purposes: providing, operating, maintaining and supporting our Services; communicating with clients, users, counterparties and other relevant individuals; onboarding and managing our business clients and counterparties; conducting identity verification, due diligence and compliance screening; managing contractual and business relationships; maintaining and improving our Website, technology and Services; maintaining the security and integrity of our systems and Services; detecting and preventing fraud, misuse, security incidents and other unlawful or unauthorised activities; complying with applicable legal and regulatory requirements; responding to lawful requests from competent authorities; establishing, exercising or defending legal claims; protecting the rights, safety, security and property of PayAdmit, our clients, users and other persons; and carrying out other purposes that are compatible with the purposes described in this Policy or otherwise permitted by applicable law.

We will not use personal data for purposes that are incompatible with the purposes for which it was collected unless permitted or required by applicable law. In each case of PayAdmit’s processing of personal data there will be a valid lawful basis under applicable data protection legislation that may include: performance of a contract, legitimate interest, legal obligations, your consent.

5. SHARING OF PERSONAL DATA

PayAdmit may disclose personal data only where reasonably required and permitted by applicable law to the following recipients:

– PayAdmit’s affiliated companies and group entities, where applicable;

– professional advisers, auditors and consultants;

– technology, hosting, infrastructure and IT service providers;

– compliance, verification and screening service providers;

– communication and customer-support providers;

– payment or financial service providers, where relevant to the provision of our Services;

– legal and regulatory authorities;

– courts, law enforcement agencies and other competent authorities where legally required or permitted; and

– other third parties where disclosure is necessary to protect PayAdmit’s rights, property, security or legitimate interests.

6. THIRD-PARTY WEBSITES AND ITS SERVICES

Our Website or Services may contain links to websites, platforms or services operated by third parties.

This Policy does not apply to the processing activities of those third parties. Their processing of personal data is governed by their own privacy notices and policies.

For the avoidance of any doubts, PayAdmit is not responsible for the privacy practices, content or security of such third-party websites or services that are outside PayAdmit’s control.

We recommend reviewing the relevant third-party’s privacy information before providing personal data to them.

7. DATA SECURITY

PayAdmit implements technical and organisational measures designed to protect personal data against unauthorised access, accidental or unlawful destruction, loss, alteration, disclosure or other unauthorised processing. In consideration of the nature of the information and the risks arising from its processing, these measures may include: access controls and authentication mechanisms; encryption and secure transmission; network and system security controls; segregation of access based on business requirements; monitoring and logging; vulnerability management and security testing; backup and recovery measures; confidentiality obligations applicable to relevant personnel and service providers; and periodic review and improvement of security measures.

PayAdmit maintains PCI DSS Level 1 compliance for the applicable scope of its Services and systems and implements security controls designed to protect payment-related data in accordance with applicable PCI DSS requirements.

PayAdmit constantly reviews and, where appropriate, enhances its technical and organisational security measures to address evolving security risks and applicable legal, regulatory and industry requirements.

Notwithstanding the security measures implemented by PayAdmit, no method of electronic transmission, processing or storage can be guaranteed to be completely secure.

8. DATA RETENTION

PayAdmit retains personal data only for as long as reasonably necessary for the purposes for which it was collected, including for the purposes of providing Services, managing business relationships, complying with legal and regulatory obligations, resolving disputes and establishing, exercising or defending legal claims.

The applicable retention period will depend on factors including: the nature and purpose of the processing; the nature of the relationship with PayAdmit; applicable contractual requirements; legal and regulatory requirements; limitation periods applicable to potential claims; and legitimate business and security requirements.

In case personal data is no longer required, PayAdmit will securely delete, anonymise or otherwise dispose of it in accordance with applicable requirements.

9. RIGHTS OF THE PERSONAL DATA SUBJECT

PayAdmit informs you about your rights as a personal data subject, namely:

– the right to be informed about how your personal data is processed;

– the right to request access to your personal data;

– the right to request correction of inaccurate or incomplete personal data;

– the right to request erasure of personal data in certain circumstances;

– the right to request restriction of processing in certain circumstances;

– the right to object to certain processing, including processing based on legitimate interests;

– the right to data portability where applicable;

– the right to withdraw consent where processing is based on consent; and

– the right to lodge a complaint with a competent data protection supervisory authority.

These rights are not absolute and may be subject to conditions, limitations and exemptions under applicable law. For example, PayAdmit may be entitled or required to retain or process certain personal data despite a request for erasure where this is necessary to comply with a legal obligation or to establish, exercise or defend legal claims.

In any time if you wish to exercise any applicable data protection rights or have questions concerning PayAdmit’s processing of your personal data, you may contact us using https://payadmit.com/contact-us/, all valid requests will be responded within the time period required by applicable data protection legislation.

10. COMPLAINTS

If you have concerns regarding PayAdmit’s processing of your personal data, we encourage you to contact us first so that we can investigate and seek to resolve the matter. You also have the right, where applicable, to lodge a complaint with the relevant supervisory authority.

11. POLICY CHANGES

PayAdmit may update this Policy from time to time to reflect changes in its business activities, services, technology, applicable legislation, regulatory requirements or data protection practices.

The updated version will be published on the website together with the relevant date, when it becomes effective.

Where required by applicable law, PayAdmit will provide additional notice or take other appropriate steps in relation to material changes.

The amendments and additions may be made to this Policy from time to time and without prior notice to you about it, including when the legislative requirements are amended.

We encourage you to review this Policy periodically to remain informed about how PayAdmit processes and protects personal data.

12. CONTACT INFORMATION

For any questions, requests or concerns regarding this Policy, PayAdmit’s processing of personal data, or the exercise of your rights under applicable data protection legislation, you may contact us using https://payadmit.com/contact-us/.