Privacy Policy

1. Who We Are

Fyntek ("Fyntek," "we," "us," or "our") is a payments consultancy and orchestration platform serving iGaming operators. Fyntek operates through Fyntek Solutions Ltd, a private limited company incorporated in England and Wales (company no. 15974019; registered office: 1 Giltspur Street, Farringdon, London EC1A 9DD, United Kingdom). Fyntek Solutions Ltd is registered with the Information Commissioner's Office (ICO) as a data controller. Our website is located at fyntek.io. For privacy-related enquiries, contact us at support@fyntek.io.

2. Our Role in Privacy

Fyntek operates in two distinct privacy capacities depending on the context:

• Data Controller — for personal data collected through this website (enquiry forms, cookies, analytics). In this capacity, Fyntek determines the purposes and means of processing and is directly responsible for your privacy rights as described in this policy.
• Data Processor — when providing payment gateway and orchestration services to iGaming operator clients. In this capacity, Fyntek processes transaction data and related personal information solely on behalf of and according to the instructions of our business clients. Individuals whose data is processed through our gateway should refer to the privacy policy of the operator they transacted with. The detailed terms of this processing are governed by Data Processing Agreements entered into with each client.

This Privacy Policy primarily addresses our role as a Data Controller in relation to this website. Our obligations as a Data Processor are set out in our client contracts.

3. What Data We Collect

We collect personal data only when you voluntarily provide it — primarily through our contact and enquiry form. This may include:

• Full name
• Business email address
• Company name
• Phone number (optional)
• Message content
• Consent preferences (marketing communications, data processing)

We also collect limited technical data automatically when you visit our site (see Section 6 — Cookies).

4. How We Use Your Data

We use the personal data you provide solely to:

• Respond to your enquiry or consultation request
• Administer our client relationship with you
• Send service-related communications you have requested
• Send marketing communications, if you have opted in
• Comply with applicable legal obligations

We do not sell, rent, or trade your personal data to third parties for their own marketing purposes.

5. Third-Party Data Processors

We use the following sub-processors to operate our services. Each is bound by appropriate data processing agreements:

• HubSpot, Inc. — CRM, form submission processing, and website analytics (page views, visit history, and session data collected only where you have consented to analytics cookies). Data may be stored on servers in the United States under HubSpot's Standard Contractual Clauses. See HubSpot's Privacy Policy.
• Google LLC — Web fonts (Google Fonts). No personally identifiable data is transmitted beyond a standard HTTP request.

6. Cookies

We use cookies and similar technologies on our website. Cookies fall into two categories:

• Strictly necessary cookies — Required for the website to function (e.g. storing your cookie consent preference). These do not require your consent.
• Analytics & performance cookies — Used to understand how visitors interact with the site. We only place these cookies with your explicit consent, via the cookie banner displayed on your first visit.

You can withdraw your consent at any time by clearing your browser's local storage or cookies for this domain.

7. Legal Basis for Processing (UK GDPR / EU GDPR)

As a UK-registered company, we are subject to the UK GDPR and the Data Protection Act 2018. If you are located in the European Economic Area (EEA) we also comply with EU GDPR. We process your personal data under the following legal bases:

• Consent (Art. 6(1)(a) GDPR) — for marketing communications and analytics cookies, where you have opted in
• Legitimate interests (Art. 6(1)(f) GDPR) — for responding to enquiries and operating our business
• Legal obligation (Art. 6(1)(c) GDPR) — where processing is required by law

8. Data Retention

We retain your personal data for as long as necessary to fulfil the purpose for which it was collected or to comply with legal obligations. Enquiry data is typically retained for up to 3 years from the date of last contact, after which it is securely deleted or anonymised. You may request earlier deletion at any time (see Section 10).

9. International Transfers

Some of our sub-processors (including HubSpot) store or process data outside the EEA. Where this occurs, we rely on Standard Contractual Clauses (SCCs) or equivalent safeguards approved under applicable data protection law to ensure your data remains protected.

10. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access — Request a copy of the data we hold about you
• Rectification — Request correction of inaccurate or incomplete data
• Erasure — Request deletion of your data ("right to be forgotten")
• Restriction — Request that we restrict how we process your data
• Portability — Receive your data in a structured, machine-readable format
• Objection — Object to processing based on legitimate interests or for direct marketing
• Withdraw consent — At any time, without affecting the lawfulness of prior processing

To exercise any of these rights, email support@fyntek.io. We will respond within 30 days. If you believe we have not handled your data correctly, you have the right to lodge a complaint with your local data protection authority. If you are based in the United Kingdom, you may contact the Information Commissioner's Office (ICO) at ico.org.uk.

11. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Form submissions are transmitted over HTTPS and stored within HubSpot's secure infrastructure.

In our role as a payment gateway and orchestration platform, Fyntek Solutions Ltd is certified at PCI DSS Level 1 — the highest level of Payment Card Industry Data Security Standard compliance. This certification governs the security controls applied to all cardholder data processed through our platform on behalf of our clients.

12. Children's Privacy

Our website and services are directed exclusively at business professionals. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently collected such data, contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Material changes will be communicated via a notice on our website. Continued use of the site following any update constitutes acceptance of the revised policy.

14. Contact Us

For any questions or concerns about this Privacy Policy or our data practices, please contact:

Fyntek Solutions Ltd
1 Giltspur Street, Farringdon, London EC1A 9DD, United Kingdom
Email: support@fyntek.io