Privacy Policy

1 Information We Collect

We collect only the minimum information necessary to operate our services:

a) Information You Provide:

• Name, email address, and message content when you contact us via our contact form
• Payment recipient details (name, account number, bank name, payment amount) entered by authorised administrators only — not collected from general website visitors

b) Automatically Collected Information:

• Browser type and version
• IP address (anonymised)
• Pages visited and time spent on pages
• Referring website
• Device type (desktop/mobile)

c) What We Do NOT Collect:

• We do not collect passwords, PINs, or credentials from general visitors
• We do not collect credit card or financial account data from website visitors
• We do not sell, rent, or trade your personal data

2 How We Use Your Information

We use collected information for the following purposes:

• To operate and maintain the website and payment confirmation portal
• To respond to your inquiries and provide customer support
• To improve website performance and user experience
• To ensure security and prevent fraudulent activity
• To comply with applicable legal and regulatory requirements
• To send administrative communications (e.g., service updates)

We will never use your information for unsolicited marketing without your explicit consent.

3 Data Sharing & Disclosure

We do not sell or rent your personal information. We may share data only in these limited circumstances:

• Service Providers: Trusted third-party providers who assist in operating our website (e.g., Firebase by Google for database services), bound by confidentiality obligations
• Legal Requirements: When required by law, court order, or governmental authority
• Business Transfers: In the event of a merger, acquisition, or asset sale, with notice given to affected users
• Safety: To protect the rights, property, or safety of our users or the public

4 Data Security

We implement industry-standard security measures to protect your information:

• 256-bit SSL/TLS encryption on all data transmitted to and from our website
• Secure, access-controlled Firebase Realtime Database with restricted read/write rules
• Token-based (URL token) access to payment pages — no credential forms exposed to the public
• Regular security reviews and monitoring

While we take every reasonable precaution, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but commit to promptly addressing any known breaches.

5 Cookies & Tracking

Our website may use cookies and similar technologies to:

• Remember your preferences
• Analyse website traffic and usage patterns
• Improve the overall user experience

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, some website features may not function properly without cookies.

6 Your Data Rights

Under applicable data protection laws (including GDPR where applicable), you have the right to:

• Access — Request a copy of the personal data we hold about you
• Correction — Request correction of inaccurate data
• Erasure — Request deletion of your personal data ("right to be forgotten")
• Restriction — Request that we restrict processing of your data
• Portability — Request your data in a portable, machine-readable format
• Objection — Object to processing of your personal data
• Withdraw Consent — Withdraw consent at any time where processing is based on consent

To exercise any of these rights, contact us at info@stbnkdigital.com. We will respond within 30 days.

7 Data Retention

We retain personal data only as long as necessary for the purposes described in this policy, or as required by law. Payment records are stored for a maximum period defined by applicable banking regulations and are then securely deleted. Contact form submissions are retained for up to 12 months.

8 Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policy of any third-party site you visit.

9 Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a child, please contact us immediately and we will delete it promptly.

10 Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of the website after changes constitutes acceptance of the updated policy.

11 Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: