// LEGAL
Privacy Policy
1. Who We Are
CHEQsPay is a product of CHEQs Inc. and is operated under licence by CHEQs Global Ltd, a company registered in England and Wales (Company No. 15802641), with its registered office at 205 Regent Street, London, W1B 4HB, United Kingdom.
For the purposes of UK GDPR and the Data Protection Act 2018, CHEQs Global Ltd is the data controller for personal data collected through the CHEQsPay platform, website, and associated services.
If you have any questions about this policy or how we handle your data, contact us at:
2. What Data We Collect
2.1 Account Information
When you register for CHEQsPay, we collect:
- Your name and email address
- Your browser Extension ID and associated metadata
- Payment provider credentials (stored securely and never retained on our servers)
- Account preferences and dashboard settings
2.2 Technical Data
When you use CHEQsPay, we automatically collect:
- IP address and browser type
- Pages visited on cheqspay.com and time spent
- SDK initialisation events and error logs
- Transaction metadata (amounts, timestamps, provider references — not card details)
- Website usage data collected via Google Analytics (see section 5.1)
2.3 End-User Data (Your Customers)
When your extension users interact with a CHEQsPay paywall, we may process limited data on their behalf including payment status and subscription state. In this context, you (the developer) are the data controller and CHEQs Global Ltd acts as a data processor under your instruction. You are responsible for maintaining appropriate privacy notices for your own users.
3. How We Use Your Data
We use the data we collect to:
- Provide, operate and improve the CHEQsPay platform
- Process your account registration and authentication
- Facilitate payment provider connections on your behalf
- Send transactional emails (account alerts, payment confirmations)
- Respond to support requests
- Comply with our legal obligations under UK and EU law
- Detect and prevent fraud and abuse
We do not use your data for advertising purposes. We do not sell your data to any third party.
4. Legal Basis for Processing
Under UK GDPR, we rely on the following legal bases:
- Contract performance — to deliver the CHEQsPay service you signed up for
- Legitimate interests — to improve our platform, detect fraud, and ensure security
- Legal obligation — to comply with applicable UK and EU laws
- Consent — where you have explicitly opted in (e.g. marketing communications)
5. Data Sharing and Third Parties
We share data only where necessary to provide the service:
- Payment providers (Stripe, Paddle, LemonSqueezy) — to facilitate payment processing on your behalf. Their own privacy policies govern how they handle data.
- Infrastructure providers — Cloudflare for hosting and CDN services.
- Analytics — we use Google Analytics to collect aggregated, anonymised usage data. See section 5.1.
- Legal authorities — where required by UK law or court order.
All third-party processors are bound by appropriate data processing agreements.
5.1 Google Analytics
We use Google Analytics (provided by Google LLC) to understand how visitors use cheqspay.com. Google Analytics collects information such as pages visited, time on site, browser type, and general geographic location (country/city level). This data is aggregated and does not identify you personally.
Data collected by Google Analytics may be transferred to and stored on Google's servers in the United States. Google processes this data in accordance with their Privacy Policy at policies.google.com/privacy.
You can opt out via the Google Analytics Opt-out Browser Add-on.
6. Data Retention
We retain your account data for as long as your account is active. If you close your account, we will delete your personal data within 90 days, except where legally required (e.g. financial records retained for 7 years under UK law).
7. Your Rights
Under UK GDPR, you have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — request correction of inaccurate data
- Erasure — request deletion of your data ("right to be forgotten")
- Restriction — request that we limit how we use your data
- Portability — receive your data in a machine-readable format
- Object — object to processing based on legitimate interests
- Withdraw consent — where processing is based on consent
To exercise any of these rights, email us at . We will respond within 30 days.
You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.
8. International Transfers
CHEQs Global Ltd is based in the United Kingdom. Some of our third-party providers may process data outside the UK or EEA. Where this occurs, we ensure appropriate safeguards are in place, such as UK-approved Standard Contractual Clauses or adequacy decisions.
9. Security
We implement appropriate technical and organisational measures to protect your data, including 256-bit encryption in transit, access controls, and regular security reviews. We never store your payment provider secret API keys on our servers. Your Stripe, Paddle or LemonSqueezy credentials are handled directly between your environment and the respective provider.
10. Cookies
Our website uses essential cookies only — required for the site to function (authentication, session management). We do not use tracking or advertising cookies. You can disable cookies in your browser settings, though this may affect site functionality.
11. Children's Privacy
CHEQsPay is a developer tool intended for adults. We do not knowingly collect personal data from anyone under the age of 16. If you believe we have inadvertently collected data from a minor, please contact us immediately at .
12. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and, where changes are material, notify registered users by email. Continued use of CHEQsPay after changes constitutes acceptance of the updated policy.
13. Contact Us
For any privacy-related questions or requests: