Privacy Policy
This policy explains how CMS PAY ("we", "us") handles personal information when you pay a merchant through our checkout, visit cmsxpay.com, or contact us.
What we collect
- Payment details: the invoice amount, currency, time, payment method type and payment status. Card numbers are entered directly on the secure pages of our licensed payment partners; we never see or store full card numbers or security codes.
- Contact details you give us: such as your email address or name when a payment option asks for a receipt address, or when you write to us.
- Technical data: basic request logs (IP address, browser type, time) used for security and fraud prevention.
How we use it
- To process your payment and show you its status and receipt.
- To prevent fraud, meet legal, tax and anti-money-laundering obligations, and handle refunds or disputes.
- To answer your questions. We do not sell personal information and we do not use it for third-party advertising.
Who we share it with
Only with the parties needed to complete your payment: the merchant you are paying, our payment processing and settlement partners, and authorities where the law requires it. Each partner handles card data under its own PCI-DSS compliant security program.
How long we keep it
Transaction records are kept for as long as accounting, tax and anti-money-laundering rules require (normally up to 5 years). Other data is deleted when it is no longer needed.
Security
All pages are served over HTTPS. Access to payment records is limited to authorised staff. Card data is handled only by certified payment partners.
Your rights
You may ask for a copy of your data, ask us to correct or delete it (unless we must keep it by law), or object to its use. Email hello@cmsxpay.com and we will reply within 30 days.
Cookies
Our checkout uses only what is strictly necessary for the payment to work. We do not use advertising or tracking cookies.
Changes
We may update this policy. The date at the top shows the latest version.