1. Introduction
15811791 Canada Inc., doing business as GT Legacy and operating as GT Payments (“GT Payments,” “we,” “our,” or “us”), respects your privacy and is committed to protecting the personal information entrusted to us.
This Privacy Policy explains how we collect, use, disclose, store, protect and retain personal information when you interact with us, including through:
- Our website: https://gtpayments.ca
- Quote and contact forms
- Website live chat
- Email, telephone, SMS and WhatsApp communications
- Merchant application and payment-processing services
- Our Partner Program, referral links and partner portal
- Other business services and communications we provide
This Policy applies to merchants, prospective customers, business representatives, referral partners, sales partners, website visitors and other individuals who interact with GT Payments.
We handle personal information in accordance with applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA), where applicable.
2. Personal information we collect
The information we collect depends on how you interact with GT Payments.
A. Quote and contact information
When you request a quote, contact us or ask about our payment-processing services, we may collect:
- Full name
- Business name
- Business address
- Email address
- Telephone number
- Business type or industry
- Estimated monthly processing volume
- Current payment-processing provider
- Information about your payment-processing requirements
- Any other information you choose to provide
B. Merchant application information
If you choose to proceed with a merchant application, we may collect information necessary to facilitate the application and onboarding process. This may include business details, contact information, ownership or representative information, and other information requested by the applicable payment processor.
Applications may be submitted to Fiserv Canada Ltd. (including Clover) or Square, depending on the service you select.
The applicable payment processor may collect additional information under its own privacy policy and requirements.
C. Partner Program information
If you apply for or participate in our Partner Program, we may collect:
- Name and contact information
- Business or organization information
- Partner application details
- Referral links and referral activity
- Lead and merchant referral information
- Sales and onboarding activity
- Commission calculations and payout information
- Partner account and portal activity
- Communications relating to your partner account
D. Communications and support information
When you contact us through email, telephone, SMS, WhatsApp or live chat, we may collect and retain the information you provide, including the contents of your communications and relevant support history.
E. Website and technical information
When you visit our website, certain technical information may be collected, including:
- IP address
- Browser type and version
- Device and operating system information
- Pages visited and interactions with the website
- Approximate location derived from technical information
- Referral source, meaning the website, search engine or campaign link that brought you to our site and the page where your visit started, which we save with any quote request you send
- Website performance and security information
- Cookie and similar technology information
3. How we use personal information
We use personal information for legitimate business purposes, including to:
- Respond to quote requests and inquiries.
- Assess payment-processing requirements and prepare proposals.
- Contact prospective and existing merchants.
- Facilitate merchant applications and onboarding when requested.
- Coordinate services offered through Fiserv Canada Ltd., Clover and Square.
- Administer the GT Payments Partner Program.
- Track referrals, leads, sales, commissions and payouts.
- Provide customer service and technical support.
- Communicate important account or service information.
- Operate, maintain and improve our website and services.
- Analyze website traffic and performance.
- Protect our systems, accounts and business operations.
- Detect, investigate and prevent fraud, misuse or security incidents.
- Maintain business, tax and accounting records.
- Comply with legal and regulatory requirements.
- Establish, exercise or defend legal claims.
We do not use personal information for purposes unrelated to the reason it was collected unless we obtain appropriate consent or are otherwise permitted or required by law.
4. Consent and marketing communications
By providing personal information to GT Payments, you consent to its collection, use and disclosure for the purposes explained in this Policy, subject to applicable law.
Where consent is required, we will obtain it before using personal information for the relevant purpose. You may withdraw your consent, subject to legal or contractual restrictions and reasonable notice.
We may send business updates, promotional communications or other marketing messages where permitted by law.
You can unsubscribe from marketing emails using the unsubscribe instructions included in the message or by contacting us at sales@gtpayments.ca.
Withdrawing marketing consent does not prevent us from sending essential service, transaction, account or legal communications.
5. Cookies, analytics and website technologies
Our website may use cookies and similar technologies to support website functionality, security, performance and analytics. These technologies may include:
- Essential cookies: used for website operation, security and core functionality.
- Analytics cookies: used to understand website traffic, visitor interactions and website performance.
- Chat technologies: used to operate website live chat and support functionality.
Google Analytics
We use Google Analytics to measure website traffic, understand visitor interactions and evaluate website performance. Google Analytics uses cookies and similar technologies to collect certain website usage and technical information.
We configure Google Analytics data retention according to the retention options made available within our Google Analytics account. These settings may change as Google updates its services and available configurations.
Google Analytics may retain aggregated reporting information separately from user-level and event-level data, in accordance with Google’s applicable data retention practices.
Where required, we use consent controls for non-essential cookies and tracking technologies. You may also be able to manage cookies through your browser settings.
For more information, please review Google’s privacy documentation: https://policies.google.com/privacy
6. How we share personal information
GT Payments does not sell personal information. We may disclose personal information in the following circumstances:
A. Service providers
We use third-party service providers to support our business operations, website, communications, security and analytics. These providers may process personal information on our behalf or in accordance with their own applicable privacy terms. Our service providers and technology arrangements include:
Formspree. We use Formspree to process certain website form submissions and forward them to our business email. A copy of each quote request is also saved in our own lead database, described under Cloudflare below, so we can follow it up. Formspree may store and process form data outside Canada, including in the United States.
Chatwoot. We use Chatwoot’s hosted service for website live chat and customer communications. Chat conversations are stored by Chatwoot on its infrastructure, which may be located outside Canada.
Cloudflare. We use Cloudflare for website infrastructure, security and performance services. Cloudflare may process technical information such as IP addresses, connection information and security-related logs when providing these services. Our lead database (quote requests and referrals), the Partner Program database and the partner portal sign-in are also hosted on Cloudflare, with access restricted to authorized GT Payments staff and, for each partner, to that partner’s own records.
Google Analytics. We use Google Analytics for website traffic and performance measurement. Google may process website usage and technical information in accordance with its own privacy terms.
Microsoft 365. We use Microsoft 365 for business email and related business communications.
B. Payment processing providers
If you choose to apply for payment-processing services, we may share the information required to facilitate your application with the applicable provider, including Fiserv Canada Ltd. (Clover) or Square.
These providers may independently collect, use, retain and disclose information under their own privacy policies and contractual requirements. We encourage you to review the applicable provider’s privacy policy before submitting an application.
C. Professional advisers and legal requirements
We may disclose information to accountants, legal advisers, auditors, regulators, law enforcement agencies or other authorities where reasonably necessary for professional advice, legal compliance, investigations or the protection of our legal rights.
D. Business transactions
If GT Payments or its business assets are involved in a merger, acquisition, restructuring, financing or sale, personal information may be disclosed as part of that transaction, subject to appropriate confidentiality and legal safeguards.
7. Storage and processing outside Canada
Some service providers we use may process or access certain information outside Canada, including in the United States or other jurisdictions, depending on their operations and infrastructure.
This may include services provided by Google, Microsoft, Cloudflare, Formspree, Chatwoot and payment-processing providers.
Information processed outside Canada may be subject to the laws of the jurisdiction where it is processed and may be accessible to local courts, law enforcement or regulatory authorities.
We take reasonable steps to use service providers and arrangements appropriate to the information being handled. GT Payments remains responsible for personal information under its control, subject to applicable law.
8. Retention of personal information
We retain personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected, meet legal and accounting obligations, resolve disputes, enforce agreements and protect our legitimate business interests. Our general retention practices are as follows:
A. Quote and inquiry records
Inactive quote requests and general inquiries are generally retained for up to 90 days after the last meaningful interaction, unless the information is required for an ongoing business relationship, follow-up, dispute, legal obligation or other legitimate purpose.
B. Partner account information
General partner profile and account information may be retained while the partner relationship remains active and for up to one year after account closure or inactivity.
Information required for accounting, tax, legal or dispute purposes may be retained separately for the applicable required period.
C. Commission, payout and financial records
Partner commission records, payout statements, transaction records and supporting accounting documents will generally be retained for six years from the end of the last tax year to which they relate, or for any longer period required by applicable law.
General partner account information that is not required for accounting, tax, legal or dispute purposes may be deleted or anonymized after one year following account closure.
GT Payments may retain only the financial and supporting information necessary to meet its legal, tax, accounting and recordkeeping obligations.
D. Website analytics information
Website analytics information is retained according to the data retention settings configured within our Google Analytics account and Google’s applicable data retention practices. Aggregated reporting information may be retained separately in accordance with Google’s practices.
E. Other records
Other personal information is retained for as long as reasonably necessary for the purpose for which it was collected or as required or permitted by applicable law.
When personal information is no longer required, we take reasonable steps to securely delete, destroy or anonymize it.
9. Security safeguards
We use reasonable administrative, technical and physical safeguards designed to protect personal information against loss, theft, unauthorized access, disclosure, copying, use or modification. Our safeguards may include:
- HTTPS encryption for website communications.
- Restricted access to business systems and information.
- Account authentication and email one-time verification codes where implemented.
- Separation of partner accounts and access to partner information.
- Access-controlled hosting for business databases.
- Security monitoring and website protection measures.
- Internal procedures for handling business and customer information.
No method of electronic storage or transmission is completely secure. While we take reasonable steps to protect information, we cannot guarantee absolute security.
10. Privacy incidents and data breaches
If we become aware of a privacy incident involving personal information under our control, we will take reasonable steps to investigate, contain and address the incident.
Where required by applicable law, we will report the incident to the appropriate privacy regulator, notify affected individuals and maintain records of the incident.
Under PIPEDA, reporting and notification obligations may apply where a breach creates a real risk of significant harm to an individual.
11. Your privacy rights
Subject to applicable law and certain exceptions, you may have the right to:
- Request access to personal information we hold about you.
- Request corrections to inaccurate or incomplete information.
- Withdraw consent to certain collection, use or disclosure.
- Request deletion of personal information where we are not legally or otherwise permitted or required to retain it.
- Ask questions or raise concerns about how we handle your information.
To protect your privacy, we may need to verify your identity before responding to a request.
We will respond within the time required by applicable privacy law. Where permitted, additional time may be required for complex requests or circumstances allowed by law.
Some information may not be deleted where we are required to retain it for tax, accounting, legal, contractual, security or dispute-resolution purposes.
12. Third-party websites and services
Our website or communications may contain links to third-party websites, platforms or services. GT Payments is not responsible for the privacy practices, content or security of third-party websites and services that we do not operate.
When you access a third-party website or submit information directly to a third-party provider, that provider’s privacy policy and terms may apply.
13. Children’s privacy
GT Payments provides business-to-business services and does not knowingly collect personal information directly from children under the age of 13 through its website or services.
If we become aware that personal information has been collected from a child in circumstances where it should not have been collected, we will take reasonable steps to delete it, subject to applicable law.
14. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our business practices, technology, service providers or applicable legal requirements. When changes are made, the revised version will be posted on our website with an updated “Last updated” date. We encourage you to review this Policy periodically.
15. Contact us
If you have questions, concerns or requests relating to this Privacy Policy or the handling of your personal information, please contact us:
15811791 Canada Inc.
Doing business as GT Legacy
Operating as GT Payments
79 Torbarrie Road
North York, Ontario, Canada
Email: sales@gtpayments.ca
Please include “Privacy Request” in the subject line of your email so that we can direct your inquiry appropriately.