Privacy Policy

Privacy Policy

 

Effective Date: January 15, 2026

Last Updated: January 15, 2026

 

1. General Information

 

This Privacy Policy (hereinafter referred to as the "Policy") describes how African Industries INC,

Company Number: 236321

(hereinafter referred to as the "Company," "we," "our," or "us"), collects, uses, stores, transfers, and protects the personal data of users of the website https://2step-pay.com

(hereinafter referred to as the "Website").

 

We process personal data in strict compliance with:

 

Regulation (EU) 2016/679 (General Data Protection Regulation, or "GDPR");

 

Directive 2002/58/EC (ePrivacy Directive);

 

applicable national laws of the Member States of the European Union.

 

By using the Website, you acknowledge that you have read this Policy.

 

2. Data Controller

 

The data controller is:

 

African Industries INC

Company Number: 236321

Website: https://2step-pay.com

 

Email for privacy inquiries: support@2step-pay.com

 

3. Definitions

 

Personal data — any information relating to an identified or identifiable natural person.

 

Processing — any action with personal data (collection, storage, use, transfer, deletion).

 

User — any natural person visiting the Website.

 

GDPR — Regulation (EU) 2016/679.

 

4. Categories of Data Collected

4.1. Data Provided Directly by the User

 

We may collect the following data:

 

First and last name;

 

Email address;

 

Contact information;

 

Content of messages sent via contact forms or email;

 

Other information voluntarily provided by the user.

 

4.2. Technical and Automatically Collected Data

 

When using the Website, the following data is automatically collected:

 

IP ​​address;

 

Browser type and version;

 

Device type and operating system;

 

Access date and time;

 

Website activity data;

 

Cookies and similar technologies.

 

4.3. Payment Data

 

If the Website functionality includes payment transactions, payment data is processed exclusively by payment providers. We do not store full bank card details.

 

5. Purposes of Data Processing

 

Personal data is processed for the following purposes:

 

Provision and administration of Website services;

 

Processing user requests and inquiries;

 

Fulfillment of contractual obligations;

 

Improving the functionality and security of the Website;

 

Analytics and statistics;

 

Compliance with legal and regulatory requirements;

 

Prevention of fraud and abuse.

 

6. Legal Basis for Processing

 

Personal data is processed on the following legal bases (Article 6 of the GDPR):

 

User consent;

 

Performance of a contract;

 

Fulfilment of a legal obligation;

 

The Company's legitimate interests (without infringing on the user's rights).

 

7. Cookies and Similar Technologies

 

We use cookies and similar technologies in accordance with our Cookie Policy.

 

The user can:

 

give or withdraw consent;

 

manage cookies through browser settings or a consent banner.

 

8. Transfer of Data to Third Parties

 

We may transfer personal data to:

 

IT providers and hosting partners;

 

Payment and financial partners;

 

Analytics and marketing services (with consent);

 

Government authorities – if required by law.

 

All third parties are required to comply with the GDPR.

 

9. International Data Transfers

 

When transferring data outside the European Economic Area (EEA), we implement appropriate safeguards, including:

 

Standard Contractual Clauses (SCCs);

 

European Commission adequacy decisions;

 

other legally binding protection mechanisms.

 

10. Data Retention Periods

 

We retain personal data:

 

for no longer than is necessary for the purposes of processing;

 

in accordance with legal requirements;

 

until the user withdraws consent (if applicable).

 

11. Data Security

 

We implement technical and organizational measures to protect personal data, including:

 

encryption;

 

access restrictions;

 

regular security audits;

 

protection against unauthorized access and leaks.

 

12. User Rights

 

In accordance with the GDPR, users have the right to:

 

access their data;

 

rectification of inaccurate data;

 

deletion of data ("right to be forgotten");

 

restriction of processing;

 

data portability;

 

object to processing;

 

withdraw consent at any time;

 

file a complaint with an EU supervisory authority.

 

Inquiries can be sent to: support@2step-pay.com

 

13. Obligation to Provide Data

 

Providing personal data is voluntary; however, refusal may affect the availability of certain Website features.

 

14. Data of Minors

 

The Website is not intended for persons under 16 years of age. We do not knowingly process data of minors.

 

15. Automated Decision-making and Profiling

 

We do not use automated decision-making or profiling that has legal effects on the user without their express consent.

 

16. Policy Changes

 

We reserve the right to change this Policy. The updated version will be published on the Website, indicating the date of the change.

 

17. Contact Information

 

For any questions regarding privacy and personal data protection, please contact us:

 

African Industries INC

Company Number: 236321

Website: https://2step-pay.com

 

Email: support@2step-pay.com