Your Data.
Your Choice.
Zyrix respects your privacy rights under applicable law — including GDPR (EU), KVKK (Turkey), and PDPL (Saudi Arabia). This page explains what data we collect, why, and how you can control it.
Last updated: March 29, 2026
Your Privacy Rights by Region
- • Right to learn whether your personal data is processed
- • Right to request information if your data is processed
- • Right to learn the purpose of data processing
- • Right to know third parties your data is transferred to
- • Right to request correction of incomplete or incorrect data
- • Right to request deletion or destruction of data
- • Right to object to processing that results in your disadvantage
- • Right to request compensation for damages from unlawful processing
- • Right to access your personal data held by Zyrix
- • Right to correct inaccurate or incomplete personal data
- • Right to request deletion of personal data (subject to legal retention)
- • Right to restrict processing in certain circumstances
- • Right to data portability in machine-readable format
- • Right to object to processing for marketing purposes
- • Right to withdraw consent at any time
- • Right to access personal data
- • Right to correct personal data
- • Right to erasure of personal data
- • Right to restrict processing
- • Right to data portability
- • Right to object to automated decision-making
- • Right of access (Article 15)
- • Right to rectification (Article 16)
- • Right to erasure / 'Right to be forgotten' (Article 17)
- • Right to restriction of processing (Article 18)
- • Right to data portability (Article 20)
- • Right to object (Article 21)
- • Rights related to automated decision-making (Article 22)
Data We Collect and Why
| Category | Purpose | Legal Basis | Retention |
|---|---|---|---|
| Account Data | Create and manage your merchant account | Contract performance | Duration of account + 7 years (tax records) |
| Transaction Data | Process payments and provide financial reports | Contract performance + Legal obligation | 10 years (financial regulatory requirement) |
| KYC / Compliance Data | AML/KYC compliance as required by BDDK/SAMA/CBUAE | Legal obligation | 5 years after account closure |
| Usage Data | Improve product, detect fraud, provide support | Legitimate interest | 2 years rolling |
| Marketing Data | Send product updates and offers (with consent) | Consent | Until consent withdrawn |
Your Choices — What You Can Do Right Now
Unsubscribe from Marketing
Click 'Unsubscribe' in any marketing email, or email privacy@zyrix.co. Processing within 24 hours.
Opt Out of MarketingRequest Your Data
Request a copy of all personal data Zyrix holds about you in JSON or CSV format. Delivered within 30 days.
Request Data ExportDelete Your Data
Request deletion of your personal data. Note: transaction records required by law (7-10 years) cannot be deleted.
Request DeletionCorrect Your Data
Update incorrect personal data directly in your dashboard Settings, or contact us for records you cannot edit yourself.
Go to SettingsCookie Preferences
Manage which cookies Zyrix uses when you visit our website. Essential cookies cannot be disabled.
Manage CookiesContact Our DPO
Our Data Protection Officer handles all privacy requests. Response guaranteed within 30 days.
Email DPOCookie Categories We Use
Data Protection Officer
All privacy requests, complaints, and inquiries should be directed to our Data Protection Officer at dpo@zyrix.co. We will respond within 30 calendar days as required by GDPR, KVKK, and PDPL.
dpo@zyrix.co