This Privacy Policy explains how EG Fintech Solutions AB (“Precision”, “we”, “EG Fintech”, “us”, “our”) processes and protects any personal data we collect from you, as a consumer and merchant’s customer, in order to provide services to our clients, the online merchants and B2B partners (“Merchants” or “Business Partners”), selling goods, travel, or services on the Internet, to prevent fraudulent online transactions (“Fraud Prevention” service) or provide online travel products and services (“Travel Flexibility” service), as well as the rights in relation to your personal data.

We do not conduct or fulfill consumer transactions, and, except as otherwise disclosed, we do not collect or receive personal data directly from you, as a consumer. Rather, we process transaction or routing data that consumers have provided to our Merchant clients.

We provide Merchants with our services integrated into their websites, platforms, and apps for consumers to place orders accordingly. Except for direct support inquiries or Fraud Prevention service, we do not collect personal data directly from consumers, we process data provided to us by our Business Partners to fulfill our services.

Please note that this Policy does not cover the practices or policies of Merchants, Business Partners or any other party that may have access to your personal data. Consumers should review the privacy policies of the business entities with which they directly share their data to learn about such entities’ privacy practices.

While this policy sets forth our general privacy and security practices, our detailed obligations and commitments to our clients are set forth in our contractual arrangements with them. In the event of a conflict between this policy and a client contract, the client contract prevails.

Please read the following carefully to become familiar with our practices and routines – and contact us if you have any questions.

EG Fintech Solutions AB, reg. no. 559483-5661, acts as the Data Controller for Fraud Prevention processing and general consumer inquiries, and as a Data Processor when transiently routing personal data via API for travel flexibility services on behalf of our Business Partners(the Data Controllers).

The specific type of data collected or processed will depend on the service provided, including in but not limited to:

Contact information: If you contact us for questions or complaints, we will collect the information related to your inquiry such as name, email address, postal address, telephone number, and other contact information.
Transaction and Travel data: When you place an order a Merchant, we collect or process various data regarding your transaction that may relate to the purchase and sale of goods, travel, or services, website registration, chargeback requests, unauthorized use of a credit card or other form of payment, payment requests, or other events relating to a Merchant client’s website, property, or resources such as your:
Name, email address, telephone number, date of birth, items or flights purchased, itinerary/booking details, the items you purchased, price paid, shipping information;
Payment and billing method.
Device data: Information about the personal computer or mobile device you use to access the Merchant’s website, including its model, operating system, unique device identifiers, browser type, mobile network information, and the Internet Protocol (“IP”) address.
Geo-location data: We may collect your precise geo-location when you actively use the Merchant’s app or your town-approximate geo-location when you use the Merchant’s website.
Information collected automatically using cookies and other tracking technologies, such as browser information (details of the web pages you have visited on our website, and the content that you access). More information can be found through the Cookie Policy.

EG Fintech Solutions AB only accepts data elements from Merchants if the data are rationally related to the performance of the applicable service that a Merchant purchases from us in accordance with the respective service agreement.

To be allowed to handle your personal data, the applicable data protection legislation obligates us to have a so-called “legal basis” for each of our purposes to process your personal data, as follows:

a. Fraud Prevention
What we do (our purposes with handling your personal data): For Fraud Prevention, we use personal data collected to analyze whether a transaction is fraudulent or not. When you place an order on a Merchant website, we crunch the aggregate data of your activities across the e-commerce websites of all Merchants we operate (other e-commerce websites and third-party patterns/analytics) to provide a fraud analysis suggesting whether or not the order is, in our assessment, a fraudulent online transaction. Based on the fraud analysis we generate a fraud score to suggest to the Merchant to approve or reject a transaction in real-time accordingly, without involvement and/or decision from the Merchant site on such score and respective suggestion. The Merchant will determine at its own discretion, whether to accept and process your order, or decline it. The personal data might be also used to address other transaction data management challenges or manage chargebacks in accordance with the services agreement with the Merchant.
Our Legal Basis: Your data is processed in accordance with the service agreement we have in place with the Merchant and pursuant to your consent or in line with the business purposes and legitimate interests of the Merchant that collected the personal data from you.

b. Travel Flexibility and Partner Integrations
What we do (our purposes with handling your personal data): For the travel products and services, we act as a pass-through technical infrastructure, we securely transmit data solely to perform the requested services and do not store or persist this data in our own systems.
Our Legal Basis as a Data Processor: Data is processed strictly on behalf of, and pursuant to documented instructions from, the Business Partners (who act as Data Controllers and determine the legal basis). Our processing is governed by the required safeguards, including a Data Processing Agreement (DPA) in place, which ensures that we only handle this data to perform the specific services contracted by our clients.

c. Legal & Regulatory Compliance
What we do (our purposes with handling your personal data): Comply with applicable government regulations and other legal requirements, obligations and/or orders.
Our Legal Basis: Processing is necessary to comply with legal obligations (e.g., for accounting and tax purposes) legal proceedings, or government authorities’ orders, as well as to cooperate with courts and law enforcement bodies when required.

d. Customer Inquiries
What we do (our purposes with handling your personal data): To contact you in response to direct inquiries or complaints.
Our Legal Basis: Processing is based on your consent as acquired by contacting us.

Your personal data will be retained by us for the intended purposes in accordance with applicable data protection legislation and company policies. Upon your request and once your personal data is no longer required to be retained for a longer duration (by applicable laws and regulations), it will be promptly deleted or anonymized in accordance with EG Fintech Solutions AB policies.

However, please note that the period for which personal data is retained is determined by the service agreement between us and each individual Merchant client and may vary based on the type of the service. Specific elements of a transaction (such as an email address or phone number), suspected to have been used in a fraudulent manner will be retained for longer periods consistent with the agreements with Merchants. Consumers should contact the business entities with which they directly share their data to learn how long their transaction data may be retained.

For API integrations with our Business Partners, transaction data passed through our system is held transiently during system processing and is not stored persistently in our primary databases.

We will only share your personal data where necessary for the purposes listed in this Privacy Policy, with the following potential recipients:

Other companies within the EG Fintech Solutions AB;
Governmental authorities, law enforcement agencies, courts, regulators, to comply with legal obligations as required;
With the Merchant you have a transaction with: we may share limited personal data with the Merchant for review or audit purposes;
Our trusted third party service providers and/or our subcontractors: IT infrastructure providers, finance, administrative, cloud service providers, and payment service providers who help us maintain our website or deliver our services. For Fraud Prevention, elements of data may be shared with operators of online publicly available data sources for cross-referencing and verification purposes to enhance the accuracy of the data we collect
Potential partners involved in business transactions, in the event we intend to sell or transfer ownership or control of any or all of our business, operations or services to a third party, as part of any corporate reorganization process including, but not limited to, mergers, acquisitions, and sales of all or substantially all of our assets;
Strategic partners, agents, or other unaffiliated parties, but only with your additional express consent.

When any of the above service providers act as data processors, they handle your personal data with sufficient security measures and only in accordance with instructions provided by us and applicable data protection legislation.

We inform you that some of the service providers to which we may disclose your personal data might be established outside Europe (EU), European Economic Area (EEA), UK, and Switzerland. When we transfer your personal data to such other jurisdictions, we take steps and measures to ensure that your personal data is securely transferred and that the receiving parties have in place suitable data protection standards or other derogations as allowed by applicable data protection legislation. These measures may include data transfer agreements, implementing standard contractual clauses.

Our website may contain links to other websites and serve content from third party providers. This Privacy Policy only applies to our website and our services. When you follow links to other websites, or use third party services and products, you should read their privacy policies.

If you choose to contact us via social media, this Privacy Policy does not apply to any personal data submitted by you as part of such contact – in such case, we recommend that you read the privacy policy of such social media provider. In case of interacting with us through social media on an EG Fintech Solutions AB administered social media page such as LinkedIn, kindly note that your personal data (such as your name, your profile picture, and the fact that you are interested in EG Fintech Solutions AB) will be visible to all visitors of your personal profile depending on your privacy settings on the relevant social media platform, and will also be visible to us. EG Fintech Solutions AB does not track your activity across the different social media sites that you use.

Certain jurisdictions (such as in the EU, Switzerland, UK, California, Colorado, Connecticut, Utah, Virginia, and other U.S. states), extend enhanced privacy rights to residents of or persons located in the jurisdiction. Exercise of these rights may be subject to receipt by us of a verifiable request from you as well as to limitations under applicable law. Your rights, depending on the jurisdiction and our reason for processing your information, may include some or all of the following:

Right to access – You are entitled to access your personal data that we handle. You are also entitled to receive certain information about what we do with your personal data.
Right to rectification – You are entitled to correct inaccurate personal data concerning you and to have incomplete personal data completed.
Right to erasure – You are entitled to have your personal data erased. This is known as the “right to be forgotten.”
Right to restriction of processing – You are entitled to restrict how we use your personal data.
Right to data portability – You are entitled to receive your personal data (or have your personal data directly transmitted to another data controller) in a structured, commonly used and machine-readable format from us.
Right to object – You are entitled to object to certain types of handling of personal data that we carry out. This applies to all our activities that are based on our “legitimate interest”.
Right to withdraw consent – For the purposes you have consented to the processing of your personal data, you have the right to withdraw your consent at any time.
Right to lodge a complaint with the applicable data protection supervisory authority, in the country in which you live. If you are an EU, Swiss, or UK resident, although we would encourage you to first contact us directly to resolve any concerns.
If you are a California resident, you have the right not to receive discriminatory treatment as a result of exercising your rights under the California Consumer Privacy Act, and EG Fintech Solutions AB will not discriminate against you for exercising your privacy rights.

If you are a California or Connecticut resident, you may have an authorized agent submit a request to know, a request to delete, or a request to opt-out, so long as you provide the authorized agent with written permission to submit the relevant request and you verify your own identity directly with EG Fintech Solutions AB. Such restrictions do not apply where you provide your authorized agent with power of attorney pursuant to California Probate Code sections 4000 to 4465. Kindly note that EG Fintech Solutions AB will not sell or share your personal information with anyone other than such third parties as mentioned in Section 5 and will not sell or share your personal information with anyone for their direct marketing purposes.

If you are a Utah or Virginia resident, the applicable laws do not allow you to have an authorized agent exercise your rights described above, so EG Fintech Solutions AB will not accept an authorized agent if you are a resident of these states.

In the event that EG Fintech Solutions AB acts as a Data Processor, requests to exercise these rights should generally be directed to the Business Partner that acts as the Data Controller that collected your personal data. However, if you wish to contact us directly, we will assist you or direct your request to the appropriate party.

In order to keep your personal data secure, we have implemented a number of technical and organizational security measures and we maintain a high level of security in all systems to safeguard the personal data in our possession against loss, theft and unauthorized use, disclosure, or modification.

In addition, we store the personal data in our servers in Europe and have adopted policies to ensure that our employees (who are subject to confidentiality obligations) do not use personal data when it is not necessary. Such policies also set out our standards for when we contract suppliers or introduce new IT systems within our operations.

EG Fintech Solutions AB has taken reasonable steps to ensure that appropriate technical and organizational security measures are also implemented by data processors acting for and on its behalf, to ensure the security of the processing of your personal data overall.

Subject to our agreements with Merchant clients, we may apply statistical analytics to aggregate data received from Merchants, in order to identify patterns or anomalies that are useful in predicting the likelihood of fraud in any given transaction.

Data exchanged via our integration channels is encrypted in transit using Transport Layer Security (TLS).

If you have any questions relating to our handling of your personal data or our use of cookies, if you would like to invoke any of your rights under applicable data protection legislation, please send an email to: privacy@precisiontraveltech.com or use the following details:

EG Fintech Solutions AB

Attn: Privacy Manager
P.O. Box 3069
111 53 Stockholm
Sweden

Email: privacy@precisiontraveltech.com

We reserve the right to change this Privacy Policy from time to time in our sole discretion. When we do, we will also revise the “Last Updated” date at the bottom of this Privacy Policy. Please check back frequently to see any updates or changes to our Privacy Policy.

Last updated: September 2026