The General Data Protection Regulation (GDPR) is an EU law designed to provide additional protection for personal data, how companies use their data, and their right to privacy. GDPR applies to all personal data that is handled within the borders of the EU or relates to individuals in the EU, regardless of where the organisation handling the data is located. GDPR is the most significant change in data privacy regulation in 20 years.
The DPO Group is always determined to keep up with the highest level of security and standards to protect our merchants and their customers. DPO processes payments from customers all across the globe hence the requirement for us to be GDPR compliant
DPO Pay is compliant with the security standards of the Global Payment Card Industry (PCI) Security Standards Council.
The PCI DSS is an information security standard for organizations that process branded credit cards from major card schemes. All major card schemes mandate the PCI Standard to ensure utmost security. The Payment Card Industry Security Standards Council administers the PCI Standard.
With subsidiaries in South Africa (PayGate PTY and PayFast PTY) DPO is also POPIA compiant. Read the POPIA Policy below.
Here you can find our legal documents, including our Terms & Conditions, and Privacy Policy.
