1. Who we are
iKash operates ikash.biz, a payment orchestration platform for licensed pharmacies, compounding, medical, and regulated-adjacent healthcare commerce. For privacy enquiries contact riz@ikash.biz.
Legal
Privacy Policy
How iKash (ikash.biz) handles personal data when you visit our website, contact sales, or use our payment orchestration services.
Last updated: August 19, 2026 (UTC)
2. What data we collect
Depending on how you interact with us, we may process:
- Website visitors — IP address, browser type, pages viewed, and referral source (server logs; analytics only if you consent to cookies).
- Contact & sales leads — name, email, phone, company name, and message content when you use our contact form or live chat.
- Merchants — business identity, KYB/KYC documentation, bank details, transaction metadata, and account credentials as required to provide payment orchestration.
- Checkout — session identifiers and order references; card data is handled by payment service providers (PSPs), not stored on our servers in clear form.
3. Why we use your data (legal bases)
- Contract — to onboard merchants and process payments you request.
- Legitimate interests — to secure our platform, prevent fraud, and improve our services.
- Consent — for non-essential cookies (e.g. analytics) and optional marketing where applicable.
- Legal obligation — anti-money-laundering, tax, and financial regulations.
4. Cookies & similar technologies
We use the following categories:
| Category | Purpose | Consent |
|---|---|---|
| Essential | Authentication, checkout session, security, load balancing | Not required |
| Functional | Live chat session continuity (browser local storage) | Disclosed; essential for chat feature |
| Analytics | Usage statistics to improve the website | Required — opt in via cookie banner |
You can change your choice by clearing site data in your browser or contacting us. We do not load third-party analytics until you click “Accept all” on our cookie banner.
5. Who we share data with
We share data only as needed to operate the service:
- Payment service providers (PSPs) — to route and settle transactions.
- Infrastructure hosts — servers and databases that run ikash.biz.
- Communication tools — e.g. email and messaging integrations for sales support.
- Authorities — when required by law or valid legal process.
We do not sell personal data.
6. International transfers
Our infrastructure and partners may process data outside your country (including the UK, EU, and United States). Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms.
7. Retention
We retain data only as long as necessary: active merchant records for the life of the account plus statutory periods; contact leads typically up to 24 months unless you become a customer; server logs for security typically up to 90 days.
8. Your rights (EEA / UK)
If GDPR applies, you may have the right to access, rectify, erase, restrict, port, or object to processing, and to withdraw consent. You may lodge a complaint with your local supervisory authority. To exercise rights, email riz@ikash.biz.
9. Security
We use encryption in transit (TLS), access controls, and industry practices appropriate to payment-adjacent software. No method of transmission over the Internet is 100% secure.
10. Changes
We may update this policy. Material changes will be posted on this page with an updated date.