Privacy Policy

Last updated: 9th June 2026

Introduction

The information in this Privacy Policy describes how we, Musqet Limited, a private limited company incorporated in England and Wales with company number 11830174 whose registered office is located at First Floor, 5 Fleet Place, London, United Kingdom, EC4M 7RD, use the personal data you provide us in connection with your use of the Musqet Merchant App, the payment acceptance services provided by us through the Musqet Merchant App, our website (including any AI-powered interactive features on our website), and any other services provided by us which are accessible through the Musqet Merchant App (collectively, the "Services") and through any communications with us in connection with your use of the Musqet Merchant App and/or the Services ("Communications").

We respect your privacy and protecting your information is paramount. We want you to be informed and empowered with respect to your privacy when you make use of the Musqet Merchant App, the Services and during any Communications with us, so please read this Privacy Policy carefully. This Privacy Policy sets out our practices regarding your personal data, how we collect, process, and treat it, and the rights you have in relation to the protection of your personal data.

Important information and who we are

Musqet Limited is the controller and is responsible for your personal data (referred to as "Musqet" "we", "us" or "our" in this policy).

We have appointed a data protection officer (DPO). If you have any questions about this privacy policy, please contact them using the details set out below.

Contact details

Our full details are:

  • Full name of legal entity: Musqet Limited
  • Name or title of DPO: Chief Executive Officer
  • Email address: DPO@musqet.tech
  • Postal address: First Floor, 5 Fleet Place, London, United Kingdom, EC4M 7RD

Complaints

If you have a complaint relating to the processing of your personal data, please use the contact details above to contact us.

We would appreciate the opportunity to address any concerns or complaints you may have with respect to the Musqet Merchant App and the Services and Communications and our data processing practices. However, you have the right to make a complaint at any time to the Supervisory Authority (that is, the regulator for data protection issues). In the UK, this is the Information Commissioner's Office ("ICO") (https://ico.org.uk/make-a-complaint/).

Your duty to inform us of changes

It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during our relationship with you.

The data we collect about you

We may collect, use, store and transfer different kinds of personal data about you as follows:

  • Communications Data: details regarding the communications made between us.
  • Identity Data: e.g., first name, last name, maiden name, username or similar identifier, marital status, title.
  • Contact Data: e.g., email address and telephone numbers.
  • Financial Data: e.g., digital wallet address.
  • Transaction Data: e.g., details about payments from you.
  • Usage Data: includes details of your use of the Musqet Merchant App and the Services including, but not limited to, traffic data and other communication data, whether this is required for our own billing purposes or otherwise and the resources that you access.
  • Marketing and Communications Data: includes your preferences in receiving marketing from us by e-mail.
  • Location Data: IP address to track your location.
  • Voice and Transcript Data: transcriptions of your spoken interactions with our AI avatar on our website, including the content of queries you submit.
  • AI Interaction Data: records of your interactions with our AI avatar, including the questions asked and responses provided, used for quality assurance and service improvement.

We also collect, use and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data could be derived from your personal data but is not considered personal data in law as this data will not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to share information about how the Musqet App is being used. However, if we combine or connect Aggregated Data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this privacy policy.

We do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data). Nor do we collect any information about criminal convictions and offences. Musqet does not itself record or store video or still images of website visitors; however, our AI avatar technology provider analyses facial expression and voice characteristics during a live conversation under its own terms (see AI avatar interactions below).

How is your personal data collected?

We will collect and process the following data about you:

Information you give us. This is information (including Communications, Identity, Contact, Financial, Transaction, Usage, Marketing and Communications and Location Data) you consent to giving us about you by filling in forms on the Musqet Merchant App, or through Communications with us (for example, by email or chat). It includes information you provide when you register to use the Musqet Merchant App or subscribe to any of our Services and when you report a problem with the Musqet Merchant App or our Services. If you contact us, we will keep a record of that correspondence.

Information we collect about you. Each time you use the Musqet Merchant App we will automatically collect personal data including Usage Data.

Location Data. We use your IP address to determine your current location. The Musqet Merchant App and our Services are only available in certain locations and it is therefore necessary for us to determine your current location in order to enable your access to the Musqet Merchant App and our Services.

Information collected through AI avatar interactions. When you choose to interact with our AI avatar on our website, we collect transcriptions of your spoken queries and a record of the interaction. This data is only collected with your explicit consent, which is obtained before the interaction begins. You may withdraw your consent at any time by ceasing to use the AI avatar feature. Your audio and live camera feed are transmitted to and processed by our AI avatar technology provider in real time to enable the conversation; Musqet does not itself record or store video or still images of you, but our AI avatar technology provider may record and retain this data under its own privacy policy.

AI avatar interactions

Our website features an AI-powered avatar designed to help you understand our products and services. This section explains in detail how we handle personal data collected through this feature.

What data is collected

When you interact with our AI avatar, the following data is collected:

  • Transcriptions of your spoken words, converted to text in order to process your query.
  • A record of the questions you ask and the responses provided by the AI avatar.
  • The time and duration of your interaction session.

Your audio and live camera feed are transmitted to and processed by our AI avatar technology provider in real time to enable the face-to-face conversation. Musqet does not itself record or store video or still images of you; our AI avatar technology provider may record and retain this data under its own privacy policy.

How we use this data

Data collected through AI avatar interactions is used for the following purposes:

  • To respond to your queries in real time.
  • To assist you in the selection and purchase of our products.
  • To improve the accuracy and quality of the AI avatar service.
  • For quality assurance, including review by our staff of interaction transcripts.
  • To develop and improve our products and services.

Automated decision-making

The AI avatar does not make any automated decisions that produce legal or similarly significant effects about you. It is a conversational tool only.

Consent and withdrawal

Your use of the AI avatar is entirely voluntary. Before the avatar activates, you will be presented with a clear consent notice explaining what data will be collected and how it will be used. By proceeding, you consent to this processing. You may withdraw your consent at any time simply by closing or ceasing to use the AI avatar. Withdrawal of consent will not affect the lawfulness of any processing carried out before withdrawal.

Retention of AI interaction data

The transcript, content and any associated IP address of your AI avatar interactions are retained in our systems for 90 days from the date of the interaction, after which they are securely and permanently erased from our systems, unless we are required to retain them for legal or regulatory purposes. Our AI avatar technology provider retains and processes data from the interaction, including your audio and video, under its own privacy policy and retention periods, which are outside Musqet's control. Any contact details you choose to share with us (for example, to arrange a follow-up) are retained in accordance with the Data retention section below.

How we use your personal data

We will only use your personal data when the law allows us to do so. Most commonly we will use your personal data in the following circumstances:

  • Where you have consented before the processing.
  • Where we need to perform a contract we are about to enter or have entered with you.
  • Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests. When we rely on our legitimate interests, you have the right to object at any time.
  • Where we need to comply with a legal or regulatory obligation.

For example, we may process your personal data to:

  • Keep our records up to date.
  • Provide you with our Services, including for the purpose of quality control and analysis.
  • Develop and improve our Services.
  • Communicate and manage our relationship with you.

We will only send you direct marketing communications by email if we have your consent. You have the right to withdraw that consent at any time by contacting us.

We will not share your personal data with any third party for marketing purposes.

Purposes for which we will use your personal data

To register you as a new Musqet Merchant App user

  • Type of data: Identity, Contact, Location
  • Lawful basis: Your consent

To deliver the Services including managing payments and collecting money owed to us

  • Type of data: Identity, Contact, Financial, Transaction, Location
  • Lawful basis: Performance of a contract with you; Necessary for our legitimate interests (to recover debts due to us)

To manage our relationship with you including notifying you of changes to the Musqet Merchant App or any of the Services and managing any requests or complaints received from you

  • Type of data: Identity, Contact, Financial, Marketing and Communications
  • Lawful basis: Performance of a contract with you; Necessary for our legitimate interests (to keep records updated and to analyse how customers use our products/Services); Necessary to comply with legal obligations (to inform you of any changes to our terms and conditions)

To administer and protect our business and the Musqet Merchant App including troubleshooting, data analysis and system testing

  • Type of data: Identity, Contact
  • Lawful basis: Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security)

To make recommendations to you about goods or services which may interest you; To monitor trends so we can improve the Musqet Merchant App

  • Type of data: Identity, Contact, Content, Usage, Marketing and Communications, Location
  • Lawful basis: Consent; Necessary for our legitimate interests (to develop our products/Services and grow our business)

To operate the AI avatar, respond to your queries in real time, and provide you with information about our products and services

  • Type of data: Voice and Transcript Data, AI Interaction Data
  • Lawful basis: Your consent (obtained prior to commencing the interaction)

To improve the AI avatar service through quality assurance and staff review of interaction transcripts

  • Type of data: Voice and Transcript Data, AI Interaction Data
  • Lawful basis: Your consent; Necessary for our legitimate interests (to improve our products and services)

Disclosures of your personal data

We may need to disclose your personal data to others to facilitate the provision to you of the Musqet Merchant App. Disclosure of your personal data to a third party will only be made where they agree to keep your information confidential and will only be used for the specific purpose for which we provide it to them. Your data may be disclosed to the other persons or entities as described below.

  • Third parties who supply services to us, such as our payment service provider and our AI avatar technology provider.
  • Our professional advisors, such as our legal advisors where they require information in order to provide advice to us in relation to the Musqet Merchant App, our Services, or Communications.
  • Any regulatory authority we may be subject to for the purpose of demonstrating compliance with applicable laws and regulations.
  • Third parties to whom we may choose to sell, transfer or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this privacy policy.
  • Such third parties as we reasonably consider necessary in order to prevent crime, e.g., the police.

Third Party Processors

Our carefully selected partners and service providers may process personal information about you on our behalf as described below:

Digital Marketing Service Providers

We periodically appoint digital marketing agents to conduct marketing activity on our behalf, such activity may result in the compliant processing of personal information. Our appointed data processors include:

(i) Prospect Global Ltd (trading as Sopro) Reg. UK Co. 09648733. You can contact Sopro and view their privacy policy here: http://sopro.io. Sopro are registered with the ICO Reg: ZA346877 their Data Protection Officer can be emailed at: dpo@sopro.io.

AI avatar technology providers

The AI avatar is an optional feature provided with the assistance of a third-party technology provider, Tavus Inc., a company based at 2261 Market Street STE 86391, San Francisco, CA 94114, USA. If you choose to use the AI avatar, your interaction, including your audio and live camera feed, is transmitted to and processed by Tavus. Tavus processes, and may record, retain and analyse, this data under its own terms of service and privacy policy, which include its own retention periods, the analysis of facial expression and voice characteristics during the live conversation, and the use of anonymised data to develop and improve its services and AI models.

Because of this, using the AI avatar requires you to agree to Tavus's terms of service and privacy policy in addition to Musqet's terms and this Privacy Policy. The feature is entirely optional. If you do not wish to agree, please do not use the AI avatar; you can contact us instead using the contact form on our website. You can review Tavus's terms of service at https://www.tavus.io/terms-of-service and their privacy policy at https://www.tavus.io/privacy-policy.

International transfers

Your personal data may be stored and processed outside the UK in countries that may have different data protection rules than our own. This includes data collected through our AI avatar feature, which may be processed by technology providers located outside the UK. Whenever we transfer your personal data out of the UK, we ensure a similar degree of protection is afforded to it by ensuring appropriate safeguards have been put in place.

Please contact us if you want further information on the specific mechanism used by us when transferring your personal data out of the UK.

Data security

All information you provide to us is stored on our secure servers. Any payment transactions carried out by us or our chosen third-party provider of payment processing services will be encrypted. Voice and Transcript Data and AI Interaction Data collected through our AI avatar are stored securely and access is restricted to authorised personnel only.

Once we have received your information, we will use strict procedures and security features to try to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator when we are legally required to do so.

Use of Cookies

The Musqet Merchant App and our Services use "cookies" to collect and store certain information. These typically involve pieces of information or code that a website transfers to or accesses from your computer hard drive or mobile device to store and sometimes track information about you. Cookies help us recognise you as a unique visitor when you return to the Musqet Merchant App. This helps us to provide you with a good experience when you use the Musqet Merchant App and also allows us to improve the Musqet Merchant App and the Services.

The Musqet Merchant App and our Services use strictly necessary cookies only which enable you to log into secure areas of the Musqet Merchant App.

The Musqet Merchant App and our Services do not use analytical or performance cookies, functionality cookies or targeting cookies, or any other cookies that require your prior consent.

Cookies used:

Cookie Title
Security Cookie
Cookie Type
Strictly necessary
Cookie Name
"msn"
Purpose
To ensure that you are authorised to use the Musqet Merchant App and our Services
Expiry
1 hour

If you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of the Musqet Merchant App or our Services.

For further information about cookies and how to disable them please go to the guidance on cookies published by the ICO or www.allaboutcookies.org.

Data retention

We will only keep your personal data for as long as necessary to carry out the relevant purposes set out in this Privacy Policy and in order to comply with our legal and regulatory obligations, following which we will securely destroy your personal data. We will provide you with more detail regarding the storage periods for the different types of personal data as and when you request.

Voice and Transcript Data and AI Interaction Data collected through our AI avatar are retained and then erased as described in the AI avatar interactions section above. Our AI avatar technology provider retains data from the interaction under its own privacy policy, which is outside Musqet's control.

In some circumstances you can ask us to delete your data: see Your legal rights below for further information.

In some circumstances we will anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.

Your legal rights

We are committed to delivering the rights that data protection law provides. Please be aware that these rights are often not absolute, and exemptions may apply.

You have the right to:

  • Be informed and to be provided with clear, transparent and easily understandable information about how we use your information and your rights. This is why we are providing you with the information in this Privacy Policy.
  • Request access to your personal data (commonly known as a "data subject access request"). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
  • Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.
  • Request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.
  • Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.
  • Request restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data in the following scenarios:
    • if you want us to establish the data's accuracy;
    • where our use of the data is unlawful but you do not want us to erase it;
    • where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or
    • you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.
  • Request the transfer of your personal data to you or to a third party. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.
  • Withdraw consent at any time where we are relying on consent to process your personal data, including your consent to AI avatar data collection. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain Services to you. We will advise you if this is the case at the time you withdraw your consent.

You can exercise any of these rights at any time by contacting us using the contact details set out at the top of this Privacy Policy.

How we Protect Your Information

We do our best to protect your personal data, but we cannot guarantee the security of your data transmitted; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access, loss, or damage.

Links to Third Party Websites

The Musqet Merchant App may, from time to time, contain links to and from the websites of our partner networks, advertisers, and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies.

Changes

We keep our privacy policy under regular review. This version was last updated on 9th June 2026.

We may make changes to this Privacy Policy in future to reflect changes in the functionality of the Musqet Merchant App or otherwise changes in the way that we process your personal data. Any changes we may make to this Privacy Policy will be posted here and, where the changes are material or we decide it is appropriate, notified to you in any manner we deem appropriate. Please check back frequently to see any updates or changes.