Schedule a demo

Pick a time with our team. The scheduler is provided by Calendly and sets its own cookies.

Prefer email? support@coriunder.com

We use your details to arrange your demo. Read our Privacy Policy.

Privacy policy

Last updated: 26 October 2026

In shortWe collect the details you give us (for example when you book a demo or contact sales), basic data about how our website is used, and the business contact details we need to work with customers, partners and suppliers. We use them to respond to you, run and improve our website and services, and meet our legal obligations. We do not sell personal data. Analytics and embedded media only run if you agree to them. You can access, correct or delete your data, and object to marketing, at any time.

1. Who we are

Coriunder Limited ("Coriunder", "we", "us") is a company registered in the Republic of Cyprus, with its office at Constantinou Skokou 1, Capital Chambers, Nicosia 1061, Cyprus. We provide a white-label payments platform to payment service providers, acquirers, marketplaces and other financial businesses.

For the personal data described in this policy, Coriunder Limited is the data controller under the EU General Data Protection Regulation (GDPR) and the Cyprus law that implements it. You can reach us about privacy at josh@coriunder.com.

2. Scope of this policy

This policy covers personal data we process for our own purposes when you:

  • visit coriunder.com and its pages;
  • contact us, book a demo or ask for a quote;
  • work for one of our customers, partners or suppliers and deal with us;
  • apply for a job with us;
  • subscribe to our news or attend our events.

Data on the Coriunder platform. Our customers use the Coriunder platform to run their own payment business, and in doing so process data about their merchants, partners and end customers. For that data we act as a processor on our customer's instructions, under a data processing agreement with them. Our customer is the controller, and its own privacy notice applies. If you are a merchant or end customer of a business that uses Coriunder, please contact that business first.

3. Data we collect

CategoryExamplesWhere it comes from
Contact and identity detailsName, job title, company, business email, phone number, countryYou, when you fill in a form, book a call, email us or meet us
Enquiry and meeting detailsWhat you asked about, your business model and volumes, meeting dates and notesYou, our scheduling tool, our sales and support teams
Compliance detailsCompany registration and ownership details, sanctions and adverse-media screening results for a prospective customerYou, public registers, screening providers
Customer relationship dataContract, billing and support contacts, correspondence, invoicesYou, your employer, our own records
Website usage dataIP address, browser and device type, pages visited, referring page, time on pageYour browser, our servers and, with your consent, analytics tools
PreferencesYour cookie choices and marketing preferencesYou
Recruitment dataCV, work history, interview notes, referencesYou, recruiters, referees you name

We do not ask for, and ask you not to send us, card numbers or other sensitive data through the website. We do not knowingly collect special categories of data (such as health data) through the website.

4. How we use it and our legal bases

PurposeLegal basis (GDPR article 6)
Answering your enquiry, arranging demos and preparing quotesSteps before a contract at your request; our legitimate interest in responding to business enquiries
Checking prospective customers before onboarding (company, ownership, sanctions)Legal obligation; our legitimate interest in preventing fraud and financial crime
Providing our services, billing and support to customersPerformance of our contract with your employer; our legitimate interest in managing the relationship
Running, securing and improving the websiteOur legitimate interest in a secure, working website
Website analytics and embedded videos or schedulerYour consent, which you can withdraw at any time
Sending news and marketing to business contactsOur legitimate interest in B2B marketing, or your consent where the law requires it
RecruitmentSteps before a contract at your request; our legitimate interest in hiring
Meeting legal, tax, accounting and regulatory duties; handling claimsLegal obligation; our legitimate interest in establishing or defending legal claims

Where we rely on legitimate interests, we have weighed them against your rights. You can ask us for details and you can object (see section 9). We do not use your data for decisions based solely on automated processing that have legal or similarly significant effects on you.

5. Who we share it with

We share personal data only where needed for the purposes above, with:

  • service providers that host and run our systems, email, scheduling (Calendly), analytics (Google), video (YouTube), customer-relationship and support tools, under contracts that limit their use of the data;
  • compliance and screening providers when we check prospective customers;
  • professional advisers such as lawyers, auditors and insurers;
  • our partners only when you ask us to connect you, for example with an acquirer or integration partner;
  • authorities, regulators and courts where the law requires it or to protect our rights;
  • a buyer or successor if all or part of our business is sold or restructured, under equivalent protection.

We do not sell personal data and we do not share it for third-party advertising.

6. International transfers

Some of our service providers process data outside the European Economic Area. When they do, we rely on a European Commission adequacy decision (including the EU-US Data Privacy Framework where the provider is certified) or on the European Commission's standard contractual clauses, with additional safeguards where needed. You can ask us for a copy of the safeguards that apply.

7. How long we keep it

We keep personal data only as long as we need it for the purpose we collected it for, and then delete or anonymise it. As a guide:

  • enquiries and demo requests that do not lead to a contract: up to 24 months after our last contact;
  • customer, contract and billing records: for the life of the relationship and then for as long as tax, accounting and anti-money-laundering laws require (in Cyprus, generally six years);
  • compliance screening records on prospective customers: as long as anti-money-laundering laws require;
  • website analytics: up to 14 months in our analytics tools;
  • your cookie choice: until you change it or clear your browser storage;
  • job applications: up to 12 months after the role is filled, unless you agree we can keep your details longer.

We keep data longer only where the law requires it or where it is needed for an actual or expected legal claim.

8. Security

We protect personal data with technical and organisational measures appropriate to the risk, including encryption in transit, access controls on a need-to-know basis, logging and staff confidentiality obligations. Our payments platform is certified to PCI DSS Level 1. No system is completely secure, so if you think your data has been put at risk, please tell us straight away.

9. Your rights

Under the GDPR you have the right to:

  • access the personal data we hold about you and get a copy;
  • correct data that is wrong or incomplete;
  • delete your data where we no longer have a reason to keep it;
  • restrict how we use your data in certain cases;
  • object to processing based on our legitimate interests, and to direct marketing at any time;
  • data portability, to receive data you gave us in a common machine-readable format;
  • withdraw consent at any time where we rely on it (for cookies, use Cookie settings at the foot of any page).

To use any of these rights, email josh@coriunder.com. We may need to confirm your identity. We answer within one month, which we can extend by two further months for complex requests, and we will tell you if we do. Using your rights is free unless a request is clearly unfounded or excessive.

You also have the right to complain to a data protection authority. In Cyprus this is the Office of the Commissioner for Personal Data Protection (dataprotection.gov.cy). If you live elsewhere in the EEA, you can complain to the authority in your own country. We would appreciate the chance to resolve your concern first.

10. Marketing

We send news about Coriunder to business contacts who have dealt with us or asked to hear from us. Every message has an unsubscribe link, and you can also opt out by emailing us. Opting out does not affect service messages about an existing contract.

11. Children

Our website and services are for businesses and are not directed at anyone under 18. We do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed. If we make a significant change, we will show a notice on the website or tell customers directly.

13. Contact

Questions about this policy or your data: josh@coriunder.com, or write to Coriunder Limited, Constantinou Skokou 1, Capital Chambers, Nicosia 1061, Cyprus. For product support, use support@coriunder.com.

CORIUNDER LIMITED Registered in Cyprus Constantinou Skokou 1, Capital Chambers, Nicosia 1061, Cyprus josh@coriunder.com