Data Privacy
This Data Privacy notice describes how Triptel stores, protects and retains your data. It supplements our Privacy Policy.
Where data is stored
Platform data is stored on secured servers operated by our hosting provider. Access is limited to authorised staff who need it for their role.
Security measures
- All traffic to the platform is encrypted with HTTPS.
- Passwords are stored only as salted hashes; API keys are stored hashed and shown to merchants once.
- Identity documents are stored separately from public files and are visible only to authorised administrators.
- Administrative actions such as wallet adjustments, price changes and approvals are recorded in an audit log.
- Wallet balances are kept in a double-entry ledger so every credit and debit can be traced.
Retention periods
- Account profile: while the account is active, and up to 12 months after closure.
- Orders, wallet ledger and payment records: at least 6 years, for accounting and tax purposes.
- Identity (KYC) documents: while the account is active and up to 5 years after closure, or as required by law.
- Security and audit logs: up to 24 months.
- Supplier request logs: up to 12 months.
Deleting your data
You can ask us to delete your account by writing to support@triptel.co. We will delete or anonymise personal data that we are not legally required to keep and tell you what must be retained and why.
Data breaches
If a breach affects your personal data we will notify you and the relevant authorities without undue delay, as required by law.