Privacy Policy

Last updated: December 12, 2024

Sonapay Inc. (“we,” “us,” “our,” or “SONA”) located in Nova Scotia, Canada, is a subsidiary of Celero Commerce Canada Inc. This  Privacy Policy  (“Policy”) details how SONA collects, uses, and discloses your personal information when you visit our website at www.sonapay.ca (the “Site”) or access or use our products and services, or otherwise interact with us (collectively, the “Services”).  We are committed to protecting your privacy as described in this Policy. 

We urge you to read this Policy in full.  By using our Services, you agree that your personal information will be handled as described in this Policy.  Your use of our Services and any dispute over privacy is subject to this Policy and our Terms and Conditions, available at https://www.celerocommerce.com/terms-conditions, including their applicable terms governing limitations on damages and the resolution of disputes.

Please note that depending on how you interact or engage with us, we may provide other privacy notices with additional details about our information practices.  This Policy does not apply to job applicants and candidates who apply for employment with us, or to employees in the context of the employment relationship.  

This Privacy Policy addresses the following topics:

  1. What Personal Information Do We Collect?
  2. Cookies and Tracking Analytics
  3. How Do We Use Personal Information We Collect?
  4. To Whom We May Disclose Personal Information
  5. How Does SONA Protect Your Personal Information?
  6. Privacy Rights of Children
  7. International Data Transfers
  8. Legal Rights Under Applicable Data Protection Laws
  9. Exercising Your Rights and Filing a Complaint
  10. How Long Do We Keep Personal Information?
  11. External Links and Features
  12. Changes to This Policy
  13. Contact Us

Personal information is information about you, where you can be identified from the information alone or in combination with other information. We may collect personal information directly from you, automatically through your use of the Services, and from other sources described below. 

Information You Provide to Us. 

In using our Services, you may provide us with personal information, including:

  • Account Information. When you register to have access to certain Services available on the Site and create an account, we may ask you for personal information, including your individual identifiers such as a username, first and last name, birth date, phone number, and e-mail address. 
  • Financial Information. When you register to have access to certain Services available on the Site and to create an account, we may collect your bank information to process payment. 
  • Contact Information. When you contact us or register for an account, including when you sign up with your email address or contact customer support, we may collect your contact information such as your name, email address, and any other contact information you may provide.
  • Correspondence. If you send us correspondence such as an email or a letter, we may collect information included in such correspondence.
  • Additional Information. As otherwise described to you at the point of collection or pursuant to your consent.

Personal Information That May Be Collected Automatically. 

When you visit our Site or use our Services, we may automatically collect your personal information, including through the use of cookies and other similar technologies. The personal information we may automatically collect includes:

  • Device Information. When you visit our Site or use our Services, we may collect your browser type, Internet Service Provider (ISP), operating system, language, device type, referring/exit pages, and operating systems.
  • Browsing Information. We may collect browsing information related to your use of the Site, such as items viewed, your interactions with the Site and advertisements, date/time stamps, movements around the Site, and other activity and usage information. 
  • Site Usage Information.  We may monitor and log your activities, preferences, and transactional data (such as your IP address) relating to your use of the Site and/or our Services, such as when you use the Site, the information you review, the frequency and size of data transfers, as well as information you display or click on within the Site.  This information may be used to diagnose technical problems or problems with your account or the Site in general.
  • Click-Through URLs. In some of our emails, we may use a “click-through URL” linked to content on the Site.  When you click one of these URLs, they pass through our web server before arriving at the destination web page.  We may track this click-through data to help us determine interest in particular topics and measure the effectiveness of our communications. 

Personal Information We May Collect from Other Sources. 

We may collect and receive certain personal information, such as your name, contact information, and certain transaction details from referral sources, including third-party business development organizations, customers and clients, and referring banks with whom we work.

We may collect information about your browsing behaviour, technical difficulties, and other Site-related information from our data analytics providers, and service providers who provide services or perform functions on our behalf.

To the extent permitted by applicable law, we may combine the information we collect from other sources with information that you provide us directly and that we collect automatically, as described above.  

We may use cookies and other mechanisms to automatically collect browsing activity and similar information within our Services.  We may use this information to identify and resolve bugs and errors in our Services; to assess, secure, protect, optimize, and improve the performance of our Services; for marketing and analytics purposes; and to personalize content in our Services.  To manage your preferences regarding cookies, targeted advertising, and other similar tracking mechanisms within our Services, please see Section 10, below.

  • Cookies. “Cookies” are alphanumeric identifiers we transfer to your device’s hard drive through your web browser for tracking purposes.  Some cookies allow us to make it easier for you to navigate our Services, while others are used to enable a faster log-in process, support the security and performance of the Services, or allow us to track aggregate and statistical information about user activity within the Services. 
  • Third-party Analytics. We may use applications, and tools, which are operated by third-party companies, to evaluate usage of our Services. These third-party companies may use cookies, pixels, and other tracking technologies to collect usage data about our Services and provide us with reports and metrics that help us evaluate usage of our Services and enhance performance and user experiences.  
  • Third-Party Advertising.  We work with third-party advertising networks, analytics, marketing partners, and others (“third-party ad companies”) to personalize content, display advertising within our Services and manage our advertising on third-party sites.  We may use cookies, pixels tags, and other tools to collect browsing and activity information within our Services (as well as on third-party sites and services), as well as IP address, unique ID, cookie and advertising IDs, and other online identifiers.  We may use this information to provide you with more relevant ads and content within our Services and on third-party sites, and to evaluate the success of such ads and content. 

We use the personal information we collect about you as follows:

  • Security and Protection of Rights. To protect the Services, our business operations, and our rights and those of our stakeholders and investors, prevent and detect fraud, unauthorized activities and access, and other misuse of our Site, including where we believe necessary to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the safety or legal rights of any person or third-party, or violations of our Terms and Conditions or your customer agreement.  
  • Services and Support. To provide, operate, and maintain the Services and features on the Site, including evaluating your eligibility for our Services, managing your account, providing technical support, fulfilling your requests, and processing charges or fees associated with your use of the Services. We may use personal information to diagnose service or technical problems.
  • Analytics, Personalization and Improvement.  To evaluate and improve the quality and design of the Site, improve our Services and to create new features, promotions, functionalities, and services by storing, tracking, analyzing, and processing your user preferences and trends as well as your activity and communications, personalize content, analyze how the Services are used, facilitate efficiency, and access your accounts. 
  • Communicate with You. To respond to your questions, provide customer support, send you requested materials and newsletters, as well as information and materials regarding our Services and offerings, including the services and offerings of our affiliates.  We may send administrative information to you, for example, information regarding the Site, our Services, or material changes to our Terms and Conditions and policies.  We also may send you service-related announcements, as needed.
  • Marketing and Advertising. To send you promotional information about our Services and the services offered by our affiliates or nonaffiliated parties that we think you may be interested in, with your consent. You may  unsubscribe from receiving such communications from us at any time by revising your account profile or using the unsubscribe link provided on email messages we may send.  
  • Compliance and Legal Process. To comply with applicable legal or regulatory obligations, including as part of a judicial proceeding, to respond to a subpoena, warrant, court order, or other legal process, or as part of an investigation or request, whether formal or informal, from law enforcement or a governmental authority.

We may aggregate and de-identify data related to our business and the Services for quality control, analytics, research and development, and other similar internal business purposes. We may also share anonymized data with third parties. 

We may disclose the personal information we collect about you for the purposes described above, under the following circumstances: 

  • Affiliates and Subsidiaries. We may disclose the personal information we collect about you to our corporate affiliates and subsidiaries to the extent necessary to provide a product or service you have requested. 
  • Business Partners. We may disclose the personal information we collect about you to our business partners, such as Elavon Canada and Fiserv for the purpose of providing services to you.
  • Vendors and Service Providers. We may share personal information with our agents, representatives, contractors and service providers so they can provide us with support services such as authorization of e-mail origination, payment processing, marketing, data analytics, and other support services. 
  • Business Transfers. If we are or may be acquired by, merged with, or invested in by another company, or if any of our assets are or may be transferred to another company, whether as part of a bankruptcy or insolvency proceeding or otherwise, we may disclose or transfer the personal information we have collected about you with or to the other company in accordance with applicable laws.  We may also disclose certain personal information as necessary prior to the completion of such a transaction or other corporate transaction such as a financing or restructuring, to lenders, auditors, and third-party advisors, including attorneys and consultants.
  • Professional Advisors. To conduct legal, financial, tax and accounting audits, audits and assessments of our operations, including our privacy, security and financial controls, as well as for risk and compliance purposes.  Personal information collected during the underwriting process is also used for underwriting and risk monitoring purposes.  We may also use personal information to maintain appropriate business records and enforce our policies and procedures.
  • Compliance and Legal Obligations. We also may disclose personal information to third parties to the extent required by applicable law and legal obligations.  For example, we may disclose information in response to subpoenas, court orders, and other lawful requests by regulators, government entities, and law enforcement, including responding to national security or law enforcement disclosure requirements, or as otherwise required by law or legal process. 
  • Security and Protection of Rights. Where required or permitted, we may disclose personal information to (i) prevent, detect, investigate, and respond to fraud, unauthorized activities and access, illegal activities, and misuse of the Services; (ii) investigate situations involving potential threats to the health, safety, or legal rights of any person or third-party; or (iii) enforce, detect, investigate, and take action in response to violations of our Terms and Conditions of Use.  We may also disclose personal information related to litigation and other legal claims or proceedings in which we are involved, as well as for our internal accounting, auditing, compliance, recordkeeping, and legal functions.
  • Other Disclosures. We may disclose personal information in other ways not described above that we notify you of, obtain your consent for, or that are otherwise authorized or required by law.

We have implemented reasonable security safeguards aimed at protecting the personal information we collect from loss, misuse, unauthorized access, disclosure, alteration, and destruction. We limit access to personal information to our employees and service providers who require access in connection with their role or function. Each of our employees is responsible for maintaining the confidentiality of all personal information to which they have access. We keep our employees informed about our polices and procedures for protecting personal information.  Note that despite our efforts, no data security measures can guarantee complete security, and it is possible that personal information may be lost, stolen or accessed without authorization.

Please be aware that emails or other messages you send to us (outside of any secure communication features provided within the Site) are not necessarily secure against interception and you should not include sensitive information in those messages.  We do not ask for your bank account number, password, or other sensitive information in an unsecured email, and you should assume that if you get such a request, it might be fraudulent.  We are not responsible for the circumvention of any privacy settings or security features.  You agree that we will not have any liability for misuse, access, acquisition, deletion, or disclosure of your Information.

If you believe that your Information has been accessed or acquired by an unauthorized person, you should promptly Contact Us so that necessary measures can quickly be taken.

Our Services are not designated for children.  We do not knowingly collect personal information from individuals under the age of eighteen (18).  Contact us if you believe that we have mistakenly or unintentionally collected Information from a person under age eighteen (18).

We may transfer your personal data for processing at locations outside your jurisdiction, including in the United States.  We will contractually bind our service providers to maintain at least the same level of data protection as we maintain. Your personal information may be transferred to a jurisdiction that does not have the same privacy laws and data protection rules as the jurisdiction where you reside. 

This section outlines the individual rights you may be entitled to.  Depending on where you live and subject to certain exceptions, you may have some or all of the following rights.

  • Right to Know and Access.  You have the right to know what information we hold about you and to know what we do with that information. You also have a right of access to your personal information we may process.  
  • Right to Request Correction of Inaccurate Information.  To the extent we may maintain inaccurate personal information, you have the right to request that we correct such inaccurate information, taking into account the nature of the personal information and the purposes of the processing of the personal information. 
  • Right to File a Complaint:  You have the right to file a complaint about the way we use or process your information with the applicable data protection authority in your jurisdiction.  

You also have the right to withdraw your consent at any time, subject to legal or contractual restrictions and reasonable notice. If you choose to withdraw your consent, it may affect the services we provide you. 

To exercise any of the rights described above or if you have any questions or concerns about our privacy practices, please submit a verifiable request to us via the methods described below.  The verifiable request must:

  • Provide sufficient information that allows us to reasonably verify you are the person about whom we collected information, or an authorized representative; and
  • Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

To help protect your privacy and maintain security, if you request access to or deletion of your personal information, we will take steps and may require you to provide certain information to verify your identity before granting you access to your personal information or complying with your request.  In addition, if you ask us to provide you with specific pieces of personal information, we may require you to sign a declaration under penalty of perjury that you are the consumer whose personal information is the subject of the request.  Only you or, as permitted by certain data protection laws, your authorized agent may make a verifiable consumer request related to your personal information.  If you designate an authorized agent to make a request on your behalf, we may require you to provide the authorized agent with written permission to do so and to verify your own identity directly with us (as described above).  

By email: [email protected] 

By mail: Celero Commerce, LLC, 100 Westwood Place, Suite 200, Brentwood, TN 37027

For information on how to manage your cookie preferences, please see our Notice of Right to Opt Out of Sale/Sharing using the link https://go.celerocommerce.com/celero-notice-of-right-to-opt-out-of-sale/sharing.

We retain your personal information for as long as necessary to fulfill the purpose for which it was collected. After terminating or deactivating your account, we may retain your personal information for as long as necessary to meet legal, audit and other permitted purposes. We will not be able to delete any content you have shared with others on the Services or on any third-party sites outside of SONA’s control. 

To provide increased value to you, we may also choose to link to and connect with various third-party websites.  Any access to and use of such linked websites or features is not governed by this Policy, but instead is governed by the privacy policies of those third parties.  We have no control over these linked websites, and we are not responsible for the information practices of such third parties, including their collection of your personal information.  We encourage you to be aware when you leave our Site, and to read the privacy policies of every website that collects personal information.  These linked sites, services and tools are only for your convenience, and you therefore access them at your own risk.  Further, any linking with any other website is neither an endorsement of that website nor any of the products or services that may be offered by them. 

By visiting and using the Site or accessing or using the Services, you consent to the collection and use of personal information by us as set forth in this Privacy Policy.  This Policy is effective as of the date last updated listed above. 

We may change or update our Privacy Policy from time to time and we will post those changes within this page.  If we make any changes to this Policy that materially affect our practices regarding our use of the personal information we previously collected, we will endeavor to provide you with notice, such as by posting prominent notice on our Site, and obtain your consent where required.

If you have any concerns, questions or suggestions about this Privacy Policy or about our privacy practices, please contact us at: 

By Mail: Celero Commerce, LLC, 100 Westwood Place, Suite 200, Brentwood, TN 37027 

Attn: Privacy Officer

By Email: [email protected]