This website uses cookies

We use cookies to keep the site working, learn how it's used, and improve what we ship next. Accept everything, reject the non-essential, or pick category by category. See our privacy policy.

Skip to policy
CardsPayBack to CardsPay

Legal & compliance

Privacy Policy

PRIVACY POLICY

Effective Date: 14/06/2026

This Privacy Policy describes how Company legal name, a company incorporated under the laws of the Republic of Bulgaria (the "Company", "we", "us" or "our"), processes personal data in connection with CardsPay (the "Platform").

The Company processes personal data in accordance with Regulation (EU) 2016/679 (GDPR) and other applicable data protection laws.

1. PERSONAL DATA

The Company collects and processes personal data necessary to operate the Platform and provide its services.

Depending on the use of the Platform, such data may include:

  1. a) Email addresses provided during registration;
  2. b) Technical information necessary for the operation, security and maintenance of the Platform;
  3. c) Information relating to payment cards, their status and associated transactions;
  4. d) Information provided through communications with customer support;
  5. e) Verification results and related statuses received from independent third-party providers.

Identity verification is performed directly by independent third-party providers. Users submit the required information and documents to the relevant provider. The Company receives verification results but does not collect or store the identity documents submitted for verification.

2. PURPOSES AND LEGAL BASES

Personal data is processed for the following purposes:

  1. a) Registration and management of user accounts;
  2. b) Provision of payment card management functionality and related services;
  3. c) Processing verification results and supporting applicable compliance requirements;
  4. d) Communication with users and provision of customer support;
  5. e) Maintenance of Platform security and prevention of fraud;
  6. f) Compliance with applicable legal obligations.

Depending on the circumstances, processing is based on the performance of a contract, compliance with legal obligations, legitimate interests or consent, where applicable, in accordance with Article 6 GDPR.

3. DATA SHARING

The Company may share personal data with Financial Partners, technical service providers and other third parties where necessary to provide the Platform's services, comply with applicable legal obligations or protect the Platform's security.

Personal data may also be disclosed to competent authorities where required by applicable law.

Third parties processing personal data independently are responsible for complying with their own applicable data protection obligations.

4. INTERNATIONAL DATA TRANSFERS

Where personal data is transferred outside the European Economic Area, the Company applies appropriate safeguards as required by applicable data protection legislation.

5. DATA RETENTION

Personal data is retained only for as long as necessary for the purposes for which it is processed or as required by applicable law.

Following account closure, certain information may be retained where necessary to comply with legal obligations, resolve disputes or protect legitimate legal interests.

6. DATA SECURITY

The Company implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure.

7. USER RIGHTS

Subject to applicable law, users may exercise their rights to access, rectify or erase their personal data, restrict or object to processing, request data portability and withdraw consent where applicable.

Users also have the right to lodge a complaint with a competent data protection supervisory authority.

Requests relating to personal data may be submitted through the Company's contact channels published on the Platform.

8. COOKIES

The Platform may use cookies and similar technologies to support its operation, functionality and security.

Further information is provided in the Cookie Policy.

9. CHILDREN

The Platform is intended for individuals aged 18 or older.

10. CHANGES TO THIS POLICY

The Company may update this Privacy Policy to reflect changes in its services, data processing practices or applicable legal requirements.

The current version will be available on the Platform. Users will be notified of changes where required by applicable law.