We built BazPay for low-risk EU merchants who need a clean audit trail. Privacy works the same way here. This page says what we collect and why. It also says how long we keep it. No hidden clauses.
Updated · Applies to bazpay.com and the merchant dashboard
Each row names the data, the purpose and the legal basis. If a field is not listed, we do not collect it.
You give us this at sign-up. We need it to open an account and to meet know-your-customer rules.
Anti-money-laundering law sets the retention here. We keep these records for five years after the account closes.
This is shopper data. You are the controller for it. We process it only to run the payment you asked for.
Card numbers are typed into hosted fields on a BazPay origin. They never reach your servers or ours in clear form.
The public site is deliberately quiet. It ships no behavioural tracking and no third-party media.
Reject the banner and nothing but the essential cookies runs. The page still works in full.
PCI DSS Level 1 is managed on the gateway side. Your checkout renders our hosted fields, so a card number never lands in your code. That keeps your annual return at SAQ A. It also keeps the breach surface with us, where the controls are audited.
Personal data is stored in the European Union. We do not move it elsewhere for convenience. Where a sub-processor is needed, we name it and bind it by contract.
Read the matching commercial terms in our terms of service, or the cookie detail in our cookie policy.
Retention in one line. Transaction records live for ten years under tax and scheme rules. Risk signals are pruned at thirteen months. Web logs are cut at ninety days.
Send one email. We answer within a month. If a request needs longer, we tell you why before that month ends.
Ask for a copy of everything we hold about you. We reply within one month.
Tell us what is wrong and we correct it. Records downstream are updated too.
We delete what no law forces us to keep. We say clearly what must stay.
Get your data as a machine-readable file. Vault tokens migrate as well.
Ask us to pause a use you disagree with while we review it.
Raise it with your national data protection authority at any time.
Write to our data team. Say what you need and name your merchant account if you have one. We will confirm receipt, then answer in writing. Requests are free.