Privacy Policy

1. Controller

Eftaapay Limited is the data controller for personal data collected through the Bizaldo websites, apps, and commercial relationships with merchants and prospects...

2. Data categories

• Account & identity data: name, business role, email, phone, password hashes, authentication logs.
• Business & KYC data (merchants): legal name, registration numbers, beneficial ownership, risk profile, compliance documents.
• Transaction & device data: order IDs, basket info, amounts, currency, timestamps, device identifiers, IP address, user agent, app telemetry, crash logs.
• Support & communications: ticket content, call/chat recordings (where permitted), feedback.
• Marketing & cookies: marketing preferences, referral data, cookie identifiers; analytics/advertising identifiers where consented.

3. Purposes & legal bases

We process personal data for:

• Service provision & account administration (Art. 6(1)(b) GDPR).
• Onboarding, KYC/AML, fraud prevention & risk management (Art. 6(1)(c) and 6(1)(f)).
• Improving and securing our services (Art. 6(1)(f)).
• Marketing communications (Art. 6(1)(a) – consent; Art. 6(1)(f) – B2B soft opt-in).
• Legal claims, compliance & record keeping (Art. 6(1)(c) and 6(1)(f)).

Where we rely on consent, you may withdraw it at any time via Cookie Settings or by contacting us.

4. Data sharing

We share personal data with:

• Payment and acquiring partners to enable merchant acquiring and settlement.
• KYC/AML providers & identity verification partners.
• Cloud hosting & infrastructure providers.
• Analytics, product, and support tools.
• Professional advisers and where required by law.

5. International transfers

We may transfer data outside the EEA/UK using safeguards such as SCCs and technical measures.

6. Retention

We retain data as long as necessary for legal and contractual obligations (typically 5–10 years).

7. Your rights

You may have rights to access, rectify, erase, restrict, object, and withdraw consent, and to lodge complaints with your authority.

8. EU representative & DPO

EU Representative: To be confirmed. Data Protection Officer: Not required at present.

9. Children

Bizaldo is a B2B service and not directed to children under the age of 16.

10. Contact

Questions or requests: privacy@eftaapay.com or postal address above.