Privacy Policy

This Privacy Policy explains how Blazing Payments collects, uses, shares and protects personal information when you use our website, dashboard or services. Read it alongside our Cookie Policy. We aim to comply with the UK GDPR, the EU GDPR and other applicable data protection laws.

01Introduction

Blazing Payments ("we", "us", "our") is committed to protecting the privacy of the merchants and buyers who use our platform. This Policy describes the information we collect, how we use it, when we share it, and the rights you have over your personal data.

By using our Services, you confirm you have read and understood this Policy. If you do not agree, please do not use our Services.

02Data Controller

Blazing Payments acts as the data controller for the personal information described in this Policy. For data protection enquiries, contact us through our Support page.

03Data We Collect

We collect only the data necessary to operate our Services, meet legal obligations, and prevent fraud.

Information you provide

Account & identity: name, email, phone number, date of birth, government-issued ID, photograph and verification documents collected during onboarding (KYC/KYB).
Business information: legal entity name, trading name, registered address, beneficial ownership, URLs, financial statements and proof of operational capability.
Payment & banking details: bank account details and any wallet addresses you provide for payouts.
Support communications: records of messages and tickets exchanged with our support, compliance or sales teams.

Information we collect automatically

Technical data: IP address, device fingerprint, browser type, OS, time zone, referring URL, and pages viewed.
Transaction & usage data: transaction history, amounts, payment methods, counterparty information, authorisations, refunds, chargebacks and risk-scoring signals.
Cookies & similar technologies: see our Cookie Policy.

Information from third parties

We may receive information from KYC/KYB verification providers, sanctions and PEP screening databases, fraud-detection partners, payment processors, banks, card networks and government authorities, for compliance, risk assessment and regulatory purposes.

04How We Use Your Data

To deliver the Services: process transactions, authorise payments, settle funds to your bank or crypto wallet, generate invoices and provide dashboard access.
To verify identity and comply with law: KYC, KYB, AML, sanctions, PEP and CTF checks, ongoing monitoring, and reporting to regulators where required.
To prevent fraud and abuse: risk scoring, chargeback detection, account-takeover prevention, and enforcement of our Acceptable Use Policy.
To improve the Services: analyse aggregated usage, debug issues and develop features.
To communicate with you: transactional messages (receipts, security alerts, account updates) and, where you opt in, product news.
To resolve disputes and enforce agreements: investigate complaints, handle chargebacks and protect our legal rights.

05Legal Basis

Where the UK/EU GDPR applies, we rely on one or more of the following bases:

Contract: processing necessary to provide the Services under our Terms.
Legal obligation: AML, CTF, tax, payment scheme and other regulatory requirements.
Legitimate interests: operating, securing and improving the Services, and preventing fraud.
Consent: where you have given explicit consent (e.g. marketing), which you may withdraw at any time.

07International Data Transfers

Our infrastructure and some processors may be located outside your jurisdiction. Where we transfer personal data internationally, we put in place appropriate safeguards — such as the European Commission's Standard Contractual Clauses or the UK International Data Transfer Agreement — to protect your data to an equivalent standard.

08Retention

We retain personal data only as long as necessary for the purposes collected, or as required by law. Typical periods:

Account and transaction records: at least 7 years after account closure (AML, financial and tax rules).
KYC/KYB documents: at least 5 years after the end of the business relationship.
Marketing data: until you withdraw consent or unsubscribe.
Website analytics: aggregated and pseudonymised data for up to 26 months.

09Security

We maintain administrative, technical and physical safeguards designed to protect personal information, including:

Encryption in transit (TLS 1.2+) and at rest.
Role-based access controls, MFA and least-privilege principles.
Vulnerability scanning and security monitoring.
Incident response procedures.
Vendor due diligence and contractual data-protection obligations on sub-processors.

No security system is impenetrable. If we become aware of a personal data breach likely to result in a high risk to your rights, we will notify you and the relevant authorities without undue delay.

10Your Rights

Depending on where you live, you may have the rights of access, rectification, erasure, restriction, data portability, objection, and to withdraw consent, as well as the right to complain to a supervisory authority (for example, the UK Information Commissioner's Office, or the data protection authority where you live).

To exercise any of these rights, contact us through our Support page. We will respond within 30 days unless legally permitted to extend that period.

11Cookies

We use cookies and similar technologies to operate our website and dashboard, remember your preferences and analyse usage. For details and to manage your preferences, see our Cookie Policy.

12Children

Our Services are not directed to individuals under 18, and we do not knowingly collect their personal data. If you believe we have, contact us so we can delete it.

13Changes to this Policy

We may update this Policy from time to time. For material changes we will notify you by email or through the dashboard before they take effect.

14Contact

For questions or to exercise your rights, contact our data protection team through our Support page.