THIS POLICY EXPLAINS WHAT INFORMATION BILLZAP RECEIVES, WHY IT IS USED, WHICH SERVICES PROCESS IT, AND THE RIGHTS AVAILABLE TO CUSTOMERS.
WHO CONTROLS
YOUR DATA
The person or business operating BILLZAP is the controller of personal information collected directly through this website, except where another service acts as an independent controller for its own purposes.
Replace this box with the operator’s legal name, geographic address and contact details. A privacy notice should clearly identify the controller.
WHAT MAY BE
COLLECTED
Depending on how you use the store, BILLZAP or its service providers may process:
- your name and email address;
- billing country, billing address or tax location;
- order details, purchased products, transaction amount and payment status;
- support messages and information you choose to include in them;
- technical information such as IP address, browser type, device type, timestamps and security logs;
- cart information stored locally in your browser.
BILLZAP does not intentionally collect complete payment-card numbers through its own website server. Payment details are entered into Stripe’s checkout environment.
HOW INFORMATION
IS USED
Personal information may be used to:
- create, process and verify orders;
- provide secure download access;
- send receipts or order-related communications;
- respond to support requests;
- prevent fraud, leaks, abuse and unauthorised access;
- maintain accounting, tax and legal records;
- protect BILLZAP’s legal rights and comply with legal obligations;
- maintain and improve website reliability.
LEGAL BASES
Where the GDPR applies, processing may be based on performance of a contract, compliance with a legal obligation, legitimate interests such as security and fraud prevention, or consent where consent is legally required.
PAYMENT
PROCESSING
BILLZAP uses Stripe to process payments, prevent fraud, calculate or manage relevant payment information and provide transaction services.
Stripe may receive payment, identity, transaction, device and location information according to its own legal terms and privacy policy.
Stripe may act as a processor for certain activities and as an independent controller for others.
PAYMENT-CARD INFORMATION IS ENTERED INTO STRIPE’S CHECKOUT, NOT DIRECTLY INTO A BILLZAP FORM.
Stripe privacy information can be viewed at:
CART &
BROWSER STORAGE
The website uses browser local storage to remember products added to the cart. This information stays on the customer’s device until it is removed, cleared by the customer, or cleared after checkout.
Essential session cookies may also be used for private administrative login and website security.
If analytics, advertising or other non-essential cookies are introduced later, this policy and any required consent controls should be updated before those tools are activated.
WHO RECEIVES
INFORMATION
Information may be shared only where reasonably necessary with:
- Stripe and payment-related service providers;
- website hosting, storage, email or security providers;
- professional advisers such as accountants or legal advisers;
- public authorities where disclosure is legally required;
- parties involved in preventing fraud, chargeback abuse, leaks or security threats.
BILLZAP does not sell customer personal information for money.
HOW LONG DATA
IS KEPT
Personal information is retained only for as long as reasonably necessary for the purpose for which it was collected.
Order and transaction records may be kept for the periods required by tax, accounting, fraud prevention, payment-dispute and other legal obligations.
Support communications may be retained while a request is active and for a reasonable period afterwards to document how it was resolved.
DATA ACROSS
BORDERS
Some service providers may process information in countries outside the customer’s country or outside the European Economic Area.
Where required, transfers should be supported by an approved legal mechanism, such as an adequacy decision, standard contractual clauses or another lawful safeguard.
PROTECTING
INFORMATION
BILLZAP uses reasonable technical and organisational measures intended to protect information against unauthorised access, alteration, disclosure or loss.
No online system can guarantee perfect security. Customers should protect their email accounts, devices and download links and should not share private order information.
ACCESS.
CORRECT. DELETE.
Depending on applicable law, you may have the right to:
- request access to personal information;
- correct inaccurate or incomplete information;
- request deletion of information;
- restrict or object to certain processing;
- receive certain information in a portable format;
- withdraw consent where processing is based on consent;
- complain to a competent data-protection authority.
These rights may be limited where retention or processing is required by law, needed to complete a contract, or necessary to establish, exercise or defend legal claims.
POLICY
UPDATES
This Privacy Policy may be updated when BILLZAP’s services, providers, data practices or legal obligations change.
The updated date at the top of this page identifies the current version.
PRIVACY
REQUESTS
To ask a privacy question or exercise a data protection right, contact:
billzapbusiness@gmail.com
A request may require reasonable verification of identity before account or transaction information is disclosed.
Add the legal identity and address of the data controller. Also update this policy whenever you add analytics, newsletters, advertising, user accounts or new hosting and storage providers.