Information we collect
Identity and contact data
bartizan is responsible for how personal data is collected, used, protected, and retained through the platform. We collect various types of personal data depending on how you interact with the platform. This includes your name, email address, and details of the purchases you make through the platform. Depending on the storefront and the payment method used, this may also include billing address and telephone number.
Financial and transaction data
We collect details about payments to and from you, voucher redemptions, and purchase history. We securely handle tokenized payment credentials and partial card details. Full card numbers are processed directly by our acquiring partners and are never stored on bartizan servers.
Technical data
When you access our platform, we automatically collect your IP address, browser type, time zone setting, operating system, and platform details via cookies and server logs.
How we use your information
Contract performance
We rely on contractual necessity to process your data — to process your payments, issue vouchers, and handle refund requests.
Security and fraud prevention
We rely on legitimate interests to utilize your personal data for fraud prevention, platform security, and risk profiling. If an automated system flags a transaction as high-risk, it may be blocked.
Data protection
Security measures
We have implemented security measures to prevent your data from being accidentally lost, used, or accessed in an unauthorised way. All data transit is encrypted via TLS/SSL, and database storage uses encryption at rest.
Data retention
Our data retention policies dictate that we retain account data for the duration of your active account lifespan plus 6 years. Financial and transaction data is kept for 7 years from the date of the transaction to satisfy legal and accounting obligations.
Some records must be kept to meet legal, tax, accounting and card-scheme obligations — so we may not be able to delete everything you ask us to, and we will tell you where that applies.
Who we share data with
We share personal data only where needed: with the participating storefront for the purchase you made, with our payment and verification providers, with card networks where a dispute requires it, and with regulators, auditors or law enforcement where the law requires. We do not sell personal data.
If something goes wrong
If a security incident affects your personal data, we will investigate it, take steps to contain it, and notify you without undue delay where there is a significant risk to you.
Your rights
Exercising your rights
Under applicable data protection laws, you possess the right to:
- Access a copy of the personal data we hold about you.
- Rectify incomplete or inaccurate data.
- Request erasure of your data (the “right to be forgotten”).
- Restrict the data processing of your information.
We aim to respond to any request about your personal data within 30 days. To exercise any of these rights, please contact us at privacy@bartizan.me.
We apply these standards as a matter of practice, wherever you are.