1. Who this notice covers
This Notice covers the EasyAccept.cards website, merchant application portal, communications and authorized team-review interfaces. EasyAccept is a high-risk payment processing solutions brand serving merchants seeking specialized acceptance and underwriting. Applicable contracting and processing entities and any required jurisdiction-specific disclosures are identified in the agreements governing each approved merchant account.
Our systems and service providers may operate across jurisdictions. We disclose relevant transfer and servicing arrangements when they apply to an account.
2. Information collected and not yet collected
During account registration: business email address, one-time-code verification events, hashed session records, login timestamps, and basic technical/security information such as IP-derived request information and web service logs.
In optional business-profile drafts: company name, trading name, contact information, website, general products and industry category, registered business address and territory, expected sales/payment volume, and operating history. Application-profile records are stored in an access-controlled database.
For later authorized underwriting, but not yet enabled: employer identification/tax numbers, beneficial-owner and controller identity, percentage of ownership, company licences, bank statements, past merchant-processing statements, company registration documents, and identity-verification documents. This list describes anticipated collection only; the secure upload service is currently closed.
Do not provide: bank passwords, cardholder payment credentials, unrelated consumer health information, or Social Security numbers by email. Additional sensitive data must not be sent until requested through an approved private workflow.
3. Why information is used
- Create and secure an independent EasyAccept account and authenticate sign-in codes.
- Maintain and resume draft high-risk merchant applications.
- Understand a business's industry, products, operating jurisdictions and potential underwriting requirements.
- Communicate necessary service, account and security notices.
- Protect against abusive submissions, fraud, unauthorized use and other operational security threats.
- Comply with lawful requests and recordkeeping duties that actually apply to the operator.
We do not use submitted applicant information to determine medical treatment or provide financial or legal advice.
5. Retention and disposal
We keep account information and business drafts for as long as reasonably necessary to provide your account, respond to requests, protect the service, resolve disputes, and satisfy any actual legal recordkeeping obligation. Retention depends on whether a draft is active, an account is closed, a security investigation or lawful hold exists, or a verified deletion request can be fulfilled. We periodically review records for data minimization.
Before full document-underwriting intake opens, we will establish and publish a more specific retention schedule for identity documentation, bank statements and rejected/approved applications. We do not currently represent that any fixed seven-year or other financial-record retention process has been installed for those documents.
6. Security, sessions and documents
Our public application uses HTTPS and a separate EasyAccept email-code identity system; account sessions use Secure, HttpOnly cookies, and applications use permission-limited server access. The current system maintains private application storage and access event records. No internet service can promise absolute security.
Confidential-document upload and completed underwriting submission are temporarily disabled pending additional independent testing, malicious-file quarantine, encryption-key recovery procedures, and formal operational controls. Please do not try to bypass that workflow by emailing statements or identity documents.
7. International handling
Cloud infrastructure and communication services may process information across national borders, including the United States and other locations where their systems operate. We do not imply that all data remains exclusively in Singapore or the United States. Where international transfers are regulated, the applicable notice, controller details and lawful transfer safeguards must be established before broader document collection.
8. Access, correction and deletion requests
Depending on your location and applicable laws, you may ask us to access, correct, delete, restrict or obtain information associated with your account, object to certain uses, or withdraw an optional consent. We may need to verify your identity and may retain records where legally required or necessary for a valid security investigation.
For privacy questions or requests, contact privacy@easyaccept.cards. For an application or account issue, use applications@easyaccept.cards. Do not include identity documents or banking records in your initial message.
9. Minors, cookies, changes
EasyAccept merchant accounts are for business representatives aged 18 or older. We do not knowingly seek personal data from children.
The site uses essential account/session technology. Any future optional analytics or advertising cookies will require a separately updated notice and, where applicable, consent management.
We may update this Notice to reflect changes in the service or law. Material changes to how sensitive data is collected will be disclosed before the new collection occurs. The current effective date appears above.