1. Who this notice covers
This Notice applies to the EasyAccept.cards public website, its separate applicant identity system, business-profile drafts, communications, and authorized internal review interfaces. “EasyAccept,” “we,” and “us” refer to the operator of this website under the EasyAccept.cards brand. The legal company that would sign any eventual merchant-processing contract—and the acquiring institution responsible for actual card acceptance—must be identified separately before that agreement is made. The website is not itself a bank or an approved merchant account.
If services are later offered through a verified Singapore entity, a United States entity, or a separate sponsoring acquirer, the applicable operator/controller identity and relevant cross-border disclosures must be provided before expanded data collection.
2. Information collected and not yet collected
During account registration: business email address, one-time-code verification events, hashed session records, login timestamps, and basic technical/security information such as IP-derived request information and web service logs.
In optional business-profile drafts: company name, trading name, contact information, website, general products and industry category, registered business address and territory, expected sales/payment volume, and operating history. Application-profile records are stored in an access-controlled database.
For later authorized underwriting, but not yet enabled: employer identification/tax numbers, beneficial-owner and controller identity, percentage of ownership, company licences, bank statements, past merchant-processing statements, company registration documents, and identity-verification documents. This list describes anticipated collection only; the secure upload service is currently closed.
Do not provide: bank passwords, cardholder payment credentials, unrelated consumer health information, or Social Security numbers by email. Additional sensitive data must not be sent until requested through an approved private workflow.
3. Why information is used
- Create and secure an independent EasyAccept account and authenticate sign-in codes.
- Maintain and resume draft high-risk merchant applications.
- Understand a business's industry, products, operating jurisdictions and potential underwriting requirements.
- Communicate necessary service, account and security notices.
- Protect against abusive submissions, fraud, unauthorized use and other operational security threats.
- Comply with lawful requests and recordkeeping duties that actually apply to the operator.
We do not use submitted applicant information to determine medical treatment or provide financial or legal advice.
5. Retention and disposal
We keep account information and business drafts for as long as reasonably necessary to provide your account, respond to requests, protect the service, resolve disputes, and satisfy any actual legal recordkeeping obligation. Retention depends on whether a draft is active, an account is closed, a security investigation or lawful hold exists, or a verified deletion request can be fulfilled. We periodically review records for data minimization.
Before full document-underwriting intake opens, we will establish and publish a more specific retention schedule for identity documentation, bank statements and rejected/approved applications. We do not currently represent that any fixed seven-year or other financial-record retention process has been installed for those documents.
6. Security, sessions and documents
Our public application uses HTTPS and a separate EasyAccept email-code identity system; account sessions use Secure, HttpOnly cookies, and applications use permission-limited server access. The current system maintains private application storage and access event records. No internet service can promise absolute security.
Confidential-document upload and completed underwriting submission are temporarily disabled pending additional independent testing, malicious-file quarantine, encryption-key recovery procedures, and formal operational controls. Please do not try to bypass that workflow by emailing statements or identity documents.
7. International handling
Cloud infrastructure and communication services may process information across national borders, including the United States and other locations where their systems operate. We do not imply that all data remains exclusively in Singapore or the United States. Where international transfers are regulated, the applicable notice, controller details and lawful transfer safeguards must be established before broader document collection.
8. Access, correction and deletion requests
Depending on your location and applicable laws, you may ask us to access, correct, delete, restrict or obtain information associated with your account, object to certain uses, or withdraw an optional consent. We may need to verify your identity and may retain records where legally required or necessary for a valid security investigation.
For privacy questions or requests, contact privacy@easyaccept.cards. For an application or account issue, use applications@easyaccept.cards. Do not include identity documents or banking records in your initial message.
9. Minors, cookies, changes
EasyAccept merchant accounts are for business representatives aged 18 or older. We do not knowingly seek personal data from children.
The site uses essential account/session technology. Any future optional analytics or advertising cookies will require a separately updated notice and, where applicable, consent management.
We may update this Notice to reflect changes in the service or law. Material changes to how sensitive data is collected will be disclosed before the new collection occurs. The current effective date appears above.