§ Privacy
Privacy policy
This policy describes the data we process, why, for how long, and who it is shared with. It is written to be read.
Last updated : 2026-08-26
Data controller
BuyVirtualCards Technologies. For any question or to exercise your rights: [email protected].
Data we process
Identity and supporting document, postal address, email address, login data, transaction history, last four digits of each card, and technical security data (IP address, device fingerprint).
Data we do not process
Your full card number, its expiry date and its security code are held by the issuing institution, never by us. We do not collect your browsing history outside our site.
Purposes
Providing the service, meeting anti-money-laundering obligations, fraud prevention, customer support, and improving the product. No advertising purpose.
Legal bases
Performance of the contract for the service, legal obligation for identification and retention, legitimate interest for fraud prevention.
Retention periods
Account data: for the duration of the relationship. Identity documents and transaction history: five years after closure, under AML obligations. Technical logs: twelve months.
Recipients
The issuing institution, the crypto payment processor, the hosting provider, and authorities where the law requires. No resale, no data brokers.
Transfers outside the EU
Some processors may handle data outside the European Union, under the Commission's standard contractual clauses. The list of processors and their locations is available on request.
Your rights
Access, rectification, erasure, restriction, objection and portability. Export is available in Settings → Data. Erasure cannot cover what the law requires us to keep. You may lodge a complaint with the competent supervisory authority.