This policy explains how we handle personal data on https://escard.ru (the "Site"). For orders paid in US dollars the controller is:
Company name, country of registration
Registration number: registration number
Registered address: registered address
Email: contact email
For orders paid in Russian roubles the controller is the Russian sole proprietor; see the Russian version of this policy.
1. What we collect
- Your email address, to send you the card and the receipt.
- Card details you enter in the builder: name, job title, company, project, phone, email, Telegram username, WhatsApp number, website, and the photo, logo and background image you upload. We strip metadata, including location, from uploaded photos.
- Payment information: payment ID, status, amount and currency. Your card number is entered on the payment provider's page; we never see it.
- Technical data: your IP address, kept in server memory only to limit request rates and never written to the database; a cookie that remembers your language.
We do not use analytics or advertising cookies.
2. Why and on what legal basis
- To make and send your card and to issue it in Google Wallet — performance of a contract (Art. 6(1)(b) GDPR / UK GDPR).
- To take payments, issue refunds and keep accounting records — performance of a contract and legal obligation (Art. 6(1)(c)).
- To protect the Site from abuse — our legitimate interests (Art. 6(1)(f)).
3. How long we keep it
- Email, card details and images: 14 days after the card is sent, then deleted automatically.
- Unpaid orders: one day. Images uploaded without an order: one day.
- After deletion we keep only anonymous order records — amount, currency, status and dates — for accounting.
- Database backups are kept for no more than 3 days and then deleted automatically.
4. Who we share it with
- Stripe — payments in US dollars.
- Google LLC — to issue your card in Google Wallet: card details and images.
- Email delivery provider name of the email provider — your email address and the card file.
- Hosting provider Hetzner Online GmbH, Финляндия — stores the data on our server.
The Apple Wallet file is processed on your device; we do not send your data to Apple. Where data leaves the UK or the EEA, we rely on adequacy decisions or standard contractual clauses.
5. Your rights
You can ask for access to your data, its correction or deletion, restriction of processing, data portability, and you can object to processing. Email contact email; we reply within one month. You can also complain to your local data protection authority (in the UK, the ICO).
6. Security
All traffic is encrypted (HTTPS). Order data is accessible only to us and protected by a password. We collect as little as possible and delete it automatically.
7. Children
The Site is not intended for children under 16.
8. Changes
The current version is always on this page, with its date at the top.