Data Protection
Data Protection Policy (GDPR)
Last updated: January 1st, 2026
Contents
Data Controller
Data Collected
- Identity Data
- Name, first name, date of birth, identity document
- Contact Data
- Email address, phone number, postal address
- Financial Data
- Banking information, transaction history
- Business Data
- Sector, merchant site, volumes
- Technical Data
- IP address, cookies, navigation logs
Processing Purposes
- Provision of payment services
- Identity verification (KYC/AML)
- Fraud prevention
- Compliance with legal obligations
- Customer support and communication
- Service improvement
Your Rights
In accordance with GDPR, you have the following rights:
- Right of access to your data
- Right of rectification
- Right to erasure
- Right to restriction of processing
- Right to data portability
- Right to object
To exercise these rights, contact us at dpo@bridgepay.fr
DPO Contact
- Data Protection Officer
- Emma LAURENT
- dpo@bridgepay.fr
- Address
- 39 rue du Bois Sauvage, 91000 EVRY-COURCOURONNES
Complaint
You have the right to lodge a complaint with your local Data Protection Authority if you believe that the processing of your data does not comply with regulations.
Data Protection Authority : Find your local DPA
Data retention period
- Account data
- 5 years after contract termination (legal obligation)
- Transaction history
- 10 years (European accounting directive)
- KYC documents
- 5 years after the end of the business relationship (AML/CFT)
- Marketing data
- 3 years after last contact
International transfers
Some data may be transferred outside the EU to our technical partners (hosting providers, payment processors). These transfers are governed by standard contractual clauses approved by the European Commission and appropriate security guarantees.
The legal basis for processing and our security measures are detailed in the companion document: Privacy Policy