Privacy
Waitlist privacy notice
This notice explains what Bitrapay does with the details you give us when you join the early-access waitlist. It covers only the waitlist. It is written to meet Articles 13 and 14 of the UK GDPR.
Who is responsible for your data
Bitrapay is the data controller for the information described here.
- Contact for privacy questions and requests
- privacy@bitrapay.com
What we collect
Only what the waitlist form asks for:
- Your name.
- Your email address, plus a lower-cased copy of it used to detect duplicate signups.
- Whether you are building an AI agent or want to sell to agents, and, if you are building one, whether it is personal, commercial, or both.
- Whether you ticked the optional box, the lawful basis that follows from it, and which version of this notice was shown to you at the time.
- The date and time you signed up.
We do not collect or store your IP address, device fingerprint, or browsing behaviour, and the site carries no third-party advertising or analytics trackers. There is no automated decision-making or profiling.
Why we use it, and our lawful basis
We use your details to email you about the Bitrapay launch and early access. Which lawful basis applies depends on what you chose on the form, and we record that choice against your entry so we can prove which one it was.
- If you left the optional box unticked
- We rely on legitimate interests, Article 6(1)(f) of the UK GDPR. Joining a waitlist is a request to be told once when the thing you are waiting for opens, so that single notification is what we send you and nothing more. We have weighed this against your interests: the message is the one you asked for, it is infrequent, and you can stop it at any time. You have the right to object under Article 21, and we will act on it.
- If you ticked the optional box
- We rely on your consent, Article 6(1)(a), and may also send you the other early-access updates the box describes. Consent is also what permits the email under regulation 22 of the Privacy and Electronic Communications Regulations.
Either way we first send one message asking you to confirm your address. That message is how we check the address belongs to you; if you do not open it we delete the record within 72 hours.
You can stop all of it at any time. Email us at privacy@bitrapay.com and we will delete your record, or use the unsubscribe link in any message we send. Withdrawing consent or objecting does not affect the lawfulness of anything we did beforehand.
How long we keep it
We delete waitlist records 24 months after signup, or sooner if you ask us to. Records where the email address was never confirmed are deleted automatically after 72 hours.
Where your data is stored
The waitlist database runs on Microsoft Azure in the East US region. That means your details are transferred out of the United Kingdom to the United States.
This transfer relies on the UK Extension to the EU–US Data Privacy Framework where the receiving organisation is certified under it, and otherwise on the UK International Data Transfer Addendum to the European Commission's standard contractual clauses, together with a transfer risk assessment. You can ask us for a copy of the safeguards that apply.
We do not sell your data or share it with third parties for their own purposes. Our hosting and email providers process it only on our instructions, under contract.
Your rights
Under the UK GDPR you have the right to:
- Ask what we hold about you and get a copy of it (Article 15).
- Have inaccurate details corrected (Article 16).
- Have your details erased (Article 17).
- Ask us to restrict how we use them (Article 18).
- Receive your details in a portable, machine-readable format (Article 20).
- Object to us relying on legitimate interests (Article 21).
- Withdraw your consent at any time, where consent is what we rely on (Article 7(3)).
To exercise any of these, email privacy@bitrapay.com. We will respond within one month. There is no charge.
Complaints
If you think we have handled your data badly, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office, the UK supervisory authority, at ico.org.uk/make-a-complaint, by calling 0303 123 1113, or by writing to Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
Changes to this notice
If we change how we use waitlist data, we will publish an updated notice with a new version and, where the change is significant, contact you before it takes effect.