Back to Home

Merchant Privacy Policy

Last updated: December 2025

1. Data Controller

Crimson Castle Shop (“we”, “us”, “our”) acts as the data controller for merchant information processed through the Crimson Castle Shop SaaS platform. We determine how and why merchant data is processed in accordance with applicable data protection laws.

2. Information We Collect

We collect business, account, operational, and technical information necessary to provide and operate the platform, including:

  • Business identity and contact details
  • Subscription and billing information
  • Order, transaction, and operational data
  • Account credentials and access logs
  • Device, browser, and IP address data

3. Legal Basis for Processing

  • Performance of a contract (providing SaaS services)
  • Compliance with legal and regulatory obligations
  • Legitimate business interests (security, analytics)
  • Your consent, where required

4. Payment & Financial Data

Payment processing is handled by third-party payment processors. Crimson Castle Shop does not store full payment card details. Financial information is processed securely in accordance with industry standards by authorized providers.

5. How We Use Information

  • Provide and maintain platform services
  • Manage subscriptions, billing, and payouts
  • Improve platform performance and features
  • Ensure security and prevent fraud
  • Provide customer and technical support
  • Comply with legal obligations

6. Data Sharing

We may share data with trusted service providers, payment processors, analytics partners, and authorities where legally required. We do not sell merchant data.

7. International Data Transfers

Merchant data may be processed or stored outside your country of residence. Where international transfers occur, appropriate safeguards are applied to protect your information.

8. Data Retention

Data is retained while your account is active and for up to 90 days after cancellation to allow data export and compliance. Financial records may be retained longer where legally required.

9. Merchant Rights

  • Access and review your data
  • Request corrections
  • Request deletion (subject to legal limits)
  • Export data
  • Withdraw marketing consent

10. Children’s Data

Crimson Castle Shop does not knowingly collect personal data from individuals under the age of 18.

11. Security Measures

We implement reasonable technical and organizational safeguards to protect merchant data. However, no system can guarantee absolute security.

12. Contact Information

Email: support@crimsoncastle.biz
Phone: +92 (334)-820-4806
Hours: Monday–Friday, 9 AM–6 PM (PKT)