Privacy Policy

Last updated: 5 November 2026

1. Who is responsible for your data

The data controller is LIDER-YUG LTD, a company registered in Bulgaria under UIC 205957031, with its registered address at Bulgaria, Plovdiv, 4000, 1 Yan Hus St. Contact: support@paygateplugin.org

2. What data we process

For merchants using PayGatePlugin: business name, contact person, email address, store URL, Stripe account ID, VAT number and billing details, and basic payment records needed to calculate our fee (payment amount, currency, date, fee, refund status).

We do not receive or store card numbers or other card details. These are handled by Stripe.

For customers of merchants using PayGatePlugin: when a customer pays in a merchant's store, payment request data (such as name, email address, billing and shipping address, order amount and currency, and Stripe payment references) passes through our servers on its way to Stripe. We process this data only on behalf of the merchant, as a data processor, to carry out the payment. We do not use it for any other purpose. The merchant is the data controller for their customers' data.

For visitors of this website: the website does not use analytics or advertising cookies. Our hosting provider keeps standard server logs (such as IP address and time of request) for security.

3. Why we process it

To provide the service and our contract with you; to calculate and document fees; to meet accounting and tax obligations under Bulgarian law; to answer your emails; and to keep our systems secure, based on our legitimate interest.

4. Who we share it with

Stripe (payment processing and fee collection), our hosting provider Hostinger, and our accountants. Where data is transferred outside the European Economic Area, this is done under appropriate safeguards such as the European Commission's Standard Contractual Clauses. We do not sell personal data.

5. How long we keep it

Contract and fee records are kept for as long as required by Bulgarian accounting and tax law. Other data is kept while you use PayGatePlugin and deleted within a reasonable period after that, unless we need it to resolve a dispute.

6. How we protect data

All connections to our website and servers use encrypted HTTPS (TLS). Our Stripe platform credentials are stored only on our servers in encrypted form and are never sent to merchants' websites. Access to our systems is limited to authorised staff and protected by two-factor authentication. We never receive or store card numbers; card details are entered directly into Stripe's secure payment forms. We keep security logs and regularly update our software.

7. Your rights

Under the GDPR you have the right to access, correct, delete or restrict the processing of your data, to object to processing, and to data portability. To use these rights, email us. You also have the right to complain to the Bulgarian Commission for Personal Data Protection (www.cpdp.bg) or to the data protection authority in your country.