Payments Privacy Policy

This Payments Privacy Policy ("Policy") explains how QuezMedia ("QuezMedia," "we," "us," or "our") collects, uses, discloses, and protects information when you make a payment through payments.quezmedia.com and related QuezPay payment pages (the "Payment Services"). It supplements any general QuezMedia privacy notice; where this Policy and a general notice conflict as to the Payment Services, this Policy controls. By using the Payment Services you acknowledge this Policy.

1. Information we collect

Information you provide. When you initiate a payment we collect the details you enter: your name, email address, company (optional), the invoice or reference number, a project/description, optional notes, the payment amount, and your selected payment method (card or bank transfer).

Payment credentials — handled by our processor, not by us. Card numbers and bank-account details are entered directly into our payment processor's (Stripe's) secure, PCI-DSS-compliant payment fields, which are embedded on our page. QuezMedia never receives or stores your full card or bank-account numbers. From Stripe we receive only limited transaction information — such as amount, currency, status, payment-method type, card brand and last four digits, a confirmation/authorization identifier, and the email associated with the payment.

Information collected automatically. When you visit the Payment Services we and our infrastructure providers automatically collect technical and security data, such as IP address, browser/device characteristics, timestamps, and bot/abuse signals (including via Cloudflare Turnstile), used to operate, secure, and protect the service.

Communications. If you send a billing question or otherwise contact us, we collect the message and the contact details you provide.

2. How we use information

• To process, confirm, and reconcile your payment and the associated invoice.
• To send you a receipt and respond to billing questions and support requests.
• To detect, prevent, and investigate fraud, abuse, and security incidents.
• To maintain business, accounting, and transaction records.
• To comply with legal, tax, audit, and regulatory obligations, and to establish, exercise, or defend legal claims.

Where required by law, we rely on the following bases for processing: performance of a contract (processing your payment), our legitimate interests (fraud prevention, recordkeeping, and securing the service), compliance with legal obligations, and, where applicable, your consent.

3. Service providers & disclosures

We share information only as needed to provide the Payment Services and as described here. Our key providers are:

• Stripe — payment processing (PCI-DSS Level 1). See stripe.com/privacy.
• Cloudflare — hosting, security, and bot mitigation (Turnstile). See cloudflare.com/privacypolicy.
• Intuit Mailchimp / Mandrill — sending transactional email such as your receipt. See intuit.com/privacy.

We may also disclose information to comply with applicable law or valid legal process; to protect the rights, property, or safety of QuezMedia, our customers, or others; to enforce our agreements; and in connection with a merger, acquisition, financing, or sale of assets, subject to appropriate safeguards. We do not sell or rent your personal information, and we do not share it for cross-context behavioral advertising.

4. Card data & PCI compliance

All card and bank-account data is captured and processed by Stripe on its hosted, PCI-DSS-compliant infrastructure. Because that data never passes through or is stored on QuezMedia systems, QuezMedia maintains minimal PCI scope. We never log, retain, or have access to your full payment credentials.

5. Cookies & tracking

The Payment Services use only essential/security technologies (including Cloudflare Turnstile and security cookies) needed to operate and protect the page. We do not use advertising or cross-site marketing trackers on the Payment Services.

6. Data retention

We retain transaction and receipt records for as long as necessary to fulfill the purposes above and to meet our tax, accounting, audit, and legal obligations (typically up to seven years), after which we delete or de-identify the information. We retain other information only as long as reasonably necessary.

7. Data security

We protect information using encryption in transit (TLS), processor-hosted card entry (so we never hold card/bank numbers), encrypted secret storage, access controls, and signature-verified payment notifications. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your rights & choices

Subject to applicable law and our legal retention obligations, you may request to access, correct, delete, or receive a copy of your personal information, and you may object to or request restriction of certain processing. To exercise these rights, contact us through our secure contact form. We will not discriminate against you for exercising your rights.

U.S. state privacy rights (e.g., California/CPRA). Residents of certain states may request to know, delete, and correct personal information and to opt out of "sale" or "sharing." As noted, we do not sell or share your personal information. You may use an authorized agent and may appeal a denied request.

EEA/UK. Where the GDPR/UK GDPR applies, you also have the right to portability and to lodge a complaint with your supervisory authority.

9. International transfers

We and our providers are located in, and process information in, the United States and may process information in other countries. Where required, we rely on appropriate safeguards for cross-border transfers.

10. Children's privacy

The Payment Services are intended for adults and business transactions and are not directed to children. We do not knowingly collect personal information from children.

11. Third-party services

Payment card and bank-account details are collected through Stripe's secure payment fields embedded on our page; that processing is governed by Stripe's own privacy policy. We are not responsible for the privacy practices of third-party services.

12. Changes to this Policy

We may update this Policy from time to time. We will post the updated Policy here with a revised effective date and, for material changes, take additional steps as appropriate.

13. Contact us

Questions about this Policy or our handling of your information? Reach QuezMedia through our secure contact form.