MyPaymentForm collects some information to provide the services advertised. This information is outlined below and is confined to the parties involved in the transaction — which include the merchant, cardholder and payment gateway (DPS). Data may also be shared to accomodate requests from law-enforcement agencies.
IP address
MyPaymentForm may store your IP address to compare it with one returned
by the payment gateway (DPS)
as part of basic security checks.
Other miscellaneous transaction information returned by the payment gateway may be used to provide transaction outcome details to the merchant and cardholder (via email). This data never includes credit card numbers and is discarded after emails are sent.
Gateway credentials
The Px Pay credentials (username and key) are provided to you by the payment
gateway (DPS) and are used to
generate a unique payment page address that is connected to your merchant account.
These credentials are also used to decrypt the transaction outcome details so that
payment notification emails can be sent (if requested).
Transaction characteristics
These details (transaction type, amount, supported currencies, merchant reference
etc.) are required by DPS in order to initiate a transaction. MyPaymentForm
stores this information to build the appropriate transaction message for DPS
on a transaction-by-transaction basis.
Email
MyPaymentForm stores your email address purely to provide you with transaction
updates (if requested) and to contact you if there are any significant
issues/changes affecting the services provided by MyPaymentForm (e.g. downtime,
suspension of service etc.).
Transaction results
MyPaymentForm decrypts the transaction outcome message returned by DPS and relays
some of this information (transaction amount, cardholder name, reference etc.)
to the merchant and/or cardholder as requested. MyPaymentForm
stores a transaction id and the IP address identified by DPS as having
completed the transaction (as part of basic fraud prevention).
MyPaymentForm wishes it could function without collecting any information whatsoever.
Since that's not possible, just enough information is collected in order to provide the service and try keep things safe.
Read the longer, much more exciting breakdown (on this page) for more details.