GDPR and Recharge

The General Data Protection Regulation (GDPR), is a framework of rules and compliance obligations governing how businesses can collect, use, and share data from consumers within the European Union (EU) and the European Economic Area. Even if a business is not based within the EU, they must follow the new rules if any of their customers are EU citizens. The GDPR is designed to empower consumers and their privacy by requiring companies to explain how and what data is being used by the organization. Additionally, the framework assures a level of security and privacy by requiring companies to appropriately safeguard protected data.

Sections

• How is Recharge affected?
• What has Recharge done to be GDPR compliant?
• Does Recharge have a Data Processing Agreement with its merchants?

How is Recharge affected?

Recharge provides services to merchants across the globe, many of whom reside within the EU themselves or work with customers who do. The GDPR framework requires compliance not just from the merchant, but any company with whom the merchant chooses to engage if that work includes processing data from EU customers. In this case, since Recharge provides payment processing for merchants, Recharge must be in compliance in order to ensure our EU Merchants are also compliant.

What has Recharge done to be GDPR compliant?

Activities that Recharge has undertaken to ensure full GDPR compliance include:

• Engaged external GDPR experts to ensure the regulation is being followed to its full extent.
• Re-worked Recharge’s Terms of Service and Privacy policies to include language referencing GDPR.
• Reviewed contractual agreements with vendors and processors with which Recharge does business to assess their compliance.
• Begun GDPR-focused training to Recharge staff who work with protected data on a day-to-day basis.
• Created and documented new procedures to ensure Recharge’s current workflow satisfies the new regulations.
• Developed a Data Protection Impact Assessment process to evaluate and mitigate security and privacy risks as they evolve.
• Evaluated Recharge’s current state as it relates to the data it processes on behalf of its merchants.

Does Recharge have a Data Processing Agreement with its merchants?