PRIVACY & COOKIES
How your information is used.
Notice version: 9 October 2026 · V8
Who operates this service
Cardsmachines is the payment-check service for Awais Amir, a Payment Consultant working with takepayments / Global Payments. Solutions offered through this service are sold through that role.
Controller for website enquiries: Awais Amir. Correspondence address: 124-128 City Road, London, England, EC1V 2NX.
Contact Awais about your information at awais@cardsmachines.co.uk or 07824 311967.
What the check collects
The quote form keeps only your selected payment service, business type, payment situation and turnover range in this browser tab for 30 minutes. Contact details and provider names are not stored in the draft. A temporary submission identifier lets a retry return the same receipt. These essential form records are cleared after a successful enquiry.
If you choose “Discuss these figures” in a calculator, a summary is carried to the enquiry form in this tab. You can remove it there. It is sent to Awais only when you submit the enquiry. Calculator figures are not put into page URLs or analytics events; refreshing the page clears this temporary summary.
Depending on the form you choose, the check asks about your business type and name, approximate payment turnover or turnover band and costs, current setup, contract timing, payment requirements, contact details and preferred contact method. The main quote form makes your trading postcode optional. Awais records follow-up notes and the outcome of your enquiry.
You choose whether to request a conversation. Calculations and guides can be used without supplying contact details. Contact details are needed only so Awais can respond to your request; you do not have to buy a service.
The enquiry records the page, referral and campaign information accompanying your visit, where available. It does not accept original statement files, bank details, identity documents or cardholder data. Do not put these in messages or notes.
Callback requests
The quick callback form requires your name, UK phone number and acknowledgement of its privacy wording. Business or trade, monthly card turnover, current provider, best time to call and a checked statement summary are optional. Your request includes the public page it came from and available source, campaign and referral information. Personal query-string details are excluded.
Submitting the callback asks Awais to call you about this enquiry. It does not place an automatic call, send you an automatic email or SMS, or sign you up for marketing. Awais reviews the request through the protected dashboard. Callback records follow the enquiry retention periods below.
Name, phone and optional business details remain in this page while you complete the form; the callback form does not save them as a browser draft. A temporary submission identifier lets a retry return the existing receipt, and a protected representation of the phone number prevents repeated callback notifications for the same number within 24 hours.
In the callback form, a PNG, JPEG or WebP image can be previewed locally so you can enter figures yourself. A supported text PDF or summary CSV can be read locally. No original file, image, extracted document text or filename is uploaded. Only the structured figures you check and explicitly choose to include are sent when you submit the callback. You can remove them or request the callback without them.
Statement reading and payment-cost reports
Where statement reading is enabled, a supported merchant processing PDF or fee-summary CSV is read locally in your browser. The original file and extracted document text are not uploaded to Cardsmachines, emailed to Awais or sent to an AI/OCR service. The detailed Payment Check reads text PDFs and summary CSVs; the callback form also offers local image previews for manual entry as described above. Neither service automatically extracts figures from images or scans. The browser uses temporary memory while reading; selecting another file or closing the page ends that workflow. We cannot delete the original file from your device.
Use merchant processing statements or fee reports only. Do not select full customer card numbers, CVV/CVC, PIN information, identity documents, online-banking credentials or bank-account statements. Customer-level export rows are not retained in the analysis. Only supported summary fields are used.
You can calculate and download a PDF without contact details or server storage. If you choose “Save my result”, confirmed structured figures are sent to our existing OpenAI Sites / Cloudflare service: provider, statement month, turnover, costs, card/channel profile, contract answers, field-source locations and calculation version. A private access code protects the saved result; the server stores a keyed hash of that code. Keep the code and reference private. We use our legitimate interest in delivering the cost-check and return visit you request. Saving does not request marketing.
Saved standalone summaries can be accessed for 30 days after creation. Expired summaries are inaccessible and deleted in bounded batches when the saved-result service is used. Physical deletion can occur later during quiet periods; no exact 30-day deletion guarantee is made. You can delete a saved summary using its private access code. We store no raw statement on the server, so no server-side 24-hour raw-file retention promise is needed.
If you choose “Ask Awais to check my result”, the confirmed structured summary accompanies the existing enquiry only when you submit its contact form. It then follows the enquiry retention, dashboard access and notification arrangements below. You can remove the summary before submission. The original statement and private return code are never attached to ordinary notification emails. A summary saved separately and a submitted enquiry have separate retention periods.
Optional analytics measure reading starts, completion/failure, confirmation, report views, downloads, saves and review requests. They do not include file names, statement contents, financial figures, private codes or analysis references. There is no open tracking, automatic credit decision or automatic outreach triggered by an analysis.
Why we use your information
We use enquiry details to review your payment requirements, respond using your chosen method, keep track of the conversation and measure its outcome. The lawful basis is legitimate interests: providing the business payment check you request and managing that enquiry. We use the relevant business and contact information you supply, and you can ask us to stop following up.
Optional email marketing is separate and based on your consent. It is not required for a payment check or response. Website analytics and Google Ads measurement each have a separate consent choice. Security and abuse-prevention processing serve our legitimate interest in protecting visitors and the service.
Enquiry scoring helps Awais prioritise follow-up using business turnover, readiness, purchase trigger, contract timing, evidence and urgency. A person reviews the enquiry. The score does not decide credit, eligibility or acquiring approval.
Who receives your information
Awais accesses enquiries through a dashboard restricted to his authorised account. OpenAI Sites provides the hosting, with Cloudflare infrastructure and database storage. These providers process information to operate and protect the service.
Hosting and support may involve processing outside the UK, including in the United States. OpenAI publishes its providers and processing locations. Its Data Processing Addendum describes standard contractual clauses with the UK Addendum for UK data where that agreement applies. Contact Awais for details of the arrangements relevant to your enquiry and how to obtain the applicable safeguards.
Resend also processes enquiry details to deliver a notification to Awais’s work email. The work notification includes your contact details, payment requirements and enquiry summary. A separate minimal operational alert goes to Awais’s connected Microsoft Outlook mailbox. It includes only the enquiry reference, business name, automatically assigned priority, requested contact method and a link to the protected dashboard. OpenAI-connected monitoring can review that alert to flag enquiries needing attention; contact details and form answers are not included in this operational email.
For a callback request, the operator email goes only to awais@cardsmachines.co.uk through Resend. It includes your name, phone number, optional trade, monthly card turnover, provider, source page, preferred calling time, receipt time and a link to the protected callback queue. It does not include the original statement or the other checked statement figures. The full checked summary, if you include one, is available in the protected dashboard. Ordinary quote-form work and operational notifications remain separate.
If you choose to proceed with a payment solution, Awais uses the employer’s approved internal application process. The applicable provider and acquiring privacy notices describe that processing. See takepayments’ privacy policy. This site does not sell your enquiry to multiple providers.
How long information is kept
Website enquiries are marked for deletion 180 days after the latest consultant update, or 365 days for activated merchants. Test enquiries are marked for deletion after seven days. Optional analytics are retained for 90 days before cleanup; abuse counters expire after two hours.
Cleanup removes expired records when a new enquiry is saved or Awais runs the dashboard’s deletion action. During quiet periods, records can remain until that cleanup runs. Awais can also delete an enquiry and its associated history and alerts when you request deletion.
A minimal suppression record can be retained to honour marketing objections after the enquiry is deleted. The payment provider’s internal application records follow its own retention requirements. Deleting the website enquiry does not automatically delete records held by the payment provider.
Your choices and rights
You can request access, correction, deletion, restriction and, where applicable, portability of your information. You can object to processing based on legitimate interests. Email Awais using the address above; reasonable identity verification may be needed before information is disclosed.
You can object to direct marketing at any time. Withdraw optional marketing consent by emailing “unsubscribe” to Awais. Withdrawal does not affect earlier lawful processing. Separately, Awais may contact relevant incorporated businesses using public business contact details and a verified business reason. Outreach and objections are recorded; an objection stops further marketing. Public availability does not by itself establish permission for every contact channel.
You can raise a concern with the Information Commissioner’s Office.
Cookies and optional analytics
We store your privacy choices on your device so the site can respect them. The Google Ads measurement choice expires after 180 days. Essential hosting, security and consultant sign-in technologies may also operate. Optional Google Ads measurement is available and starts only if you allow it.
If you allow analytics, we record session-level visits, check and quote starts, progress, validation errors (without field values), results, submissions and contact interactions with page and campaign labels. People who decline analytics are excluded from these website counts. Change your choice using “Cookie choices” at the bottom of any page; rejecting stops new optional events.
With your website analytics consent, Google Analytics 4 measures page views using cookies beginning “_ga”, configured to expire after 90 days. We send public page paths without query strings, and exclude consultant pages. We do not send statement contents, financial figures, contact details or private result codes. Google may process this data outside the UK under the safeguards linked below. Rejecting prevents activation; withdrawing stops new page views and clears these analytics cookies. Google Analytics retention is controlled separately in the Analytics property.
When Google Ads measurement is enabled and you separately allow it, Google receives ad-click and device information and a randomly generated reference when an enquiry is successfully saved. This helps match an advert to an enquiry. We do not send your name, email, telephone number, business turnover or form answers to Google, and do not enable personalised advertising or enhanced conversions. Google’s tag can use cookies beginning “_gcl_”, configured for up to 30 days. Ad-click identifiers may be held in this browser tab for 30 minutes and saved with your enquiry and consent record; those records follow the enquiry retention period above.
Google may process measurement information outside the UK. Read Google’s business data privacy information and privacy policy for its use, retention and international safeguards. Rejecting optional measurement prevents its activation. Withdrawing stops new enquiry measurement, clears this site’s advertising cookies and stored click information in your browser, and can send Google a consent-withdrawal signal if its tag was already loaded. Contact Awais to request deletion of previously stored enquiry information.
Security uses a keyed, short-lived representation of an IP address to limit abuse. The application does not save the raw address in its lead database. Infrastructure providers may process request metadata under their own service arrangements.
If you allow website analytics, source information is retained in this browser tab for up to 30 minutes after activity so it can survive page reloads. Rejecting analytics removes this optional source storage.