Privacy Policy
Last updated: July 15, 2026
Introduction
This Privacy Policy applies to MIDs, LLC and Mids Holding B.V. ("MIDs", "we", "our", "us"). It explains how we collect, use, disclose, retain and protect personal data in connection with our website, merchant onboarding activities, white-label PCI DSS compliant payment gateway, and related services.
Who we are
MIDs is a registered sales agent in the United States and a registered Independent Sales Organisation (ISO) in Europe. MIDs is not a licensed payment institution or merchant acquirer. We market payment acceptance solutions, facilitate merchant onboarding, and provide a white-label PCI DSS compliant payment gateway. Payment processing services are provided by regulated acquiring banks and licensed payment service providers with whom merchants contract.
Information we collect
- Contact and business information
- Merchant application and KYB/KYC information
- Transaction and gateway metadata
- Limited cardholder data transmitted through our gateway for authorisation and processing. MIDs does not store sensitive authentication data or full cardholder data after authorisation.
- Device, log and website usage information
How we use personal data
We process personal data for merchant onboarding, contract administration, customer support, fraud prevention, AML/KYC/KYB compliance, sanctions screening, risk management, operation of our gateway, regulatory compliance, security, analytics, and marketing where permitted by law.
Legal bases (GDPR)
Contract performance, legal obligations, legitimate interests, and consent where required.
Sharing
We may share information with acquiring banks, licensed PSPs, card schemes, identity verification providers, cloud providers, regulators, auditors and professional advisers under appropriate confidentiality and security obligations.
International transfers
Where personal data is transferred internationally, appropriate safeguards such as adequacy decisions or Standard Contractual Clauses are used where required.
Security
We maintain administrative, technical and physical safeguards including encryption in transit, access controls, monitoring and PCI DSS-aligned controls. Although no system is completely secure, we use commercially reasonable measures to protect personal data.
Retention
We retain personal data only as long as necessary for contractual, regulatory, AML, tax, accounting and legal purposes, after which it is securely deleted or anonymised.
Your rights
Depending on your jurisdiction, you may have rights to access, rectify, erase, restrict, object, data portability, withdraw consent, and lodge complaints with supervisory authorities.
Cookies
Our website uses essential cookies and may use analytics and marketing cookies where permitted. Users can manage preferences through browser settings and cookie controls.
Contact us
If you have questions about this Privacy Policy, please get in touch:
Address MIDs, LLC, 2810 N. Church St., 679246, Wilmington, DE 19802, USA · Mids Holding B.V., Daalwijkdreef 47, 1103AD Amsterdam, The Netherlands