Account deletion — how to request it and what data we keep

This guide explains how to request account deletion in QRTransfers, what to include in your message, what data we have to retain afterwards, and when we may need to refuse to delete specific items.

The fastest path is our support form (category “Account issue”) or an email from the address linked to your account. The whole process is performed manually after identity verification.

Full information about data processing is in our Privacy policy and Terms of service.

How to request account deletion

We delete accounts manually after your request. We don’t offer a self‑service option in the panel today — this lets us verify your identity, check that no matters are open (e.g. refunds, disputes) and run the process safely.

Easiest: fill in the support form (category “Account issue”).
Alternatively, use the support form or send an email to support@qrtransfers.com.
Send the message from the address linked to your account — this speeds up identity verification.
Use a short subject like: “Account deletion request”.

What to include in your message

The more information you provide upfront, the faster we can close the case. It avoids back‑and‑forth questions and shortens response time.

The email address linked to your account (and your nickname, if you use one).
Clearly state that you’re asking for account deletion — or for deletion of only specific data.
If you’re writing from a different email than your account, add info to help verify identity (signup date, last transaction).
Optionally add a short reason — it helps us improve.

How long it takes and how we verify identity

We usually respond within a few business days. The statutory maximum is 30 days (GDPR art. 12); an extension by up to 60 days is possible only in exceptional cases with reasons given.

To protect your data, we may ask for additional confirmation (e.g. a code sent to the email linked to the account). This step protects you from someone trying to delete your account without your knowledge.

What data we keep after deletion (and why)

Deleting the account closes access and ends the service for that account. Some data must be retained — this stems from legal obligations, payment security and protecting other users. Details are in the Privacy policy.

Transaction data (transaction id, amount, status, time) — 5–10 years. Reason: accounting and tax obligations, defending against claims.
Email, name, nickname, payment identifiers — for the necessary period. Reason: reconciliation, fraud prevention (ban‑evasion), protecting buyers from being misled.
Technical and security logs (IP, User‑Agent, events) — 3–12 months. Reason: abuse detection, incident analysis.
Support correspondence — up to 24 months or until case closure + evidence retention. Reason: handling reports and demonstrating due diligence.
Marketing consent history — for the period required to demonstrate consent (also after withdrawal). Reason: legal evidence per GDPR.
Card and payment instrument data are not stored on our side — they sit with the payment provider (PSP). We only receive identifiers and statuses needed to handle the flow.

Partial deletion — when we may need to refuse

GDPR gives you the right to request erasure (art. 17). As a payment service, however, exceptions apply where we may — and sometimes must — refuse to delete specific data. This is a legal requirement, not a business choice.

In every refusal we state the specific legal basis and the data scope it applies to. Remaining data without such limitations will be deleted.

Legal obligation — e.g. accounting law, AML/KYC on the PSP side, tax duties.
Establishing, exercising or defending claims — through the limitation period.
Security and fraud prevention — within scope and for the necessary period.
Protecting other users — e.g. records that prevent re‑registration of a banned account or a confusingly similar nickname.
Fulfilling your own requests — e.g. proof of how we handled the request (we must remember that and how it was done).

Your other rights

Independently of account deletion, you have rights under GDPR. Exercising them doesn’t require deleting your account and may be a simpler path (e.g. correcting data or restricting processing).

Right of access and to a copy of your data (GDPR art. 15).
Right of rectification of inaccurate data (art. 16).
Right to restriction of processing (art. 18).
Right to data portability (art. 20).
Right to object to processing based on legitimate interests (art. 21).
Right to lodge a complaint with the supervisory authority (in Poland: President of UODO).

What to do before you submit the request

A few simple steps speed up the process and avoid surprises.

Close any open matters: refunds, disputes, outstanding payments.
Export your transaction history if you’ll need it later (e.g. for bookkeeping).
Cancel recurring subscriptions with enough notice.
Disable mobile notifications and sign out of active sessions if you want to do this in advance.

FAQ

Can I delete my account from settings?

We currently don’t offer a self‑service option in the panel — we run deletion manually after your request. This lets us verify identity and check that no matters are open.

How quickly will you delete the account?

Usually within a few business days. The statutory maximum is 30 days (GDPR art. 12).

Can I recover the account after deletion?

No. The same account can’t be restored after deletion. You can create a new one, with possible restrictions (e.g. blocking confusingly similar nicknames to prevent confusion).

Will you also delete payment card data?

We don’t store card data on our side — it sits with the payment provider (PSP, e.g. Stripe). Manage it directly in the PSP’s panel.

I have outstanding payments or an open dispute — can I delete my account?

It’s best to resolve open matters first. After deletion you won’t be able to access them from the panel, and further handling becomes harder.

Is account deletion free?

Yes. Account deletion and handling GDPR requests is free of charge.

Can I request deletion of only specific data?

Yes. As a payment service, however, we must keep some data (reconciliation, security logs, data needed to defend against claims). In such cases we may refuse deletion of specific items — always citing the legal basis.