Privacy Policy

1.Who we are

Finoptiq is a payment service provider offering Visa and Mastercard card acquiring plus Apple Pay and Google Pay acceptance. For the personal data described in this policy, Finoptiq acts as the data controller, or as a processor on behalf of the merchant whose customers you are.

If you have questions about how we handle personal data, contact privacy@finoptiq.com.

2.Information we collect

We collect three broad kinds of information.

• Information you give us: name, email, phone number, company details, and anything you include in an enquiry or application.
• Information about your business during onboarding: registration and financial documents, directors and beneficial owners, trading description, expected volumes, and bank account details for settlement.
• Information from using our website: IP address, device and browser details, pages viewed, referring site, and how you interacted with our pages.
• Payment information: transaction records needed to route, authorise, settle and reconcile payments, including amounts, currencies, card network, masked card references and risk signals.

We do not ask you to send full card numbers, CVV codes or PINs by email or through our website. Card data used in payments is handled through payment channels designed for it, not through our own forms.

3.How we collect it

Directly from you, when you contact us, apply for an account or integrate with us. Automatically, through cookies and similar technologies when you browse the website — see our Cookie Policy. And from third parties, such as company registries, credit and business reference agencies, and fraud and risk screening providers.

4.Why we use it, and our legal basis

• To provide and maintain the services: processing payments, settling funds, showing you reports, and supporting you — necessary for our contract with you.
• To assess and manage risk: identity, business verification, fraud and anti-money-laundering screening, and credit checks — necessary for compliance with legal obligations and for our legitimate interests in preventing financial crime.
• To keep the website secure and improve it: diagnosing faults, preventing abuse, and understanding how pages are used — our legitimate interests.
• To market to you: product news, event invitations and updates — your consent where consent is required, otherwise our legitimate interests for business contacts.
• To meet legal and card scheme obligations: record keeping, reporting, and responding to regulators — compliance with legal obligations.

5.Who we share it with

We do not sell personal data. We share it only where needed, with:

• Card schemes and banks in the payment chain, including Visa, Mastercard, issuing banks and our acquiring and settlement partners, so transactions can be authorised and settled.
• Payment and wallet providers, including Apple and Google, for wallet transactions.
• Fraud, risk, identity and screening providers that help us verify businesses and detect abuse.
• Infrastructure and service providers such as cloud hosting, email, support and analytics suppliers, under confidentiality and data protection terms.
• Professional advisers, auditors and insurers.
• Regulators, law enforcement, tax authorities and card schemes where we are legally required or permitted to disclose.

6.International transfers

Because payments are global, some recipients sit outside your home country. Where we transfer personal data outside the European Economic Area or the United Kingdom, we use safeguards recognised for that purpose, such as Standard Contractual Clauses or an adequacy decision, together with contractual and technical protections.

7.How long we keep it

We keep personal data only as long as necessary for the purposes above, and longer where the law requires it. Transaction, KYC and accounting records are typically kept for at least five years, or longer where applicable law or a card scheme requires it.

Marketing contact data is kept until you unsubscribe or ask us to delete it, whichever comes first.

8.Your rights

Depending on where you live, you may ask us to:

• Access a copy of the personal data we hold about you.
• Correct anything inaccurate or incomplete.
• Delete data we no longer need, or restrict how we process it.
• Move your data to another provider in a usable format.
• Object to processing based on our legitimate interests, or stop direct marketing.
• Withdraw a consent you previously gave, without affecting processing that already happened.

We may need to verify your identity before answering, and we cannot always delete data we are legally required to keep. If you are unhappy with our response, you can complain to your local data protection supervisory authority.

9.Marketing communications

We send business marketing where you have asked for it or where it is lawful to do so, and every message includes a way to opt out. You can also ask us to stop at any time by contacting privacy@finoptiq.com.

10.Cookies and similar technologies

Our website uses cookies and browser storage for essential functions, remembering preferences, and understanding usage. Our Cookie Policy explains what we use, why, and how to control them.

11.How we protect data

We use technical and organisational measures proportionate to the risk: encryption in transit, access controls limited to people who need the data, logging and monitoring, vendor due diligence, and staff training. Our hosted checkout and secure-field options keep card data off your own servers, which reduces the compliance burden on you.

No method of transmission or storage is completely secure, but we work to protect personal data and will tell you about a security incident affecting you where the law requires it.

12.Children

Our services are for businesses and are not directed at children. We do not knowingly collect personal data from anyone under eighteen.

13.Changes to this policy

We update this policy when our services, technology or legal duties change. The date at the top shows the current version, and material changes will be announced on the website or by email where appropriate.

14.Contact

To exercise your rights, raise a concern, or ask how we handle personal data, email privacy@finoptiq.com or use the contact details on our website. Please include enough detail for us to find your records.