Please read this notice carefully to understand our policies and practices regarding your personal information and how we will treat it. For a short-form summary, please click here. California residents can find more specific information in the “California Consumer Privacy Addendum”. Quebec residents can find more specific information in the “Quebec Privacy Notice Addendum”. Contact Us details are provided at the end of the notice for feedback or any privacy enquiries you may have.
This notice applies to the companies that are part of the Paysafe Group, which use different trading names in different territories and the list of Paysafe companies that collect or process personal information according to this notice can be found at the end of this document. The reference to Paysafe (including “we”, “us” or “our”) includes those companies and all relevant group affiliates. This notice will not override any rights provided to you under the local privacy and data protection laws which apply in your jurisdiction.
References to “you” in this notice are to the individual who is enquiring, accessing or applying to use the Services (as defined below) either on your own account or on behalf of a business, or in relation to representatives or third parties acting on your behalf. This includes, in relation to a customer or prospective customer of Paysafe, any sole trader and any principals, including the managing and financial directors, any other directors and officers, shareholders, partners and beneficial owners of a customer, as well as any member of staff or representative accessing or using the Services or providing or requiring information on behalf of a customer. A separate privacy notice applies to Paysafe employees and candidates.
Together these are all referred to in this notice as “Services”.
INFORMATION WE MAY COLLECT FROM YOU
Personal and non-personal information
We collect and process personal and non-personal information relating to you.
Personal information is information that can be used to uniquely identify a single person, either directly or indirectly.
Paysafe also collects non-personal information or may anonymise personal information to make it non-personal. Non-personal information is information that does not enable a specific individual to be identified, either directly or indirectly. Paysafe may collect, create, store, use, and disclose such non-personal information for any reasonable business purpose. For example, Paysafe may use aggregated transactional information for commercial purposes, such as trend analysis and the use of data analytics to obtain learnings and insight around payment transaction patterns and usage.
To the extent that Internet Protocol (IP) addresses (or similar identifiers) are clearly defined to be personal information under any local law, and where such local law is applicable to Services, we will manage such identifiers as personal information.
Please note that Paysafe provides services to both individual consumers and businesses and this privacy notice applies to both and should be read and interpreted accordingly.
HIGHER RISK DATA
We may collect information about you that is of a sensitive nature, such as so-called special category data or sensitive data. These types of information can relate to an individual’s:
Local laws may prohibit or restrict the use of such data and require specific obligations to be met. Within Europe, GDPR will generally require a second lawful basis for such processing, such as, (a) your explicit consent, (b) for the purposes of the establishment, exercise, or defense of legal claims, (c) for reasons of substantial public interest, or (d) where processing is necessary for your vital interests or of another natural person.
COLLECTING YOUR INFORMATION
We collect the following information through the following means:
Information you give us: we receive and store any personal information (including financial information) you provide to us including when you (or your business) enquire for or make an application for the Services; register to use and/or use any Services; upload and/or store information with us using the Services; and when you communicate with us through email, SMS, a website or portal, or the telephone or other electronic means, e.g. in the context of contacting us about your account or transactions. Such information may reference or relate to you or your customers and includes:
Where we are required by applicable regulations, we may additionally process the personal information of vulnerable customers. What constitutes a vulnerable customer differs in different jurisdictions. If you have questions about or need further information, please contact us via the Contact Us section below.
Information we collect about you automatically: Paysafe receives and stores certain information automatically whenever you interact with Paysafe, whether you open an account or undertake a transaction with us; for example, by way of “cookies” or similar technology. We also obtain certain information when your web browser accesses Services or advertisements and other content provided by or on behalf of Paysafe on other web sites, or when clicking on emails. Collecting this information enables us to better understand the visitors and customers who use and interact with Paysafe, where they come from, and how they use our services. We use this information for our analytics purposes and to improve the quality and relevance of our services for our visitors and customers. We may also use such information for regulatory purposes, our own due diligence checks, fraud, and risk management. This information includes:
Information collected through our applications: if you download or use mobile or desktop applications provided by Paysafe, we may receive information about your location and your device or the service you are using (including where a payment transaction takes place). Some devices allow applications to access real-time location-based information (for example GPS). Our mobile and desktop apps may collect such information from your mobile device or your computer at any time while you download or use our apps, if your device has real-time location data access enabled. Where required, we will always seek to notify you if it is our intent to collect real-time location information and, also where required by law, obtain your consent. We may use such information for regulatory purposes, our own due diligence checks, fraud, and risk management, to better understand transaction patterns and to optimise your experience.
Email and Other Communications: we may receive information about you and your use of Services when we communicate with each other, including when you open messages from us and from the use of electronic identifiers (sometimes known as “device fingerprints”), for example, Internet Protocol addresses or telephone numbers.
Information from Other Sources: we may receive information about you from other sources and add it to our account information, including when you apply to use the Services. For example, we work closely with, and receive information from, third parties like business partners, banks and other financial institutions, merchants, subcontractors in technical, payment and delivery services, advertising networks, analytics providers, search information providers, government lists and databases, social media sites (including posting made by or about you or us), credit reference and fraud prevention agencies. Credit reference and fraud prevention agency use is further explained below. We may also review public comments and opinions made on social networking sites (e.g., Facebook and Twitter) to better understand our customers and our provision and development of Services.
Information about other people: if you give us information about other people, you must have informed them in advance (for example, by giving them this privacy notice) and you must ensure you have the right to do so.
WHAT WE USE YOUR PERSONAL INFORMATION FOR
We may use and share the personal information we collect for the following purposes:
DISCLOSURE OF YOUR INFORMATION
We do not disclose information which could identify you personally, to anyone except as described in this notice, as permitted, or required by law, and/or for the purposes described in this notice, including:
Except as necessary for the performance of its services and as described above/attached, Paysafe does not sell, rent, share, or otherwise disclose personal information about its customers to third parties for their own third-party marketing use without meeting any necessary legal obligations (e.g., consent, opt-out, or as otherwise permitted by law). The California Consumer Privacy Act uses a very wide definition of data “sale” and California residents should read the “CCPA” section below in respect of data sale.
FRAUD PREVENTION AGENCIES
The personal information we have collected from you will be shared with fraud prevention agencies who will use it to prevent fraud and money-laundering and to verify your identity. If fraud is detected, you could be refused certain services or finance. Fraud prevention agencies can hold your personal data for different periods of time. If we, or a fraud prevention agency, determine that you pose a fraud or money laundering risk, we may refuse to provide the services or financing you have requested, or we may stop providing existing services to you. A record of any fraud or money laundering risk will be retained by the fraud prevention agencies, and may result in others refusing to provide services or financing to you.
If you are a resident of the UK, your personal information will be shared with Cifas. Further details of how your information will be used by us and Cifas, and your data protection rights, can be found here.
HOW DO WE WORK WITH OTHER SERVICES AND PLATFORMS
Where available, you may be able to connect your Account with a third-party account or platform. For the purposes of this Privacy Statement, an “account connection” with such a third-party is a connection you authorise or enable between your Account and a non-Paysafe account, payment instrument, or platform that you lawfully control or own. When you authorise such a connection, Paysafe and the third-party will exchange your Personal Data and other information directly. Examples of account connections include:
If you create an account connection, we may receive information from the third-party about you and your use of the third-party’s service. If you connect your Account to a third party, we may have access to your account balance and transactional information, such as purchases and funds transfers. We will use all such information that we receive from a third-party via an account connection in a manner consistent with this Privacy Notice.
Information that we share with a third-party based on an account connection will be used and disclosed in accordance with the third-party’s privacy practices. Before authorising an account connection, you should review the privacy notice of any third-party that you authorised to have an account connection that will gain access to your Personal Data as part of the account connection. For example, Personal Data that Paysafe shares with a third-party account or platform such as a social media account may in turn be shared with certain other parties, including the public, depending on the accounts or platform’s privacy practices.
We may monitor or record telephone calls, emails, web chat or other communications with you for regulatory, security, quality assurance or training purposes. When visiting our offices, CCTV, access control systems and/or other monitoring systems may be in operation for security reasons and for health and safety and office management purposes.
WHERE WE STORE YOUR PERSONAL INFORMATION
We, our service providers, and other parties with whom we may share your personal information (as described above) may process your personal information in territories that are outside the European Economic Area (“EEA”) or otherwise outside of the territory in which you reside. It may also be processed by staff (ours or that of our suppliers) operating outside the EEA or the territory in which the personal information was collected. Such staff may be engaged in, among other things, the fulfilment of orders, the processing of payment details and support services in provision of the Services. These countries may have data protection standards that are different to (and, in some cases, lower than) those of the territory in which you reside.
In these circumstances, we will take appropriate steps to protect your personal information in accordance with this privacy notice and applicable data protection laws; including using any appropriate safeguards required by law to ensure that any international data transfers are lawful. Paysafe generally uses “Model Clauses” as approved by the European Commission when contracting with third-party data recipients outside the EEA who are receiving data from within the EEA for the purpose of processing personal information transferred outside the EEA.
HOW WE KEEP YOUR PERSONAL INFORMATION SECURE
We have implemented technical, physical, and organisational/administrative measures designed to secure your personal information from accidental loss and from unauthorised access, use, alteration, and disclosure. These measures include:
The safety and security of your information is also dependent upon you. If we have given you (or if you have chosen) a password or access code for access to certain parts of our website/portal or mobile applications and similar, you are responsible for keeping this password and/or access code confidential. You must not share your password and/or access code with anyone. You must ensure that there is no unauthorised use of your password and access code. Paysafe will act upon instructions and information received from any person that enters your user id and password and you understand that you are fully responsible for all use and any actions that may take place during the use of your account, unless otherwise mandated by law. You must promptly notify Paysafe of any information you have provided to us which has changed.
The transmission of information via the internet is not completely secure. Although we will do our best to protect your personal information, we cannot guarantee the security of your information transmitted to our site, unless you are communicating with us through a secure channel that we have provided. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
HOW LONG WE RETAIN YOUR PERSONAL INFORMATION
We will retain your personal information for as long as needed or permitted dependent on the context and purpose for which it was collected, the type of information and in compliance with applicable local laws or regulations.
This means that when using our Services, we will retain your personal information as necessary for the provision of the services and for any linked legitimate business purpose. This includes the use and retention of your personal information when you commence an application for our services, irrespective of whether you complete such application or are accepted as a customer. For example, account data is generally retained for up to 7 years after the closure of the account, to align with statute of limitation periods in the event of complaints or legal disputes. We may also be legally required to retain information, for example under anti money laundering or bankruptcy laws or where required by law enforcement or similar government agencies. Please note that the relevant retention terms may vary per jurisdiction.
We will retain personal information as evidence of our dealings with you regardless of whether there were any financial transactions, for audit and compliance practices, to manage any queries or disputes, including to defend or initiate any legal claims. We can also continue marketing and sending you direct marketing, subject to local laws and where you have not objected to such marketing.
We may also use data minimization techniques to better protect your information, known as pseudonymization. Once your information is no longer needed, we may anonymize or aggregate it with other information to make it unidentifiable, as an alternative to deletion.
YOUR DATA PROTECTION RIGHTS
Depending on your jurisdiction or country of residence, you may have one or more of the following rights:
These rights may apply under several different regulations, for example, the General Data Protection Regulation, generally applicable to EEA residents. Rights applicable to California residents under the California Consumer Protection Act, as amended by the California Privacy Rights Act, are outlined in the California Consumer Privacy Addendum below.
Furthermore, such rights may be qualified or restricted. For example, we may not be obligated to grant your request as we may be required by law to continue its processing, or to file a complaint. Similarly, we are unable to delete your information if you want to continue using our Services, or where such information is necessary to record our contractual dealings; it is required by law (for example, the retention of anti-fraud or “know your customer” identify and verification requirements); or for the purpose of defending or asserting legal rights and legal actions.
When you cease your relationship with us and stop using our services, we are permitted by law to retain your information for a period to evidence our dealings with you, as explained earlier. This will be in accordance with our internal retention policies and procedures. For more information on retention of data, please refer to the relevant section within this Notice.
To the extent that GDPR applies, when you give us consent to use your personal information, you can withdraw it any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent. For example, you can stop any marketing communication we send you by clicking on the “unsubscribe” or “opt-out” link in the communications you receive, or according to the instructions that we provide every time, but we will continue to send you operational or service messages in relation to your Services.
You always have the right to complain to a data protection authority if you are dissatisfied with our collection and use of your personal information. For more information, please contact your local data protection authority. Also, you may be able to commence a court action to claim compensation for damage or distress caused by our failure to comply with data protection legislation.
If you want to know more about your rights, or you want to exercise them, please visit our dedicated rights page on our Paysafe website. Here you can submit a rights request directly to the relevant team, Alternatively, you can reach us at the details provided in the Contact Us section.
AUTOMATED DECISION MAKING
In some instances, our use of your personal information may result in automated decisions being taken (including profiling) that legally affect you or similarly significantly affect you.
Automated decisions mean that a decision concerning you is made automatically based on a computer determination (using software algorithms), without our human review. For example, we use automated decisions to complete credit assessments on you when you apply to certain Services or to carry out anti-fraud checks, as explained in the section “What We Use Your Personal Information For”. We have implemented measures to safeguard the rights and interests of individuals whose personal information is subject to automated decision-making. In addition, if you are using the Services in the EEA, when we make an automated decision about you, you have the right to contest the decision, to express your point of view, and to require a human review of the decision.To exercise this right, please complete our dedicated rights form or contact us via the details provided in the ‘Contact Us’ section. Privacy laws continue to develop and if you think or are unsure as to whether such right may apply to you, please also contact us, so we can assess and advise.
LEGAL BASIS FOR PROCESSING
Paysafe will only process your personal information in compliance with the law. Such laws vary across different territories and further specific information is available on request. In general, Paysafe will either process:
If you have questions about or need further information concerning the legal basis on which we collect and use your personal information for any specific processing activity, please contact us via the Contact Us section below.
DO NOT TRACK & GLOBAL PRIVACY CONTROL SIGNALS
Some browsers and browser extensions support the Do Not Track (“DNT”) or Global Privacy Control (“GPC”) browser controls that can send a signal to the websites you visit indicating your choice to opt-out from certain types of data processing, including data sales. Upon the detection of GPC signals/ DNT browser request we will make reasonable steps to respect your choices as required by applicable law.
CHANGES TO OUR PRIVACY NOTICE
We may, from time to time, change our privacy notice. If we make material changes to how we treat your information, we will notify you through a notice on this website/portal. The date the privacy notice was last modified is stated on this notice. Please ensure you periodically visit our website/portal and this privacy notice to check for any changes. However, if we are required by law to give you advance notice of any changes to this privacy notice and/or seek your consent to changes in our uses of your personal information, then we will do so.
LINKS TO THIRD PARTY SITES
Our site may, from time to time, contain links to and from the websites of our partner networks, advertisers, and affiliates. If you follow such a link, please note that these websites have their own privacy and cookies policies and Paysafe does not accept any responsibility or liability for these third-party websites.
This notice is global in scope but is not intended to override any legal rights or prohibitions in any territory where such rights or prohibitions prevail. In such event, the rights and obligations set out in this notice will apply, subject only to amendment under any applicable local law having precedence.
The companies of the Paysafe Group that are based outside the EEA have elected as their EU representative the following entity: Paysafe Bulgaria EOOD, 90, Tsarigradsko shose blvd, Sofia, 1784, Bulgaria. You can reach the EU representative using the contact details provided under the Contact Us section below.
To the extent required under The European Union (Withdrawal) Act 2018 or other legislation in respect of “Brexit” the companies of the Paysafe Group that are based outside the United Kingdom have elected as their UK representative the following entity: Skrill Holdings Limited, 25 Canada Square, London, England, E14 5LQ, United Kingdom. You can reach the UK representative using the contact details provided under the Contact Us section below.
All comments, queries and requests relating to our use of your information are welcomed. If you wish to exercise any of your rights, you should complete our dedicated rights form. Alternatively, you may exercise your rights by contacting us on the details provided below. For further information as to the applicable Paysafe group companies to which this notice applies, you should write to the address below, marked FAO Privacy Department or contact us.
Paysafe’s Group Data Protection Officer is as stated below and can be contacted via the Contact us link above or at the address below:
Mr Derek A Wynne
Paysafe, 2 Gresham Street, 1st Floor, London, United Kingdom, EC2V 7AD
If you are a California resident and use our consumer Services, you may have certain rights under the California Consumer Privacy Act (CCPA) which are described below.
WHAT INFORMATION WE COLLECT
In the past 12 months, we collected the following personal information:
We collect this personal information to underwrite and set up your account and for the purpose of providing our Services to you.
In the past 12 months, we shared with third parties any of the information described above for our business purposes, e.g., with our affiliates or in relation to using a service provider to assist us in providing Services to you. The categories of such service providers are described in the Disclosure of Your Information section.
You can switch ‘on’ or ‘off’ your cookie usage in the online consent dashboard available via the ‘Cookie Settings’ link on all our websites and portals. To opt out of the sharing or sale of your personal information in our mobile applications, please use the ‘Privacy Settings’ tab available in your profile.
If you are a California resident, effective January 1, 2023, you have a right to limit our use of sensitive personal information for any purposes other than to provide the services or goods you request or as otherwise permitted by law. To opt-out from such additional purposes, contact us via this form or by calling us at our toll-free number, +1 855 719 2087 (toll free number, available 9AM-7PM EST)
YOUR CCPA PRIVACY RIGHTS
You have rights that you can exercise in relation to your personal information. In particular:
You may authorize a person to act on your behalf in relation to exercising these rights, but we may need to take certain steps to verify the request made is legitimate, i.e., that it is indeed coming from you and that it is made on your behalf. For example, we may require your signed permission demonstrating that you have authorized the agent to submit the request on your behalf.
Please note that where we use and disclose personal information for purposes related to security, fraud detection and other similar purposes, some of your rights may be limited. As such, please consider that there might be cases where your request cannot be fulfilled. For example, as permitted by the CCPA, it is possible that we may not comply with a request to delete your personal information if we need that information for the purpose of detecting security incidents, or protecting against malicious, deceptive, fraudulent, or illegal activities, where such information is necessary to record our contractual dealings or your transactions or where required or otherwise permitted by law.
If you want to know more about your rights, or you want to exercise them, you can reach us at the details provided in the Contact Us section.
California residents may also call us at +1 855 719 2087 (toll free number, available 9AM-7PM EST) or via the Contact us provided above.
This Notice was last revised on 22nd September 2023.
List of entities processing personal information
The Paysafe Group comprises Paysafe Group Holdings Limited, together with its subsidiaries. Below is a list of Paysafe Group entities that process personal information within the scope of Paysafe Group’s Global Privacy Notice:
North & South America