Effective date: 14 August 2026
Last updated: 25 August 2026
1. About this Privacy Notice
Paysetra Limited (“Paysetra”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal information.
This Privacy Notice explains how we collect, use, store, share and protect your personal information when you:
- visit or use paysetra.co.uk;
- contact us or make an enquiry;
- request information or a quotation concerning our foreign exchange, payment or related services;
- apply to become or become a customer;
- use our services;
- communicate with us by telephone, email or other channels;
- are introduced or referred to us by a third party;
- act as a director, beneficial owner, authorised signatory, employee, representative or other person connected with a customer or prospective customer; or
- otherwise interact with Paysetra.
This Privacy Notice has been prepared having regard to applicable UK data protection legislation, including the UK General Data Protection Regulation (“UK GDPR”), the Data Protection Act 2018, the Privacy and Electronic Communications (EC Directive) Regulations 2003 (“PECR”), the Data (Use and Access) Act 2025 and other applicable data protection requirements as amended from time to time.
We keep this Privacy Notice under review and may update it where necessary.
2. Who we are
The data controller responsible for the personal information described in this Privacy Notice is:
Paysetra Limited
Company number: 17365256
Registered office: 45 Gresham Street, London, EC2V 7BG, United Kingdom
Website: https://paysetra.co.uk
Privacy enquiries: privacy@paysetra.co.uk
For the purposes of this Privacy Notice, “Paysetra”, “we”, “us” and “our” mean Paysetra Limited.
3. Personal information we collect
The personal information we collect depends on your relationship with us and the products or services you use or enquire about.
3.1 Personal and contact information
We may collect:
- your full name;
- date of birth;
- residential or postal address;
- email address;
- telephone number;
- nationality;
- country of residence;
- identification information; and
- preferred method of communication.
3.2 Identity and verification information
Where necessary to provide our services, verify your identity or satisfy applicable legal, compliance or financial crime requirements, we may collect:
- passport details;
- driving licence details;
- other government-issued identification;
- proof of address;
- photographs or other verification information;
- information used to verify your identity; and
- the results of identity, verification and screening checks.
3.3 Business information
Where you act for, own or are otherwise connected with a company, partnership or other organisation, we may collect:
- company or business name;
- registered office and trading address;
- company registration details;
- nature of the business and its activities;
- ownership and control information;
- beneficial ownership information;
- information about directors and officers;
- authorised signatory information;
- information about persons authorised to act on behalf of the organisation; and
- information concerning the purpose and expected use of our services.
3.4 Financial and transactional information
We may collect:
- bank account details;
- payment details;
- transaction details;
- currency requirements;
- payment instructions;
- source and destination of funds;
- transaction history;
- information concerning the purpose of transactions;
- source of funds or source of wealth information where appropriate; and
- other information required to provide our services or satisfy applicable legal, compliance or financial crime requirements.
3.5 Communications information
We may retain records of communications with you, including:
- emails;
- telephone calls;
- messages and other electronic communications;
- correspondence;
- enquiries;
- complaints; and
- information provided during customer service interactions.
Where legally permitted and appropriate, telephone calls may be recorded for security, quality assurance, training, compliance and evidential purposes.
3.6 Technical and website information
When you use our website, we may collect information such as:
- IP address;
- browser type;
- device type;
- operating system;
- approximate location derived from technical information;
- pages visited;
- website interactions;
- referring website;
- date and time of visits; and
- cookie and similar technology information.
Further information about our use of cookies and similar technologies is provided in our Cookie Policy.
3.7 Sensitive and other protected information
We do not generally seek to collect special category personal information.
In limited circumstances, we may process special category information where this is necessary for a particular purpose and where we have both a lawful basis and an applicable condition permitting the processing under UK data protection law.
Where we process such information, we will apply appropriate safeguards.
We will only process criminal offence information where permitted by applicable law and will apply the safeguards required by law.
4. How we collect your personal information
We may collect personal information:
- directly from you;
- when you complete a form on our website;
- when you contact us;
- when you request information or a quotation;
- when you apply to become or become a customer;
- when you use our services or conduct a transaction;
- from your employer or an organisation you represent;
- from a director, beneficial owner, authorised representative or other person connected with an organisation;
- from introducing or referring partners;
- from banks, payment providers and other financial institutions;
- from identity and verification providers;
- from fraud prevention providers;
- from credit reference agencies where appropriate;
- from sanctions and politically exposed person screening providers;
- from publicly available sources, including public registers; and
- from regulators, law enforcement bodies and other competent authorities where legally permitted or required.
Where we obtain your personal information from another person or organisation rather than directly from you, we will provide the information required by applicable data protection law unless an exemption applies.
4.1 Information you provide about other people
If you provide personal information to us about another person, such as a director, beneficial owner, authorised signatory, employee, representative, beneficiary or other individual connected with a business or transaction, you should ensure that you are permitted to provide that information to us.
Where appropriate, you should also make that person aware that their information has been provided to Paysetra and direct them to this Privacy Notice.
5. How we use your personal information
We may use personal information to:
- respond to enquiries;
- provide information and quotations;
- assess applications and prospective customer relationships;
- open and administer customer accounts;
- provide foreign exchange, payment and related services;
- process and administer transactions;
- make or receive payments;
- communicate with customers and their representatives;
- verify identities;
- conduct customer due diligence and verification checks;
- conduct sanctions and politically exposed person screening;
- prevent and detect fraud and other financial crime;
- monitor transactions and activity;
- identify and manage financial crime and other business risks;
- comply with applicable legal and regulatory requirements;
- satisfy appropriate requirements relating to the services we provide;
- maintain appropriate business, accounting and transaction records;
- provide customer support;
- manage and investigate complaints;
- investigate and resolve disputes;
- protect our business, customers, website, systems and services;
- improve our products, services and customer experience;
- monitor and improve website performance;
- conduct appropriate business analysis;
- manage relationships with introducing and referring partners;
- manage suppliers and service providers;
- send marketing communications where legally permitted;
- establish, exercise or defend legal claims;
- enforce our contractual rights; and
- respond to lawful requests, court orders and requests from competent authorities.
6. Why we use your personal information
We will only process personal information where we have a valid legal basis to do so.
Depending on the purpose and circumstances, we may rely on one or more of the following lawful bases.
6.1 Contract and steps before entering into a contract
We may process personal information where this is necessary to take steps at your request before entering into a contract or to perform a contract with you.
This may include responding to service requests, establishing a customer relationship, administering an account, providing services, processing transactions and providing customer support. Where our customer is a company or other organisation rather than an individual, contract may not be the appropriate lawful basis for processing information about its representatives. In those circumstances, we may rely on our legitimate interests or another applicable lawful basis.
6.2 Legal obligation
We may process personal information where necessary to comply with an applicable legal obligation.
This may include applicable requirements concerning financial crime prevention, sanctions, regulatory or legal reporting, taxation, accounting, record keeping and responding to lawful requests from courts, regulators, law enforcement agencies or other competent authorities.
6.3 Legitimate interests
We may process personal information where this is necessary for our legitimate interests, or those of a third party, provided those interests are not overridden by your interests, rights or freedoms.
Our legitimate interests may include:
- operating and managing our business;
- providing and improving our services;
- managing relationships with customers, prospective customers and business contacts;
- protecting our business and systems;
- preventing and detecting fraud and other financial crime;
- maintaining information and network security;
- managing suppliers and commercial relationships;
- understanding how our website and services are used;
- protecting our legal and commercial interests; and
- communicating with business contacts where permitted.
Where we rely on legitimate interests, we consider the nature and impact of the processing and your rights and interests.
6.4 Consent
In certain circumstances, we may rely on your consent.
Where we rely on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
Where consent is required for electronic marketing or the use of certain cookies or similar technologies, we will obtain consent in accordance with applicable requirements.
6.5 Vital interests
In limited circumstances, we may process personal information where necessary to protect your vital interests or those of another person.
7. Information we require from you
Certain information may be necessary for us to establish or administer a customer relationship, provide a service, process a transaction or satisfy applicable legal, compliance or financial crime requirements.
Where we ask you to provide information that is necessary for these purposes and you do not provide it, we may be unable to:
- accept or continue a customer relationship;
- open or administer an account;
- provide a requested product or service;
- process or complete a transaction; or
- comply with a request you have made.
We will only request information that we reasonably consider necessary for the relevant purpose.
8. Identity verification, financial crime prevention and screening
As part of providing our services and managing financial crime risk, we may carry out appropriate identity, customer due diligence, sanctions, fraud prevention and other verification or screening activities.
This may include processing information to:
- verify an individual’s identity;
- verify businesses and their ownership and control;
- identify and verify beneficial owners;
- understand the nature and purpose of a customer relationship;
- understand the source or destination of funds where appropriate;
- understand source of wealth where appropriate;
- conduct sanctions screening;
- identify politically exposed persons and relevant connected persons;
- prevent and detect fraud;
- identify and manage financial crime risks;
- monitor transactions and activity; and
- satisfy applicable legal, compliance and service requirements.
We may use specialist third-party providers to assist with identity verification, fraud prevention, sanctions screening and other financial crime checks.
Some information may need to be retained or processed notwithstanding a request for erasure where we have an applicable legal obligation or other lawful reason to do so.
9. Who we share your personal information with
We may share personal information where necessary and lawful with organisations such as:
- banks and banking partners;
- payment service providers;
- foreign exchange and payment infrastructure providers;
- identity and verification providers;
- fraud prevention providers;
- sanctions and financial crime screening providers;
- compliance and regulatory technology providers;
- IT, hosting, communications and cloud service providers;
- customer relationship management and business software providers;
- professional advisers;
- accountants and auditors;
- legal advisers;
- insurers;
- introducing or referring partners where appropriate;
- regulators and other competent authorities;
- law enforcement agencies;
- courts and tribunals; and
- other organisations where disclosure is required or permitted by law.
We do not sell your personal information to third parties.
Where another organisation processes personal information on our behalf, we take appropriate steps to ensure that appropriate contractual, confidentiality, security and data protection requirements are in place.
Some organisations with whom we share information may process personal information for their own purposes as independent data controllers. Where this applies, their own privacy notices will explain how they process personal information.
9.1 Introducing and referring partners
Paysetra may work with introducing, referral or other commercial partners.
Where a partner provides us with information about a prospective customer, we may use that information to contact the prospective customer, understand their requirements, assess the prospective relationship and provide information about our services.
Depending on the circumstances, Paysetra and the relevant partner may each be responsible for their own processing of personal information. We will only collect, use or share personal information through such arrangements where we have an appropriate lawful basis and in accordance with applicable data protection and electronic marketing requirements.
10. Transferring personal information outside the UK
Although Paysetra operates in the United Kingdom, some third-party service providers, financial institutions or other recipients may process personal information outside the United Kingdom.
Where we make a restricted transfer of personal information outside the UK, we will ensure that the transfer is made in accordance with applicable UK data protection law.
Depending on the circumstances, this may include:
- transferring personal information to a country or recipient covered by applicable UK adequacy regulations;
- using an appropriate UK International Data Transfer Agreement;
- using the UK Addendum to approved standard contractual clauses; or
- relying on another lawful transfer mechanism.
Where required, we will also consider and implement appropriate supplementary safeguards.
You may contact privacy@paysetra.co.uk if you would like further information about the safeguards applicable to relevant international transfers.
11. How long we keep your personal information
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including satisfying applicable legal, regulatory, compliance, accounting, reporting and record-keeping requirements.
The appropriate retention period depends on factors including:
- the nature and sensitivity of the information;
- the purposes for which it is processed;
- the nature and duration of our relationship with you;
- applicable legal, compliance and record-keeping requirements;
- the risk associated with retaining or deleting the information;
- whether a complaint, dispute, claim, investigation or legal proceeding is ongoing or reasonably anticipated; and
- our legitimate business and evidential requirements.
Information that may need to be retained after a customer relationship ends can include customer and account records, transaction records, identity and verification information, financial crime records, accounting records, complaints and legal correspondence.
At the end of the applicable retention period, personal information will be securely deleted, anonymised or otherwise disposed of as appropriate.
12. Automated processing and profiling
We may use technology to assist with activities such as:
- identity and verification checks;
- fraud prevention;
- sanctions screening;
- financial crime monitoring; and
- risk assessment.
The use of automated tools does not necessarily mean that a decision about you is made solely by automated means.
Where we make a decision based solely on automated processing that produces legal effects or similarly significantly affects you, we will comply with the requirements of applicable UK data protection law and provide any safeguards and information required by law.
Where applicable, these safeguards may include the ability to obtain human intervention, make representations about a decision and contest a decision.
13. Marketing communications and your choices
We may contact you about Paysetra products and services where legally permitted.
Marketing communications may be made by:
- email;
- telephone;
- SMS or other electronic communications; or
- post.
Where consent is required, we will obtain it before sending the relevant marketing communication.
Where the law permits us to send marketing communications without consent, we will comply with the conditions applicable to those communications.
You may ask us to stop sending marketing communications at any time by:
- using the unsubscribe mechanism included in a marketing email;
- contacting privacy@paysetra.co.uk; or
- otherwise telling us that you no longer wish to receive marketing communications.
Opting out of marketing does not prevent us from sending essential service, account, security, legal or transactional communications.
14. How we protect your personal information
We use appropriate technical and organisational measures designed to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
Depending on the circumstances, these measures may include:
- access controls;
- authentication and account security measures;
- encryption and other appropriate technical safeguards;
- system and security monitoring;
- staff training;
- secure systems and processes; and
- appropriate controls relating to service providers.
Access to personal information is limited to persons who have an appropriate business or legal need for access.
While we take appropriate measures to protect personal information, no method of transmitting or storing information can be guaranteed to be completely secure.
14.1 Data protection by design
Paysetra takes data protection and privacy into account when designing, implementing and reviewing relevant systems, processes and services.
We apply data protection by design and by default principles as appropriate, including considering:
- the personal information necessary for a particular purpose;
- data minimisation;
- access controls and information security;
- retention and deletion;
- transparency and lawful processing; and
- privacy and data protection risks.
We review appropriate technical and organisational measures having regard to the nature, scope, context and purposes of the processing and the risks to individuals.
15. Your data protection rights
Depending on the circumstances and subject to applicable legal conditions and exemptions, you may have the right to:
- be informed about how your personal information is used;
- request access to personal information we hold about you;
- ask us to correct inaccurate or incomplete personal information;
- ask us to erase personal information in certain circumstances;
- ask us to restrict processing in certain circumstances;
- receive certain personal information in a portable format and have it transferred to another organisation where applicable;
- object to processing based on legitimate interests in certain circumstances;
- object at any time to the use of your personal information for direct marketing;
- exercise applicable rights in relation to certain automated decisions; and
- withdraw consent at any time where we rely on consent.
These rights are not absolute and may not apply in every circumstance. For example, we may be required or permitted to retain certain information despite a request for erasure.
You will not normally be required to pay a fee to exercise your data protection rights. However, applicable law may permit us to charge a reasonable fee or refuse to act on a request in certain circumstances.
15.1 How to exercise your rights
To exercise a data protection right or ask a question about how we process your personal information, contact:
Email: privacy@paysetra.co.uk
Post:
Privacy Team
Paysetra Limited
45 Gresham Street
London
EC2V 7BG
United Kingdom
We may need to request information from you to verify your identity before acting on a request.
We will respond to requests within the time periods required by applicable data protection law.
16. How to make a privacy complaint
If you have concerns about how we have collected, used or otherwise handled your personal information, please contact us so that we can investigate your concerns.
Email: privacy@paysetra.co.uk
You also have the right to complain to the UK’s data protection regulator:
Information Commissioner’s Office (ICO)
Website: https://ico.org.uk
You do not have to contact us before making a complaint to the ICO, although we would welcome the opportunity to address your concerns.
17. Cookies and similar technologies
We use cookies and similar technologies on our website.
Some cookies are necessary for the operation of our website. Other cookies or similar technologies may require your consent before they are used.
Further information about the cookies and similar technologies we use, their purposes and how you can manage your preferences is provided in our separate Cookie Policy and, where applicable, through our cookie preference controls.
18. Children’s personal information
Paysetra’s services are intended for adults acting personally or in connection with businesses and organisations.
We do not knowingly seek to provide our services to children or collect personal information from children where this is not appropriate.
If you believe that a child has provided personal information to us in circumstances where they should not have done so, please contact privacy@paysetra.co.uk.
19. Third-party websites
Our website may contain links to websites operated by third parties.
Those third parties are responsible for their own privacy practices and website content. This Privacy Notice does not apply to their websites.
We encourage you to review the privacy information provided by third-party websites before providing personal information to them.
20. Changes to this Privacy Notice
We keep this Privacy Notice under regular review and will update it where necessary to reflect changes to:
- our services;
- how we process personal information;
- the technology we use;
- our service providers;
- applicable legislation or regulatory requirements; or
- our business operations.
The latest version will be published at paysetra.co.uk.
Where required or appropriate, we will also notify you of material changes by other means.
21. Contact us
If you have questions about this Privacy Notice or how Paysetra processes personal information, please contact us:
Paysetra Limited
Company number: 17365256
Registered office: 45 Gresham Street, London, EC2V 7BG, United Kingdom
Website: https://paysetra.co.uk
Email: privacy@paysetra.co.uk
Effective date: 14 August 2026