Privacy Policy

This policy explains how PayNRoute ("we", "us", "our") processes personal data about visitors to this website and people who contact us. It is written to meet the requirements of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Where the EU General Data Protection Regulation (EU GDPR) applies to our processing of data about individuals in the European Union, we apply equivalent standards.

This policy covers this website only. Where we process personal data on behalf of our institutional clients when providing our platform services, we act as a processor under written agreements with those clients, and their own privacy notices apply.

The controller responsible for your personal data is PAYNROUTE LTD ("PayNRoute"), a private limited company registered in England and Wales under company number 16818805.

• Registered office: 124–128 City Road, London, England, EC1V 2NX
• Email: contact@paynroute.com

If you have any questions about this policy or how we handle your personal data, please contact us at the email address above.

We collect only the data we need:

• Contact form enquiries: your name, work email address, company, country, the topic of your enquiry, your message and whether you agreed to receive marketing communications. The form on this website prepares an email in your own email application; we receive the information when you send that email.
• Emails and correspondence: the content of emails you send to us and our replies, together with any contact details you include.
• Technical data: when you visit the site, our website hosting provider automatically processes data such as your IP address, browser type, device and operating system, referring page, and the date and time of your request, in server logs used to deliver and secure the site.
• Preference storage: your language choice and your cookie consent choice are stored in your browser's local storage. These stay on your device and are not sent to us.
• Optional cookies: analytics or marketing cookies would be used only if you give consent. At present this website does not set any analytics or marketing cookies. See our Cookie Policy.

We do not ask for special category data (for example health, biometric or religious information) through this website. Please do not include it in your messages.

Where we rely on legitimate interests, we have balanced our interests against your rights and freedoms. You can ask us for more information about this assessment.

We do not sell your personal data. We share it only where necessary with:

• Our website hosting provider, which hosts this site and processes technical data in server logs;
• Our email service provider, which hosts our mailboxes and processes the emails you send us;
• Our web font provider, which delivers the fonts used on this site and receives your IP address when your browser requests them (see our Cookie Policy);
• Professional advisers, such as lawyers, accountants and auditors, under duties of confidentiality;
• Authorities, regulators and courts, where we are required to by law or need to establish, exercise or defend legal claims;
• a buyer or successor in the event of a merger, acquisition or reorganisation, subject to equivalent protections.

Our service providers act as processors on our instructions, under written contracts that require them to keep your data secure and confidential.

Some of our service providers may process personal data outside the United Kingdom. Where we transfer personal data outside the UK, we make sure it is protected by:

• UK adequacy regulations covering the destination country; or
• the International Data Transfer Agreement (IDTA) or the International Data Transfer Addendum to the EU Standard Contractual Clauses (SCCs) issued by the ICO, together with a transfer risk assessment and supplementary measures where needed.

For transfers of data about individuals in the EU, we rely on EU adequacy decisions or the EU SCCs. You can ask us for details of the safeguards in place.

We keep personal data only for as long as necessary for the purposes described above:

• Enquiries and correspondence: generally up to 24 months after our last contact with you, unless a business relationship follows, in which case the retention periods for the relevant contract records apply;
• Marketing preferences: until you withdraw consent or unsubscribe, after which we keep a suppression record so that we do not contact you again;
• Server logs: generally for a short period set by our hosting provider, normally no longer than needed for security and troubleshooting;
• Preference storage: remains in your browser until you clear it or change your choices.

We may keep data for longer where the law requires it or where it is needed for legal claims.

We use appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS/TLS) to this website, access controls limiting who can see enquiries, and contractual commitments from our service providers. No transmission over the internet is completely secure, so please avoid sending sensitive information by email. More about our approach is available in our Trust Center.

Under data protection law you have the right to:

• Access: obtain a copy of your personal data;
• Rectification: have inaccurate or incomplete data corrected;
• Erasure: ask us to delete your data in certain circumstances;
• Restriction: ask us to limit how we use your data;
• Portability: receive data you provided to us in a structured, machine-readable format, or have it transferred, where processing is based on consent or contract and carried out by automated means;
• Objection: object to processing based on legitimate interests, and to direct marketing at any time;
• Withdraw consent: at any time, where we rely on consent, without affecting processing carried out before withdrawal.

To exercise a right, email contact@paynroute.com. We may need to verify your identity. We will respond within one month; this may be extended by up to two further months for complex or numerous requests, and we will tell you if so. Exercising your rights is normally free of charge. You can change your cookie choices at any time using the "Cookie settings" link in the footer.

If you have concerns about how we handle your personal data, please contact us first so that we can try to resolve them. You also have the right to complain to the UK supervisory authority, the Information Commissioner's Office (ICO): ico.org.uk, telephone 0303 123 1113.

If you are in the European Union or European Economic Area, the EU GDPR may also apply, and you may complain to the data protection supervisory authority in the country where you live or work, or where the alleged infringement took place.

This website and our services are intended for businesses and professionals. They are not directed at anyone under 18, and we do not knowingly collect personal data from children. If you believe a child has sent us personal data, please contact us and we will delete it.

We do not carry out automated decision-making, including profiling, that produces legal or similarly significant effects on you through this website.

This website may link to third-party websites, such as those of card schemes or regulators. We are not responsible for their privacy practices, and we encourage you to read their privacy notices.

We may update this policy from time to time. The "Last updated" date at the top shows when it was last revised. Where changes are significant, we will take reasonable steps to bring them to your attention.

For questions about this policy or to exercise your rights, contact PAYNROUTE LTD at contact@paynroute.com or write to us at our registered office, 124–128 City Road, London, England, EC1V 2NX. You can also use our contact page.