Privacy Policy

Last updated on May 20th, 2020

Pay Set Limited ("Payset", "we," "our" or "us") is committed to protecting your privacy. The following privacy policy details how Payset collects, processes, uses and protects your personal information when you visit or login to our website www.payset.io, it describes your choices regarding use, access and correction of your personal information, and applies to all persons using our services, website and/or mobile application. Use of our services, website and/or mobile application constitutes consent to the data collection, processing, use and security practices detailed herein.

We periodically post changes to our privacy policy. We therefore recommend that you consult this page frequently or at any time should concerns arise. If any significant changes are made, as is required by law, we will notify all of our website users. Furthermore, if changes are significant, we will provide a more prominent notice (including, for certain services, email notification of privacy policy changes).

Please read the privacy policy set out herein carefully before using the services provided by pay set. By using or accessing the website www.payset.io or the mobile application or the services offered by pay set, you agree that this privacy policy shall apply to it. If you do not agree to any of the provisions of this privacy policy, you should immediately cease using the website, the mobile application and the services.

1. Purpose and Consent

1.2 This privacy policy has been developed for purposes of compliance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data ("GDPR") and the Data Protection Act 2018 ("DPA"), including any amendments or replacements to them.

1.3 Without information about you, we may not be able to provide you with the services or the support you request or require. Some of the information we obtain is collected to comply with applicable laws and regulations, including anti-money laundering laws.

1.3.1 This privacy policy explains:

1.3.2 Types of information we collect about you;

1.3.3 How we use information about you;

1.3.4 Types of information we disclose to third parties and the types of such third parties;

1.3.5 How we protect your personally identifiable information; and

1.3.6 How you may instruct us not to disclose certain information about you which we are otherwise permitted to disclose by law.

1.4 By applying or signing up for an account with Payset, you authorize and consent to our obtaining from, and disclosing to, third parties any information about you in connection with identity or account verification, fraud detection, or collection procedure, or as may otherwise be required by applicable law.

2. Information we collect about you

2.1 We collect the following information about you:

2.1.1 Identification information, such as your name, email address, home address, phone number and date of birth, along with identification details of documents confirming your identification and address;

2.1.2 Financial information, including without limitation bank account and payment card numbers, bank statements, etc.;

2.1.3 Other information you provide when you participate in contests or promotions offered by us or our partners, respond to our surveys or otherwise communicate with us;

2.1.4 Information about when and where the transactions occur, the names of the transacting parties, a description of the transactions, the payment or transfer amounts, billing and shipping information, and the devices and payment methods used to complete the transactions;

2.1.5 Information about the location of your device and some other device specifics, including your hardware model, operating system and version, unique device identifier, mobile network information, and information about the device's interaction with our services. We may also identify other software running on the device for anti-fraud and malware-prevention purposes (but will not collect any content from such software);

2.1.6 Information about how you use our services, including your access time, browser type and language, and IP address;

2.1.7 Information about you from third parties, including third-party verification services, credit bureaus, mailing list providers and publicly available sources (where lawful, this information may include your government-issued identification number);

2.1.8 Information collected by cookies and web beacons, including using web beacons and sending cookies to your device (for more information, please refer to our Cookies Policy at https://payset.io/cookies-policy);

2.1.9 Pictures of your identification card, utility bills and other documents as may be requested by us and provided by you;

2.1.10 Employment information; and

2.1.11 Information contained in or relating to any communication that you send to us with or without our request, including without limitation the communication content and metadata associated with the communication.

2.2 We may collect the Information in the course of your signing up for an account with Payset, or in the course of our identity or account verification process, or in the course of your use of your account with us or our services.

3. Use of Information

3.1 We do not sell, exchange or give to any other person your information, whether public or private, for any reason whatsoever, without your consent, other than for the express purpose of providing our services to you.

3.2 We collect, process and use information about you for the following purposes:

3.2.1 To provide the services to you, including without limitation to process your transactions;

3.2.2 to improve, personalize and facilitate your use of our services, e.g. when you sign up for an account with Payset, we may associate certain information with your new account, such as information about prior transactions you made using our services;

3.2.3 to measure, customize, and enhance our services, including the design, content, and functionality of our mobile application and website, or to track and analyze trends and usage in connection with our services;

3.2.4 To analyze the use of our services;

3.2.5 To improve our customer service;

3.2.6 To send periodic emails, news and information, or to conduct surveys and collect feedback, about our services and to communicate with you about products, services, contests, promotions, discounts, incentives and rewards offered by us and our partners, based on your communication preferences and applicable law, and the email address you provided for such communications;

3.2.7 To administer our internal information processing and other IT systems;

3.2.8 To operate our website and services, including to ensure their security;

3.2.9 To maintain back-ups of our databases and to keep the records in accordance with our internal policies and procedures and the applicable law;

3.2.10 To communicate with you, including without limitation to deliver the information and support you request, including technical notices, security alerts, and support and administrative messages, to resolve disputes, collect fees, and provide assistance for problems with our services or your account with us.

3.2.11 To establish, exercise or defend legal claims, whether in court proceedings or in an administrative or out-of-court procedure for the protection and assertion of our legal rights, your legal rights and the legal rights of others;

3.2.12 To obtain or maintain insurance coverage, to manage risks, or obtain professional advice;

3.2.13 To comply with our obligations either required by law or by written agreements with third parties;

3.2.14 To display transactions history;

3.2.15 To develop new products and services;

3.2.16 To protect our rights or property, or the security or integrity of our services;

3.2.17 To enforce the terms of our Terms and Conditions or other applicable agreements or policies;

3.2.18 To verify your identity (e.g. some of the government-issued identification numbers we collect are used for this purpose);

3.2.19 To investigate, detect, and prevent fraud, security breaches and other potentially prohibited or illegal activities; and

3.2.20 To comply with any applicable law, regulation or legal process.

3.3 We may use third-party service providers to, process and store your information in the United Kingdom and other countries in our sole discretion.

4. Disclosure of your information to third parties

4.1 Any third party that receives or has access to the information listed in Section 3 of this Privacy Policy is required to protect such information and use it only to carry out the services they are performing for you or for Pay Set, unless otherwise required or permitted by law. We shall ensure any such third party is aware of our obligations under this privacy policy and we enter into contracts with such third parties by which they are bound by terms no less protective of any information disclosed to them than the obligations we undertake to you under this privacy policy or which are imposed on us under applicable data protection laws.

4.2 We may disclose any and all information specified in Section 3.2 of this privacy policy to:

4.2.1 our suppliers or subcontractors as reasonably necessary for providing our services to you;

4.2.2 our payment services providers only to the extent necessary for the purposes of processing your payments, refunding such payments and dealing with complaints and queries relating to such payments and refunds;

4.2.3 our partners, governmental bodies and regulatory authorities, judicial bodies, our associates, agents, attorneys or other representatives for compliance with legal obligations to which we are subject or for the establishment, exercise or defense of legal claims, whether in court proceedings or in an administrative or out-of-court procedure;

4.2.4 our group companies, including our affiliates, for rendering our services, compliance with applicable laws and improving the quality of our services;

4.2.5 our business partners that run advertising campaigns, contests, special offers, or other events or activities in connection with our services;

4.2.6 other users of our services with whom you interact through your own use of our services, e.g. we may share information when you make a transaction.

5. International transfer of information

5.1 Without prejudice to Section 4 of this privacy policy, you should be aware that we may transfer your information outside EEA, as shall be designated herein from time to time, solely for the purposes of providing our services to you and only on as need to know basis. Each transfer will be protected by appropriate safeguards of the relevant legally binding obligations of the recipient to protect and handle your information in accordance with this privacy policy, GDPR and DPA.

5.2 As an international company with various global partnerships, Payset interacts with certain third-party service providers, such as payment gateways and other payment transaction processors, which you should be aware that they may be located, or have facilities that are located, outside EEA in a different jurisdiction than either you or us. Therefore, if you elect to proceed with a transaction that involves the services of a third-party service provider, then your personal information may become subject to the laws of the jurisdiction(s) in which that service provider or its facilities are located, e.g. if you are located in the United Kingdom and your transaction is processed by a payment gateway located in Australia, then your personal information used in completing that transaction may be subject to disclosure under Australian legislation. For these providers, we recommend that you read their privacy policies, so you can understand the manner in which your personal information will be handled by these providers.

6. Third-party advertising and analytics

6.1. We may allow third-party service providers to deliver content and advertisements in connection with our services and to provide anonymous site metrics and other analytics services. These third parties may use cookies, web beacons and other technologies to collect information, such as your IP address, identifiers associated with your device, other applications on your device, the browsers you use to access our services, webpages viewed, time spent on webpages, links clicked, and conversion information (e.g. transactions entered into). This information may be used by us and third-party service providers on our behalf to analyze and track usage of our services, determine the popularity of certain content, deliver advertising and content targeted to your interests, and better understand how you use our services.

6.2 The third-party service providers that we engage are bound by confidentiality obligations and applicable laws with respect to their use and collection of your information.

6.3 This privacy policy does not apply to, and we are not responsible for, third-party cookies, web beacons, or other tracking technologies, which are covered by such third parties' privacy policies. For more information, we encourage you to check the privacy policies of these third parties to learn about their privacy practices.

7. Your rights to your information

7.1 You have the following rights with respect to your information:

7.1.1 Right to Confirmation - you have the right to confirm that we process your information and to access such information together with the details of the purposes of the processing, the categories of information concerned and the recipients of your information. You have a right to request and receive a copy of your information that we have subject to compliance with the applicable laws. You can access your information by logging into your account with Pay Set and checking the relevant section in the account interface.

7.1.2 Right to Rectification - you have the right to rectify any inaccurate information about you and to complete any incomplete information about you.

7.1.3 Right to Erasure - you have the right to demand erasure of your information with us if:

7.1.3.1 the information is no longer necessary in relation to the purposes for which it was collected or otherwise processed;

7.1.3.2 you withdraw consent to consent-based processing;

7.1.3.3 you object to the processing of your information under the applicable law;

7.1.3.4 the processing of your information is done for direct marketing purposes only; and

7.1.3.5 your information has been unlawfully processed. We may refuse your demand if your Information is processed for exercising the right of freedom of expression and information, compliance with a legal obligation or establishment, exercise or defence of legal claims.

7.1.4 Right to Restrict Processing - you have the right to restrict processing of your information if:

7.1.4.1 you contest the accuracy of the information;

7.1.4.2 processing is unlawful, but you oppose erasure;

7.1.4.3 we no longer need the information for the purposes of our processing, but you require information for the establishment, exercise or defense of legal claims; and

7.1.4.4 you have objected to processing, pending the verification of that objection, in which case we may continue to store your information, but we will only otherwise process it: (i) with your consent; (ii) for the establishment, exercise or defense of legal claims; (iii) for the protection of the rights of another natural or legal person; or (iv) for reasons of important public interest.

7.1.5 Right to Object to Processing - you have the right to object to our processing of your information by any reason to the extent that the legal basis for the processing is the performance of a task carried out in the public interest or in the exercise of any official authority vested in us; or the purposes of the legitimate interests pursued by us or by a third party. Please note, that we will cease processing your information if such processing was done for direct marketing purposes. Otherwise, we may disregard your objection if we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is for the establishment, exercise or defense of legal claims.

7.1.6 Data Portability - to the extent that:

7.1.6.1 the legal basis for our processing of your information is your consent, a necessity to perform a contract to which you are a party, or to satisfy your request prior to entering into a contract,

7.1.6.2 such processing is carried out by automated means, you have the right to receive your information from us in a structured, commonly used and machine-readable format. However, we may refuse to provide you with your information if it would adversely affect the rights and freedoms of third parties.

7.1.7 Right to Complain - if you consider that our processing of your information violates applicable laws and regulations, you have a legal right to file a complaint with the U.K. Information Commissioner by following the instructions provided at https://ico.org.uk/concerns/ or otherwise as may be convenient for you.

7.1.8 Right to Withdraw Consent - you may withdraw your consent to us processing your information at any time, however such withdrawal will not affect the lawfulness of processing of your information before it.

7.2 you may exercise any of those rights by sending an email at dpo@payset.io or by using technical tools and features of the interface of your account with Pay Set. Please note that some of your rights related to your information are quite complex, and you are advised to read the relevant laws and guidance from the regulatory authorities for a full explanation of these rights.

8. Security of your information

8.1 We take reasonable measures, including administrative, technical, and physical safeguards, to protect your information from loss, theft, misuse and unauthorized access, disclosure, alteration, and destruction. We hold information about you at our own premises and with the assistance of third-party service providers. We restrict access to personal information to our employees, contractors and agents who need to know that information in order to transmit, store or process it, who are subject to contractual confidentiality obligations consistent with this privacy policy, and who may be disciplined or terminated if they fail to meet these obligations.

8.2 Our third-party service providers store and transmit personal information in compliance with this privacy policy and other appropriate confidentiality and security measures. Nevertheless, we cannot guarantee that unauthorized third parties will never be able to defeat our security measures or use your personal information for improper purposes.

8.3 In the event that any information in our possession or under our control is compromised as a result of a security breach, we will take reasonable steps to investigate the situation and, where appropriate, notify those individuals whose information may have been compromised and take other steps in accordance with applicable laws or regulations.

9. Opt out and Deactivation options

9.1 If you wish to deactivate your account with Payset, you may do so by contacting our customer service. We may retain archived copies of information about you and any transactions or services in which you may have participated for a period of time that is consistent with applicable law, or as we believe is reasonably necessary to comply with applicable law, regulation, or legal process, to prevent fraud, to collect fees owed, to resolve disputes, to address problems with our services, to assist with investigations, to enforce our Terms and Conditions or other applicable agreements or policies, or to take any other actions consistent with applicable law.

9.2 If you do not consent to collection of the device location information, you may be unable to use our corresponding services. You can stop our collection of location information at any time by changing the preferences on your mobile device. If you do so, some of our mobile applications will no longer function. You also may stop our collection of location information via mobile application by following the standard uninstall process to remove our mobile applications from your device.

9.3 Some of the cookies used are set by us and others are set by third parties who deliver services on our behalf. Most web and mobile device browsers are set to automatically accept cookies by default. However, you can change your browser settings to prevent automatic acceptance of cookies or to notify you each time a cookie is set.

9.4 you may opt out of receiving promotional messages from us by following the instructions in those messages or by changing your notification settings by logging into your account with us. If you decide to opt out, we may still send you non-promotional communications, such as digital receipts and messages about your account activities.

10. Data retention policy

10.1 We will hold your information for 5 (five) years from the date of your last use of our services unless otherwise required by the applicable law. We do not retain or store your bank card or bank account information, unless otherwise required by the applicable law.

10.2 Notwithstanding Section 10.1, we may retain your information where such retention is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person.

11. Data protection officer and our contact details

11.1 Pay Set Limited is a private limited company, incorporated in England and Wales under company number 11529161 and a licensed Electronic Money Institution (FCA reference number 900920).

11.2 Any questions or concerns regarding this privacy policy or your rights related to protection of your personal information may be sent via email at dpo@payset.io or at the following address: 23 Berkeley Square, London W1J 7HE.

11.3 In order to ensure effective and legal handling of our customers' information, we have appointed a Data Protection Officer. You can reach our Data Protection Officer by sending an email at dpo@payset.io

12. Amendments

12.1 We reserve the right to modify, alter or otherwise update this privacy policy at any time, by posting such changed, updated or modified policy on our website.

12.2 Should you not wish to accept those changes, you should notify us and we will take that as an instruction to close your account held with us.

12.3 Should we not hear from you, your continued use of our services constitutes your acceptance of any amendment of this privacy policy. In the event that you close your account following rejection of the changes, we will still hold your personal data on file, to adhere to applicable law.

PLEASE PRINT OFF AND RETAIN A HARD COPY OF THE PRIVACY POLICY FOR YOUR RECORDS.