We are Payton Tech Ltd (company number: 14762156).
This privacy notice provides information on how we collect and process personal data as a data controller. It applies when businesses or individuals: (i) visit our website; (ii) set-up an account with Payton, (iii) login to their account; (iv) enter their bank account information; and (v) contact Payton (e.g. to request support). It also applies when Payton collects personal data for analytics purposes to improve its services.
Except as stated above, this privacy notice does not apply to the use of Payton services/tools:
(i) by individuals accessing employer-provided financial services (e.g. staff using ‘InstaPay’ to access their earned wages). You can find the applicable privacy notice via the applicable Payton app, or by asking your employer; or
(ii) by businesses where they act as data controller (e.g. when determining the staff members that can access earned wages via ‘InstaPay’).
If you have any questions about this notice, including any requests to exercise your legal rights, please contact us at support@getpayton.com or by writing to Payton Tech Ltd, 71-75 Shelton Street,Covent Garden, London, United Kingdom, WC2H 9JQ.
This policy was last updated on September 25, 2023.
This privacy notice provides information on how we collect and process personal data as a data controller. It applies when businesses or individuals: (i) visit our website; (ii) set-up an account with Payton, (iii) login to their account; (iv) enter their bank account information; and (v) contact Payton (e.g. to request support). It also applies when Payton collects personal data for analytics purposes to improve its services.
Except as stated above, this privacy notice does not apply to the use of Payton services/tools:
(i) by individuals accessing employer-provided financial services (e.g. staff using ‘InstaPay’ to access their earned wages). You can find the applicable privacy notice via the applicable Payton app, or by asking your employer; or
(ii) by businesses where they act as data controller (e.g. when determining the staff members that can access earned wages via ‘InstaPay’).
If you have any questions about this notice, including any requests to exercise your legal rights, please contact us at support@getpayton.com or by writing to Payton Tech Ltd, 71-75 Shelton Street,Covent Garden, London, United Kingdom, WC2H 9JQ.
This policy was last updated on September 25, 2023.
Data we collect
Type of data we collect
Purpose of processing
Lawful basis
Identification data:
name, email address,
and phone number.
name, email address,
and phone number.
We process this data to set up your account and verify your identity when logging in.
We process this data to make sure we can properly respond to your query.
Performance of a contract
Legitimate interest
Marketing data: name,
email address, IP
address.
email address, IP
address.
We process this data to provide you with necessary updates to our services.
We process this data to provide you with relevant marketing updates.
We process this data to improve our services.
Performance of a contract
Consent
You can unsubscribe from
our updates at any time by
clicking 'unsubscribe' on any email from us.
Legitimate interest
Cookies: information
about how you use our
website / app.
about how you use our
website / app.
website/appWe process this data to improve our website / app and to better understand how people use it. More detail on the information we collect and how we do this is set out in our Cookie Policy.
Legitimate interest
Financial data: bank
account details
account details
We process this data to send money to your bank account
Performance of a contract
Who do you share my data with?
• Business partners, suppliers and subcontractors for the performance of the contract we enter into with them or you.
• Regulators / Authorities / Enforcement Agencies if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms of use and other agreements; or to protect the rights, property, or safety of our clients or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection.
• Buyers of our business (prospective and actual) under our legitimate interest to ensure our business can be continued by the buyer, or other businesses we may merge with. We process your personal information for this purpose because we have a legitimate interest to ensure our business can be continued by the buyer. If you object to our use of your personal information in this way, the buyer of our business may not be able to provide services to you.
• Regulators / Authorities / Enforcement Agencies if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms of use and other agreements; or to protect the rights, property, or safety of our clients or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection.
• Buyers of our business (prospective and actual) under our legitimate interest to ensure our business can be continued by the buyer, or other businesses we may merge with. We process your personal information for this purpose because we have a legitimate interest to ensure our business can be continued by the buyer. If you object to our use of your personal information in this way, the buyer of our business may not be able to provide services to you.
Where do you store my data?
We store your data on third party servers which are based in the UK.
When working with third parties we may need to transfer your personal data outside of the UK and/or outside of the EU.
Whenever we transfer your personal information outside of the UK and/or the EU, we ensure it receives additional protection as required by law. To keep this policy as short and easy to understand as possible, we haven’t set out the specific circumstances when each of these protection measures are used. You can contact us using the details above for more information on this.
When working with third parties we may need to transfer your personal data outside of the UK and/or outside of the EU.
Whenever we transfer your personal information outside of the UK and/or the EU, we ensure it receives additional protection as required by law. To keep this policy as short and easy to understand as possible, we haven’t set out the specific circumstances when each of these protection measures are used. You can contact us using the details above for more information on this.
How long do you keep my data for?
We will only retain your personal information for as long as we need it unless we are required to keep it for longer to comply with our legal, accounting or regulatory requirements.
We delete your information 2 years after your account has become inactive.
In some circumstances, we may anonymise your personal data so that it can no longer be associated with you. We may use this anonymised information indefinitely without notifying you. We use this anonymised information to improve the way we work and our services.
We delete your information 2 years after your account has become inactive.
In some circumstances, we may anonymise your personal data so that it can no longer be associated with you. We may use this anonymised information indefinitely without notifying you. We use this anonymised information to improve the way we work and our services.
What are my rights under data protection law?
You have various other rights under applicable data protection laws, including the right to:
• access your personal data (also known as a “subject access request”);
• correct incomplete or inaccurate data we hold about you;
• ask us to erase the personal data we hold about you;
• ask us to restrict our handling of your personal data;
• ask us to transfer your personal data to a third party;
• object to how we are using your personal data; and
• withdraw your consent to us handling your personal data.
You also have the right to lodge a complaint with us or the Information Commissioner's Office, the supervisory authority for data protection issues in England and Wales. If you are based in the EU you can find your relevant supervisory authority here.
• access your personal data (also known as a “subject access request”);
• correct incomplete or inaccurate data we hold about you;
• ask us to erase the personal data we hold about you;
• ask us to restrict our handling of your personal data;
• ask us to transfer your personal data to a third party;
• object to how we are using your personal data; and
• withdraw your consent to us handling your personal data.
You also have the right to lodge a complaint with us or the Information Commissioner's Office, the supervisory authority for data protection issues in England and Wales. If you are based in the EU you can find your relevant supervisory authority here.
Please keep in mind that privacy law is complicated, and these rights will not always be available to you all of the time.
