Privacy Policy

Who we are

Paystone Labs Ltd is the data controller for personal data described in this Policy. Registered address: 124 City Road, London EC1V 2NX, United Kingdom. Contact: [email protected], +44 20 3808 7654.

Data we collect

We collect information you provide directly, such as name, email, phone, company, and messages submitted through forms. We also collect limited technical data when you use our site or products, including IP address, device and browser type, pages viewed, timestamps, and referral information. If you become a customer, we may process transactional details required to provide services, such as masked card data, tokens, payment outcomes, and risk signals. We do not collect sensitive categories unless required by law and only with safeguards.

How we use data

We use personal data to provide and improve services, respond to requests, manage accounts, process payments, prevent fraud, and meet legal obligations. We analyze aggregated and pseudonymized metrics to improve performance and reliability. With your permission, we may send product updates and research. You can opt out at any time using unsubscribe links or by contacting us.

Legal bases

Our processing relies on one or more of the following legal bases: contract performance, legitimate interests in running and improving our services, legal obligations, and consent where required for marketing or certain cookies. When we rely on legitimate interests, we balance our interests with your rights and implement safeguards like access controls and data minimization.

Sharing and disclosures

We share data with trusted providers that help deliver our services, such as cloud hosting, analytics, customer support tools, and payment partners. These providers process data under written agreements and follow security requirements. We may disclose information if required by law or to protect rights, safety, or the integrity of our systems. In case of a business transaction, like a merger or asset sale, we will ensure safeguards and notify you where required.

International transfers

Where data moves outside the UK or EEA, we use appropriate safeguards like the UK International Data Transfer Addendum, Standard Contractual Clauses, or an adequacy decision. We monitor changes in law and update our measures as needed to keep transfers lawful and secure.

Data retention

We keep personal data only as long as necessary for the purposes described in this Policy, including legal, accounting, and reporting needs. Retention periods depend on the type of data and regulatory rules. When data is no longer needed, we delete or irreversibly anonymize it according to our retention schedule.

Your rights

Under the UK GDPR and similar laws, you may have rights to access, correct, delete, restrict, or object to processing, and to data portability. You can also withdraw consent where we rely on consent. To exercise rights, contact [email protected]. We will respond within applicable timelines. You can raise concerns with the UK Information Commissioner’s Office, but we encourage you to contact us first so we can help.

Security

We use technical and organizational measures to protect data, including encryption in transit and at rest, tokenization of sensitive fields, access controls, logging, and regular testing. No method of transmission is perfectly secure, so we continually improve protections and limit the data we collect to what is necessary.

Cookies and similar technologies

We use essential cookies for site functionality and optional analytics cookies to understand usage. You can accept or reject non‑essential cookies using the cookie controls on our site and adjust preferences in your browser. For details about categories, purposes, and retention, see the Cookies section below and our notices in the cookie interface.

Children’s data

Our services are directed to business users. We do not knowingly collect personal data from children. If you believe a child provided information, contact us so we can delete it promptly.

Third‑party links

Our website may link to third‑party resources. Those sites operate under their own policies. We are not responsible for their content or practices. Review their privacy information before sharing data.

Changes to this Policy

We may update this Policy to reflect legal, technical, or business changes. The effective date will be updated at the top of this page. Significant changes will be communicated through the site or by email where appropriate.

Contact

If you have questions or requests about privacy, contact Paystone Labs Ltd at [email protected] or write to: Paystone Labs Ltd, 124 City Road, London EC1V 2NX, United Kingdom. Phone: +44 20 3808 7654.