Privacy Policy

1. Overview

Britain Payment Services Limited ("we," "us," or "our") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, share, and protect information about you when you use our payment processing services, visit our website, or interact with us.

We are a data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Our registered office is located at 131A Cathcart St, Birkenhead CH41 3JY, United Kingdom.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, phone number, business information, and other details when you create an account
• Payment Information: Bank account details, payment card information (processed securely and in compliance with PCI DSS)
• Transaction Data: Details of payments processed through our services
• Identity Verification: Documents and information required for KYC (Know Your Customer) and AML (Anti-Money Laundering) compliance
• Communication Data: Information from your communications with us, including support requests and feedback

2.2 Information We Collect Automatically

• Technical Information: IP address, browser type, operating system, device identifiers
• Usage Information: Pages visited, time spent on our website, click-through rates
• Location Information: General location based on IP address for fraud prevention
• Cookies and Similar Technologies: As described in our Cookie Policy

2.3 Information from Third Parties

• Credit Reference Agencies: Credit checks and identity verification
• Fraud Prevention Services: Information to help prevent fraud and money laundering
• Business Partners: Information from authorized business partners and integrations

3. How We Use Your Information

We use your personal information for the following purposes:

3.1 Service Provision

• Processing payments and managing transactions
• Maintaining and managing your account
• Providing customer support and responding to inquiries
• Sending service-related communications and updates

3.2 Legal and Regulatory Compliance

• Compliance with KYC and AML regulations
• Fraud prevention and detection
• Reporting to regulatory authorities as required
• Responding to legal requests and court orders

3.3 Business Operations

• Risk assessment and underwriting
• Improving our services and developing new features
• Analytics and business intelligence
• Marketing communications (with your consent)

4. Legal Basis for Processing

We process your personal information based on the following legal grounds:

• Contract Performance: Processing necessary to perform our payment services contract with you
• Legal Obligation: Processing required to comply with legal and regulatory obligations
• Legitimate Interests: Processing necessary for our legitimate business interests, such as fraud prevention
• Consent: Where you have provided specific consent for certain processing activities
• Vital Interests: In rare cases, to protect someone's life or physical safety

5. Sharing Your Information

We may share your personal information with:

5.1 Service Providers

• Payment processors and banking partners
• Cloud infrastructure providers
• Customer support and communication services
• Identity verification and fraud prevention services

5.2 Legal and Regulatory Authorities

• Financial Conduct Authority (FCA)
• HM Revenue and Customs (HMRC)
• National Crime Agency (NCA)
• Court orders and legal process

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to appropriate safeguards.

6. Data Security

We implement comprehensive security measures to protect your personal information:

• Encryption: All sensitive data is encrypted in transit and at rest using industry-standard encryption
• Access Controls: Strict access controls and authentication procedures
• PCI DSS Compliance: Full compliance with Payment Card Industry Data Security Standards
• Regular Security Testing: Ongoing vulnerability assessments and penetration testing
• Incident Response: Comprehensive incident response procedures and monitoring

7. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services to you
• Comply with legal and regulatory requirements
• Resolve disputes and enforce agreements
• Prevent fraud and maintain security

Specific retention periods include:

• Transaction Records: 6 years (as required by UK financial regulations)
• KYC/AML Documents: 5 years after account closure
• Marketing Communications: Until you withdraw consent
• Website Usage Data: 24 months

8. Your Rights

Under UK data protection law, you have the following rights:

• Right of Access: Request copies of your personal information
• Right to Rectification: Correct inaccurate or incomplete information
• Right to Erasure: Request deletion of your information (subject to legal requirements)
• Right to Restrict Processing: Limit how we use your information
• Right to Data Portability: Receive your information in a structured format
• Right to Object: Object to certain types of processing
• Rights Related to Automated Decision-Making: Protection from purely automated decisions

To exercise these rights, contact us at [email protected]. We will respond within one month of receiving your request.

9. Cookies and Tracking

We use cookies and similar technologies to:

• Ensure our website functions properly
• Remember your preferences and settings
• Analyze website usage and performance
• Prevent fraud and enhance security

For detailed information about our use of cookies, please see our Cookie Policy.

10. International Data Transfers

We primarily process data within the UK and EU. When we transfer data internationally, we ensure appropriate safeguards are in place:

• Standard Contractual Clauses approved by the UK ICO
• Adequacy decisions by UK authorities
• Certification schemes and codes of conduct

11. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of material changes by:

• Posting the updated policy on our website
• Sending notification to your registered email address
• Providing notice through our services

Your continued use of our services after the effective date of changes constitutes acceptance of the updated policy.

13. Contact Information