Privacy Policy
Last Updated:
VistaPay Limited (“VistaPay”, “we”, “us”, or “our”) is committed to protecting and respecting your privacy. This Privacy & Marketing Policy explains how we collect, use, share, and protect your personal information when you use our website (www.vistapay.co.uk), products, and services (together, the “Services”), including how we handle marketing communications and feedback.
VistaPay Limited is a company registered in England and Wales under company number 16404116, with its registered office at 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ. For the purposes of the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018, VistaPay is the data controller of your personal data, unless stated otherwise.
1. Information We Collect
We may collect and process the following categories of personal information:
Information you provide directly – account registration details, business information, identity verification documents, bank details, and communications you send to us.
Information collected automatically – IP address, device information, browser data, cookies, and analytics.
Information from third parties – fraud prevention and credit reference agencies, acquiring banks, card schemes, regulators, and public sources such as Companies House or the Charity Commission.
2. How We Use Your Information
We process personal data for the following purposes:
To provide, operate, and improve our Services.
To verify identity and perform due diligence (KYC/AML checks).
To process transactions, settlements, and payouts.
To monitor, detect, and prevent fraud or unauthorised activity.
To comply with legal and regulatory obligations.
To provide customer support and respond to enquiries.
To send important notices about your account or changes to our Services.
To conduct analytics and service improvements.
To send marketing communications (where permitted by law or with your consent), including updates on new features, promotions, and relevant industry information.
To ask for feedback, testimonials, or participation in surveys, helping us improve our Services and understand customer satisfaction.
3. Legal Bases for Processing
We rely on the following legal grounds under the UK GDPR:
Contractual necessity: to provide our Services and fulfil our obligations.
Legal obligation: to comply with AML, KYC, tax, and financial regulations.
Legitimate interests: to improve Services, request feedback, ask for testimonials, and promote similar services to existing customers.
Consent: where required by law for marketing or where you have opted in (e.g., email newsletters, optional cookies).
4. Marketing Communications
We may use your information to:
Send you updates about new features, promotions, or industry insights relevant to VistaPay.
Invite you to provide feedback or testimonials.
Ask you to take part in surveys to improve our Services.
How to manage your preferences
You can opt out of marketing emails at any time by clicking the “unsubscribe” link included in every message.
You can also update your preferences or withdraw consent by contacting us at privacy@vistapay.co.uk.
Even if you opt out of marketing, we may still send you important service or account-related communications.
5. How We Share Information
We may share your personal data with:
Acquiring banks, card networks (e.g., Visa, Mastercard), and payment partners.
Fraud prevention and identity verification providers.
Professional advisors (lawyers, auditors, insurers).
Regulatory authorities, law enforcement, and courts when required.
Third-party service providers (e.g., hosting, analytics, communications).
We do not sell your personal information.
6. International Data Transfers
Some of our partners and service providers may be based outside the UK. Where data is transferred internationally, we ensure appropriate safeguards are in place (e.g., UK adequacy regulations, Standard Contractual Clauses).
7. Data Retention
We retain your personal information only as long as necessary for the purposes described above:
Transaction records and identity verification data: at least 5 years after account closure (as required by AML regulations).
Marketing data: until you withdraw consent or opt out.
8. Your Rights
Under the UK GDPR, you have the following rights:
Right of access – request a copy of your data.
Right to rectification – correct inaccurate or incomplete data.
Right to erasure – request deletion (subject to legal obligations).
Right to restrict processing – limit how your data is used.
Right to data portability – obtain and reuse your data.
Right to object – to processing based on legitimate interests or for marketing.
Right to withdraw consent – where consent was given.
To exercise these rights, contact us at: privacy@vistapay.co.uk.
9. Security
We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or disclosure. However, no online service is 100% secure, and you use the Services at your own risk.
10. Cookies
We use cookies and similar technologies to operate our Website, analyse traffic, and personalise your experience. For details, please see our Cookie Policy.
11. Children’s Privacy
Our Services are not directed to individuals under the age of 18, and we do not knowingly collect personal data from children.
12. Changes to this Policy
We may update this Privacy & Marketing Policy from time to time. Any changes will be posted on this page with an updated date. If significant changes are made, we will notify you via email or account notification.
13. Contact Us
If you have any questions about this Privacy & Marketing Policy or our data practices, please contact us:
VistaPay Limited
71-75 Shelton Street
Covent Garden
London
United Kingdom
WC2H 9JQ
Email: privacy@vistapay.co.uk
If you are unsatisfied with how we process your data, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO): www.ico.org.uk.