We respect your privacy and are committed to protecting the personal data of our customers, users, and partners. This Privacy Policy outlines how we collect, use, store, and protect your personal information when you use our services, including our prepaid card platform, mobile app, direct debit functionality, and merchant tools.By using our services, you agree to the terms of this Privacy Policy.

Who We Are

We are a UK-based financial technology company providing businesses with tools to manage payments, spending, and financial workflows. For the purposes of UK data protection law, we are the “data controller” of your personal data.

What Data We Collect

We may collect and process the following categories of data:

Business Information

• Company name, address, registration number
• VAT and tax-related details
• Billing and transaction information

Personal Information

• Name, job title, and contact details (email, phone)
• ID documents for verification (e.g., passport, driver’s license)
• Employment role and permissions within the company

Financial Data

• Bank account numbers (for direct debit)
• Card transaction history
• Spend limits and usage patterns

Technical & Usage Data

• Login and session activity
• IP address, device type, and browser
• App usage and feature interaction

How We Use Your Data

We use your personal and business data to:

• Create and manage business accounts and cardholders
• Authenticate users and prevent fraud
• Manage direct debit collections from customers
• Provide customer support and communicate updates
• Improve our platform and develop new features
• Comply with legal obligations (e.g., KYC/AML checks)

Legal Basis for Processing

We only process your data when legally allowed to do so. This includes:

• Performance of a contract (e.g., to deliver services you've requested)
• Legal obligation (e.g., complying with financial regulations)
• Legitimate interests (e.g., improving our services)
• Consent, where required (e.g., for marketing communications)

How We Share Your Data

We may share data with:

• Financial institutions and payment processors
• Identity verification and fraud prevention partners
• IT service providers and cloud storage providers
• Regulators, law enforcement, or legal advisors if legally required
• We never sell your personal data.

International Data Transfers

While we primarily store and process data within the UK or EEA, if data is transferred outside of these regions, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs).

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes we collected it for, including for legal, regulatory, and reporting requirements.

Your Rights

Under the UK GDPR, you have the right to:

• Access your data
• Correct inaccurate data
• Request erasure of your data
• Object to or restrict processing
• Withdraw consent (where applicable)
• Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise any of these rights, contact us at info@ubsidifinancial.com

Data Security

We use industry-standard encryption, secure data centers, and access controls to keep your data safe. We also monitor for suspicious activity and comply with PCI DSS and other relevant financial security standards.

Cookies

Our website and platform may use cookies to enhance your experience and analyse site usage. You can control cookie preferences in your browser settings. For more, see our [Cookie Policy].

Updates to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. We encourage you to review it regularly.

Contact Us

If you have any questions or concerns about this Privacy Policy or how your data is handled, you can contact us at:
Email: info@ubsidifinancial.com