Company Number 14634647. Registered Office: 78 Tollington Road, London N7 6PD.
At FinFlo Payments, we are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and safeguard your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
FinFlo Payments is the data controller responsible for your personal data (referred to as “we”, “us”, or “our” in this policy).
2. Personal Data We Collect
We may collect, use, store, and transfer the following types of personal data:
- Identity Data (e.g. name, date of birth)
- Contact Data (e.g. email address, telephone number, business address)
- Financial Data (e.g. payment details, transaction data)
- Technical Data (e.g. IP address, browser type, usage data)
- Business Data (where applicable)
3. How We Collect Your Data
We collect data through:
- Direct interactions (forms, emails, phone calls)
- Automated technologies (cookies and analytics tools)
- Third parties involved in delivering our services
4. Lawful Bases for Processing
We process your personal data under the following lawful bases:
- Contractual necessity – to provide our services to you
- Legal obligation – to comply with regulatory requirements
- Legitimate interests – to operate and improve our business
- Consent – where required (e.g. marketing communications)
5. How We Use Your Data
We use your personal data to:
- Provide and manage payment services
- Process and facilitate transactions securely
- Verify your identity and prevent fraud
- Communicate with you regarding services or enquiries
- Comply with legal and regulatory obligations
- Improve our website and services
6. Sharing Your Data
We may share your personal data with:
- Regulated service providers and partners
- Payment infrastructure providers, including Currencycloud
- Regulatory authorities, where required
Currencycloud is a regulated electronic money institution that provides payment services infrastructure. Your data may be processed by Currencycloud in accordance with applicable financial regulations.
7. International Transfers
Where your data is transferred outside the UK, we ensure appropriate safeguards are in place, such as standard contractual clauses or transfers to jurisdictions deemed adequate by UK authorities.
8. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and regulatory requirements.
In accordance with regulatory obligations, including those of our partner Currencycloud, certain personal and transactional data will be retained for a minimum period of 5 years.
9. Data Security
We implement appropriate technical and organisational measures to protect your personal data from unauthorised access, loss, misuse, or disclosure.
10. Your Legal Rights
Under UK GDPR, you have the right to:
- Request access to your personal data
- Request correction of inaccurate or incomplete data
- Request erasure of your data (where applicable)
- Object to processing or request restriction
- Request transfer of your data (data portability)
- Withdraw consent at any time (where applicable)
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).
11. Cookies
Our website uses cookies to distinguish you from other users, improve your experience, and analyse site usage. You can manage cookie preferences through your browser settings.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.
13. Contact Us
If you have any questions about this Privacy Policy or your personal data, please contact us: operations@finflopayments.com
Last updated: March 2026