Privacy Policy

Privacy Policy and data protection practices of Paydough Limited, including how we collect, use, and safeguard your personal information when using our services.

Where the words "we", "us" or "our" are used in this document, they are all references to Paydough Limited, a company incorporated in England and Wales (company number 13146801) with its registered office at 3 Back Lane, Godden Green, Sevenoaks, United Kingdom TN15 0JH.

This Privacy Policy explains how we collect, use, and protect personal data in connection with our Services.

This document is not part of your contract with us, but our processing of personal data is governed by applicable data protection laws, including the UK GDPR and EU GDPR.

Scope of this Privacy Policy

This Privacy Policy applies where Paydough acts as a data controller in relation to personal data.

In some circumstances, Paydough may act as a processor on behalf of a partner or customer. Where this is the case, that party is responsible for determining how your personal data is used, and their privacy policy will apply.

Paydough provides Services both:

directly to merchants and users
via partners, resellers, or white-label arrangements

Where you access our Services via a partner, that partner may be the primary data controller. We recommend reviewing their privacy policy.

How Do We Collect Information About You?

We collect information about you:

when you use our website or Services
when you register an account
when you interact with us
when transactions are processed
from third-party providers and public sources
from partners (where applicable)

What Information Do We Collect?

We collect information in three ways: directly from you, automatically through use of the Services, and from third parties.

Identity Data

Includes name, email address, telephone number and other identifying information.

Company Data

Includes business name, address, contact details, and business-related identifiers (such as VAT numbers).

Account Data

Includes login credentials, account configuration, and service-related information.

Customer and Transaction Data

Includes invoices, payment-related information, and interactions with your customers.

Reviews and Content Data

Includes review content, responses, and interactions processed through the Services.

Technical Data

Includes IP address, browser type, device information, and usage data.

Analytics Data

Includes information about how you use the Services.

Communications Data

Includes communications with us, including support queries and feedback.

How Do We Use Your Information?

We will only use your personal data where permitted by law.

Legal bases include:

performance of a contract
legitimate interests
compliance with legal obligations
consent (where required)

We use your data to:

Provide the Services

create and manage your account
deliver functionality
process transactions via third parties

Operate and Improve the Services

monitor usage
improve performance
develop new features

Communicate with You

provide support
send service notices
respond to enquiries

Ensure Security and Compliance

prevent fraud
comply with legal obligations

Marketing (where permitted)

send relevant communications
you may opt out at any time

Payments

Payments are processed by third-party payment providers.

Paydough does not hold or control funds
payment providers act as independent data controllers
they may process your data under their own terms

AI Processing

We use third-party providers to support AI functionality.

AI outputs may involve processing of content data
such providers act as processors on our behalf
outputs are generated automatically and may not be accurate

How Do We Protect Your Information?

We use appropriate technical and organisational measures to protect your personal data.

We use third-party providers for:

hosting and infrastructure
communications
analytics
payment processing

These providers are contractually required to protect your data.

International Transfers

Your data is primarily stored in the UK and European Economic Area.

Some providers may process data outside these regions, including in the United States and other jurisdictions.

Where this occurs, we implement safeguards such as:

Standard Contractual Clauses
adequacy decisions
equivalent safeguards under applicable law

We may share your data with:

Service Providers

To provide infrastructure, analytics, communications, and support.

Payment Providers

To process transactions and comply with financial regulations.

Partners

Where you access Services via a partner, we may share relevant data with them.

Authorities

Where required by law, regulation, or legal process.

We do not sell personal data.

Data Retention

We retain personal data only as long as necessary to fulfil the purposes for which it was collected.

Retention is based on:

legal obligations
contractual requirements
legitimate interests

Typical retention periods:

account data: duration of relationship + up to 6 years
transaction data: as required by law
analytics data: anonymised where possible

We may retain data longer where required for:

legal compliance
fraud prevention
dispute resolution

Where possible, data is anonymised.

Your Rights

You have the right to:

access your personal data
correct inaccuracies
request deletion
restrict processing
object to processing
data portability

The right to erasure is not absolute and may be overridden where retention is required by law or necessary for legal claims.

You may exercise these rights by contacting support@paydough.io.