Privacy Centre

We provide payment services and deliver key features of our service to the merchants you pay using GoCardless, such as displaying transaction history and payment status. 

We check that you own the bank account you enter for our services and that you have the funds to cover the transaction. We may block transactions we believe to be fraudulent or unauthorised, or that violate our terms. 

When you set up a payment, we may ask you to grant us access to personal data directly from your bank account so that we can verify that you are the owner of the account. This data is limited to your bank account number, name and address, and we access it only with your consent. 

If our fraud alerts or those of our banking partner flag a potentially fraudulent account, payment or refund, we may need to confirm your identity. We use publicly available data or identity verification services from agencies like Onfido or Lexis Nexis. After this, we will either clear the alert or stop the payment or refund.

Technology helps us make automatic decisions about potential fraud using our services.

We calculate whether a payment is likely to clear and use that calculation to make decisions about how we provide our services. For example, we might ask for a different payment method or change the date we withdraw the payment from your bank, or we might advance payments to your merchant to process their transactions more quickly.

Technology helps us make automatic decisions about how and when to process transactions.

We send you messages that are necessary for our services, like payment notification emails. If you need help, we communicate with you to provide customer support. 

We don’t market to consumers who make payments using our services, and we don’t sell personal data.

We analyse how people engage with our site and services so that we can improve our services and develop new products or features. For example, we might use personal data and other observations to make our payment pages easier to use or our machine learning models more accurate.

Where we believe it is necessary to protect our legal rights and interests and the interests of others, we use personal data in connection with legal claims, compliance, regulatory and audit functions, and in connection with the acquisition, merger or sale of a business.

Under exceptional circumstances, we may be required by law to provide personal data to law enforcement agencies, courts or others in connection with claims and other litigation.