Effective date: January 8, 2026
Company: PAYMISSION LTD ("PayMission", "we", "us", "our")
Registered address: Unit A, 82 James Carter Road, Mildenhall, IP28 7DE, United Kingdom
Contact: team@paymission.tech
PayMission takes privacy seriously. This Privacy Policy explains how we collect, use, disclose and protect personal data when you visit our Website or use our Services. We act as a data controller for the personal data we collect from our Clients and prospective Clients.
Identity and contact data: name, email address, phone number, business name, registered office or trading address.
Business and verification data: company documents, ownership details, directors’ or beneficial owners’ identification documents, proof of address and business licences (for AML/KYC purposes).
Transaction data: transaction amounts, currency, payment methods, dates, merchant account identifiers, chargeback and refund information.
Risk and fraud data: risk scores, risk management notes, transaction fraud alerts, device and behavioural indicators.
Technical data: IP address, browser type, device identifiers, access dates/times, cookies and similar technologies.
Communications data: records of emails, chats and other communications between you and us.
We process personal data for the following purposes and legal bases:
Contractual necessity: to provide the Services, set up merchant accounts, process transactions, manage settlements and provide customer support. Without this data we cannot deliver Services.
Legal obligations: to comply with laws and regulations, including anti‑money‑laundering and counter‑terrorism financing obligations, sanctions screening, tax laws, card scheme rules and financial reporting obligations.
Legitimate interests: to evaluate and mitigate risk, improve our Services, prevent fraud, protect our business and monitor the performance of the payment processing platform. Where legitimate interests apply, we balance them with data subject rights.
Consent: for optional marketing communications or where we use cookies that are not strictly necessary. You may withdraw consent at any time.
We use cookies, web beacons and similar technologies to remember your preferences, analyse how visitors use our Website and measure the effectiveness of marketing campaigns. You can control cookies via your browser settings and withdraw consent for non‑essential cookies. We use analytics providers (e.g., Google Analytics) who may set their own cookies. These providers act as data processors and only process data on our instructions.
We share personal data with third parties only as necessary to provide the Services or as required by law:
Payment partners: banks, acquiring institutions, card networks and payment processors to execute transactions and manage merchant accounts.
Fraud prevention and risk management providers: third‑party tools that help detect and prevent fraudulent transactions.
Service providers: cloud hosting, software providers, analytics services and consultants who process personal data on our behalf and are bound by confidentiality agreements.
Regulators and law enforcement: where required to comply with laws, court orders or regulatory requests, or to protect our legal rights.
Business transfers: in the event of a merger, acquisition or sale of assets, personal data may be transferred subject to this Privacy Policy.
We do not sell personal data or permit third parties to use it for their own marketing purposes.
We are headquartered in the United Kingdom and may process personal data in countries outside your own. When we transfer personal data outside the UK or European Economic Area, we rely on adequate safeguards such as Standard Contractual Clauses or adequacy decisions to protect your data.
We implement technical and organisational measures to protect personal data, including:
Encryption of data in transit via TLS/HTTPS and encryption of sensitive data at rest.
Access controls and least‑privilege policies for employees and contractors.
Regular security assessments, vulnerability scans and penetration testing.
Compliance with PCI DSS for handling cardholder data.
Vendor due diligence and data processing agreements with third‑party providers.
We retain personal data only as long as necessary for the purposes described above and to meet legal obligations. For payment data, this generally means we retain records for at least six years after the end of the merchant relationship to comply with accounting, tax and regulatory requirements.
Depending on applicable data‑protection laws (e.g., UK GDPR), you have the following rights:
Access: request a copy of your personal data that we hold.
Rectification: request correction of inaccurate or incomplete personal data.
Erasure: request deletion of personal data where we do not have a lawful basis to retain it (subject to certain exceptions).
Restriction: request restriction of processing in certain circumstances.
Objection: object to processing based on our legitimate interests.
Portability: request transfer of your personal data to you or another service provider in a structured, commonly used format.
Withdraw consent: withdraw consent at any time if we rely on consent to process your data (e.g., marketing).
To exercise these rights, please contact us at team@paymission.tech. We will respond within one month or sooner as required by law. We may require verification of your identity before fulfilling your request.
Our Services are intended for use by businesses and are not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.
We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will post the updated policy on our Website with a new effective date. We encourage you to review this page periodically. When changes materially affect your rights, we will provide prior notice (e.g., by email or dashboard notification).
If you have any questions or complaints regarding this Privacy Policy or our data practices, contact us at team@paymission.tech or write to our registered address: Unit A, 82 James Carter Road, Mildenhall, IP28 7DE, United Kingdom. You may also lodge a complaint with the Information Commissioner’s Office or the supervisory authority in your country of residence.