XorPay for business is a platform for SEPA, UK and international payments, Payroll management, Business Expenses Visa®, designed to save you time and money.

the prevention of fraud, money laundering, counter terrorist financing or misuse of services

Consent

By consenting to this privacy notice you are giving us permission to process your personal data specifically for the purposes identified above. Consent is required for PFS to process personal data, but it must be explicitly given. Where we are asking you for sensitive personal data we will always tell you why and how the information will be used.

Consent for Children Under 16

If you are giving consent on behalf of a child under 16 then please be aware that Children need specific protection with regard to their personal data, as they may be less aware of the risks, consequences and safeguards concerned, and also of their rights in relation to the processing of personal data for the purposes of using these services. By consenting to this privacy notice on behalf of a minor you are giving permission for their data to be used for the purposes described above.

Withdrawal of Consent Conditions

You may withdraw consent from direct marketing at any time by contacting our Data Protection Officer. Please note, where you have consented to your data being used for carrying out financial transactions, then the right to withdraw consent does not exist. As a payment service provider, PFS is obliged to retain data concerning financial transactions for 6 years in accordance with national law for the purpose of preventing, detecting and investigating, by the FIU or by other competent authorities, possible money laundering or terrorist financing.

Disclosure

PFS will only pass on your personal data to third parties, including internationally, once we have obtained your consent. Some of our service providers, like payment processors, risk management solutions and suppliers are based outside of the EEA. Where we authorize the processing or transfer of your personal information outside of the EEA, we require your personal information to be protected to data protection standards and we ensure that there are adequate safeguards in place for data protection. The GDPR prohibits transfers of personal data outside the European Economic Area to a third country that does not have adequate data protection. Where transfer occurs outside the EEA the following mechanisms are in place with the third parties: - Data Protection clauses in our contracts and agreements with third-parties - EU-US Privacy Shield - Personal Information Protection and Electronic Documents Act (PIPEDA)

Retention period

PFS will process personal data for the duration of the contract for services and will store the personal data for 6 years after that date of termination of the contract. state the retention period of their personal data and provide further information on how the retention period has been established.

Your rights as a data subjectRetention period

Complaints