Skip to content
Sandbox open: magic test cards, hosted checkout and signed webhooks · 55 payment methods in the catalogue, cards to crypto · Built and hosted in the EEA · Read the API reference at /developers

Sandbox open: magic test cards, hosted checkout and signed webhooks

Get started

Privacy policy

What personal data Cleared-pay processes, why, for how long, and your rights.

Last updated

On this page
  1. Controller and contact
  2. Who this notice covers
  3. Data we process
  4. Purposes and legal bases
  5. Fraud prevention and automated decisions
  6. Retention
  7. Sub-processors and transfers
  8. Security
  9. Your rights
  10. Complaining to a supervisory authority
  11. Cookies
  12. Changes

Placeholder — not reviewed legal wording. TODO(compliance)

This page shows the section structure of the final document. Every section is filled in by a qualified adviser before launch. Nothing on this page states a commitment, a licence or a certification, and nothing on it should be relied on.

Controller and contact

TODO(compliance): reviewed text for “Controller and contact” — the controller, and the data protection contact address.

Who this notice covers

TODO(compliance): reviewed text for “Who this notice covers” — merchants and their staff, payers on a hosted page, and visitors to this website.

Data we process

TODO(compliance): reviewed text for “Data we process”. Cleared-pay does not store a card number or a security code; a stored payment instrument is limited to brand, last four digits, issuing range, expiry, issuer country and a fingerprint.

TODO(compliance): reviewed text for “Purposes and legal bases”.

Fraud prevention and automated decisions

TODO(compliance): reviewed text for “Fraud prevention and automated decisions” — the logic applied, and how to ask for a human review.

Retention

TODO(compliance): reviewed text for “Retention” — including the anti-money-laundering and tax retention periods that limit erasure of transaction records.

Sub-processors and transfers

TODO(compliance): reviewed text for “Sub-processors and transfers”. The current list is published on the Trust Center.

Security

TODO(compliance): reviewed text for “Security”.

Your rights

TODO(compliance): reviewed text for “Your rights” — access, rectification, erasure, restriction, portability and objection, and how to exercise them.

Complaining to a supervisory authority

TODO(compliance): reviewed text for “Complaining to a supervisory authority”.

Cookies

TODO(compliance): reviewed text for “Cookies”. The cookie policy lists what this site sets.

Changes

TODO(compliance): reviewed text for “Changes”.