Pryor Payments Privacy Notice.

Who we are

Captainess Ltd, trading as Pryor Payments, is the controller of the personal information you give us when we help you set up or improve your card acquiring and payment arrangements. This notice explains what we collect, why, who sees it and how long we keep it.

• Legal entity: Captainess Ltd, trading as Pryor Payments. Company number 15455492, registered office 3 Rideaway Drive, Hemingford Abbots, Cambridgeshire PE28 9AQ.
• ICO registration number: ZC268420
• Contact: info@pryorpayments.co.uk, or by post at 3 Rideaway Drive, Hemingford Abbots, Cambridgeshire PE28 9AQ.

What information we collect

We collect the information an acquirer or payment provider needs to assess your business, and nothing beyond that. Most of it comes from you. Some comes from public sources such as Companies House, and from the acquirers we approach on your behalf.

We do not collect or store payment card numbers.

If you give us information about other people, such as your directors or shareholders, please make sure they have seen this notice.

Why we use it and our lawful basis

We use your information to get your business the right payment arrangements and to manage the process on your behalf. We do not sell it or use it for anything unrelated.

Criminal offence information. Acquirers are legally required to check for financial crime, and screening results can include information about criminal offences or allegations. We handle this only to help acquirers meet those regulatory requirements and to prevent or detect unlawful acts, under the conditions in Schedule 1 of the Data Protection Act 2018.

Who we share it with

We share your information only with the acquirers and payment providers you have agreed we can approach, and with the suppliers we need to run the business. We will tell you which acquirers we plan to approach before we send them anything.

• Acquirers, payment service providers and their onboarding partners. They receive your application pack and supporting documents. Each one becomes a controller of what it receives and will handle it under its own privacy notice.
• Our suppliers. Email, secure file storage and identity verification providers, who act only on our instructions.
• Professional advisers. Our accountant, insurer or legal adviser, where needed.
• Authorities. Regulators, law enforcement or courts, where the law requires it.

Acquirers pay us a referral fee for acquiring set up work. We never share your information with an acquirer for any reason other than your application.

Transfers outside the UK

Some acquirers and suppliers are based outside the UK, so your information may be sent abroad as part of your application. When that happens we use one of these safeguards:

• The country is covered by UK adequacy regulations, which includes the EEA.
• The recipient has signed the UK International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses.
• Where neither applies, the transfer is necessary for a contract made in your interest, and we will tell you before sending.

Ask us if you want to know which safeguard applies to your application.

How long we keep it

We keep your documents only for as long as your application or our work with you needs them, then delete them securely.

The acquirer will keep its own copy for as long as its legal obligations require, usually at least five years after the relationship ends.

How we keep it secure

Your documents are stored in encrypted storage that only Pryor Payments can access, protected by multi-factor authentication.

• We ask you to send documents through a secure upload link rather than as email attachments.
• We send documents to acquirers through their own secure portals wherever they offer one.
• Devices we work on are encrypted, password protected and kept up to date.
• If something goes wrong and your information is at risk, we will tell you and the Information Commissioner’s Office without delay.

Your rights

You can ask us at any time to see, correct or delete the information we hold about you. Email info@pryorpayments.co.uk and we will reply within one month. There is no charge.

You have the right to:

• get a copy of your information
• have anything inaccurate corrected
• have your information deleted, where we have no legal reason to keep it
• restrict or object to how we use it, including for keeping in touch
• have your information passed to you or another provider in a usable format

If we have already sent your documents to an acquirer, you will need to contact that acquirer about the copy it holds. We can tell you who to contact.

Complaints

If you are unhappy with how we have handled your information, email info@pryorpayments.co.uk with the subject line “Data protection complaint” and tell us what has gone wrong.

1. We will acknowledge your complaint within 30 days.
2. We will look into it without delay and keep you updated.
3. We will tell you the outcome and what we have done about it.

If you are still not satisfied, you can complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113.

Changes to this notice

We review this notice at least once a year and whenever our services change. The date at the top shows when it was last updated.