Privacy Policy

Kitepay Ltd (company number 17324148) is the data controller for personal data processed on the Kitepay platform.

What we collect

Account data — business name, contact name, email, business details submitted for verification.
Transaction data — amounts, currencies, card details used on the internal test network, payment outcomes, risk scores, dispute records.
Technical data — IP addresses, device and browser information, API request logs.

Why we process it

To provide the platform (contract).
To prevent fraud and secure the service (legitimate interests).
To meet legal obligations, including anti-money-laundering and sanctions screening as we move to live processing (legal obligation).

Sharing

We share data with infrastructure providers acting as processors, and — when live processing launches — with our licensed payment partner, card schemes, and regulators where required by law. We do not sell personal data.

Retention

Account and transaction records are kept for as long as needed to provide the service and to meet record-keeping obligations (typically six years for financial records), then deleted or anonymised.

Your rights

Under UK GDPR you may request access, correction, deletion, restriction or portability, and object to certain processing. Contact privacy@kitepay.uk. You may complain to the ICO (ico.org.uk).

Last updated: 7 July 2026.