Data protection law says that we have to tell you the "legal basis" that we rely on to process your personal data for the purposes that we have notified to you. The table below tells you what that legal basis is in relation to each of the purposes set out above.
Website users, customers and prospective customers
Purpose/Activity
Type of data
Lawful basis for processing including basis of legitimate interest
To register you as a potential customer
1. Identity Data
2. Contact Data
3. KYC Information
4. EDD Information
5. Security Information
Performance of a contract with you
To manage our relationship with you which will include:
(a) Notifying you about changes to our terms or privacy notice; and
(b) Asking you to leave a review or take a survey
Account Information
1. Performance of a contract with you
2. Necessary to comply with a legal obligation
3. Necessary for our legitimate interests (to keep our records updated and to study how customers use our products/services)
To administer and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data)
1. Identity Data
2. Contact Data
3. Payment Information
4. Technical Data
5. Usage Data
6. Security Information
7. Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise)
8. Necessary to comply with a legal obligation
To deliver relevant website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you
1. Identity Data
2. Contact Data
3. Usage Data
4. Marketing and Communications Data
5. Technical Data
6. Voluntary Data
7. Necessary for our legitimate interests (to study how our existing customers use our products/services, to develop them, to grow our business and to inform our marketing strategy)
8. To make suggestions and recommendations to you about goods or services that may be of interest to you
9. Identity Data
10. Contact Data
11. Technical Data
12. Usage Data
13. Marketing and Communications Data
Necessary for our legitimate interests (to develop our products/services and grow our business)
Providing and allowing you to use OpenPayd products and services
Account Information
1. Performance of a contract with you to use OpenPayd products and services and/or to run and manage your user account.
2. Necessary for our legitimate interests (to study how customers use our products/services, to develop them, to grow our business and to inform our marketing strategy)
3. Necessary to comply with a legal obligation
Marketing
1. Marketing and Communications Data
2. Contact Data
We process this personal data for this purpose on the basis that it is necessary in our legitimate interests to do so. We have an interest in promoting and marketing our business so that our business continues to grow. You always have a right to opt out of receiving direct marketing communications. If you wish to do so, please follow the instructions in each marketing communication to unsubscribe.
Identity Verification and Due Diligence
Account Information
We process this personal data for this purposes on the basis that this information is necessary to enable us to comply with legal obligations, including compliance with anti-money laundering legislation and obligations to prevent and detect fraud.
If we do not have a legal obligation to process personal data for any of these purposes, we process the data on the basis that it is necessary to do so in our legitimate interests. We have an interest in complying with regulatory guidelines and investigations and ensuring that we protect our business against risks of criminal activity. You may have a right to object to your personal data being used in these ways, but please note that this right will not apply in a number of circumstances, including where the processing is necessary to prevent or detect crime.
Corresponding with you
The data will vary depending on your relationship with us and the nature of the correspondence but may include any Account Information.
Necessary to do so for our legitimate interests. We have an interest in making sure that comments and queries are handled appropriately so that they can be resolved for our users. We also have an interest in running and allowing participation in competitions,
promotions and surveys in order to promote and improve our business. You may have a right to object to your personal data being used for these purposes, but please note that we may not be able to handle your correspondence appropriately if you exercise this right.
Monitoring trends, analysing and improving OpenPayd
1. Contact Data
2. Identity Data
3. KYC Information
4. EDD Information
5. Voluntary Information
6. Technical Information
7. Payment Information
8. Usage Data
Necessary for our legitimate interests. We have an interest in ensuring that we continue to improve OpenPayd and provide our users with the best and most effective service possible. You may have a right to object to your personal data being used for these purposes.
Managing risks and enforcing our rights
Contact Data
Identity Data
Payment Information
Performance of a contract with you
Necessary to comply with a legal obligation
Prevention and detection of illicit activity
Account Information
Necessary to comply with a legal obligation
Compliance with applicable laws and regulations
Account Information
Necessary to comply with a legal obligation
Third Party suppliers’ personnel, directors, shareholder and controlling persons
Purpose/Activity
Type of data
Lawful basis for processing including basis of legitimate interest
To manage our relationship with you which will include:
(a) Assess the services you provide
(b) Notifying you about changes to our terms or privacy policy
(c) Asking you to leave a review or take a survey
Identity
Contact
Marketing and Communications
Entry into contract or the performance of an already existing contract with you
Necessary to comply with a legal obligation
legitimate business interests e.g. building security if you visit our office, or to protect our IT infrastructure.
Contract management and assessment of your performance
Identity
Contact
Marketing and Communications
Entry into contract or the performance of an already existing contract with you
Necessary to comply with a legal obligation
legitimate business interests e.g. building security if you visit our office, or to protect our IT infrastructure.
Access and security management
Identity
Contact
Marketing and Communications
Entry into contract or the performance of an already existing contract with you
Necessary to comply with a legal obligation
legitimate business interests e.g. building security if you visit our office, or to protect our IT infrastructure.
Payment of invoices
Identity
Contact
Performance of an existing contract with you
To verify your identity
(we will notify you if this is required)
Identity Data
Contact Data
KYC Information
EDD Information
Entry into contract or the performance of a contract with you.
Necessary to comply with a legal obligation
If we do not have a legal obligation to process
personal data for any of these purposes, we process the data on the
basis that it is necessary to do so in our legitimate interests. We have
an interest in complying with regulatory guidelines and investigations
and ensuring that we protect our business against risks and criminal or
illicit activity.