ExePay Limited is a private limited company registered in the United Kingdom under company number 12866788. We are authorised and regulated by the Financial Conduct Authority (FCA) as an electronic money institution, under Firm Reference Number 997541. Your privacy is a priority for us, and we are fully committed to protecting your personal data.
As a regulated electronic money institution, we collect and process various types of personal data in accordance with strict data protection laws. This Privacy Notice outlines how we collect, use, manage, and share your personal information. It is important that you read and understand this notice, as it explains your rights and our obligations regarding your data.
If you have any questions or concerns, please don’t hesitate to contact us — we’re here to help.
This Privacy Notice forms part of our ongoing commitment to data privacy and security. In some instances, you may receive additional privacy statements relating to specific data collection or processing activities. These statements are intended to supplement this notice and provide further transparency, not to replace it.
This Privacy Notice describes how ExePay Limited collects, uses, and manages personal information. It applies to all individuals who interact with our services, including visitors to our website and users of our products or services.
By accessing our website or using any of our services, you acknowledge and agree to the data practices described in this notice. We are committed to transparency and may update this notice from time to time. Any changes will be communicated through updates on our website and mobile application.
We encourage you to review this notice regularly, particularly before submitting personal information or completing transactions, to stay informed about how your data is handled. If you do not agree with the terms outlined in this notice or any future updates, you may discontinue your relationship with us by closing your account. Account closure requests can be submitted through our online portal.
When you visit our website without engaging with our services, we may collect certain information using cookies and similar tracking technologies. The nature and purpose of this data collection are fully outlined in our Cookies Policy.
We share your information in the following circumstances:
We take steps to ensure that our arrangements with third-party suppliers (including online vendors) protect your privacy. We do not sell, rent or exchange your information with any third party for commercial reasons.
We may share your personal information with the following parties:
Information that we collect will be retained only for as long as is necessary to fulfil the purposes outlined above in this Notice (this will generally be for the duration of time where you utilise our services) or to comply with our legal obligations. We may retain your information further for a period of time specifically required by applicable regulations or laws, such as retaining the information for tax and accounting and financial services regulations record keeping obligations.
When determining the relevant retention periods for your information, we will take into account factors including:
Otherwise, we securely erase your information once this is no longer needed.
When you apply to use our services, ExePay Limited collects specific personal information to ensure compliance with legal and regulatory requirements, maintain security, and deliver our services effectively. The information we collect includes:
To create an account and carry out transactions, you will be asked to provide:
When you initiate a transaction, we collect details including:
For transactions exceeding specific thresholds, we are legally obligated to perform Enhanced Due Diligence. This may require:
We also collect:
ExePay Limited processes your personal data in accordance with applicable data protection laws. The purposes and legal bases for processing your information include:
We process your data to meet legal obligations, particularly in relation to anti-money laundering (AML), counter-terrorist financing, and the prevention of financial crime.
Your information is used to deliver our services, manage your account, and take steps necessary to enter into or perform a contract with you.
We may process your data to support our legitimate business interests, provided that these do not override your rights. These interests include:
In certain situations, we rely on your explicit consent to process your data—for example, for specific marketing communications or optional data collection during promotions or surveys. You may withdraw your consent at any time
We use automated decision-making processes, including profiling, to ensure efficiency, compliance, and a tailored user experience. These include:
Where automated decisions significantly affect you, we provide options for human review and intervention. We also implement robust safeguards to ensure fairness, accuracy, and data protection—this includes techniques such as pseudonymisation , where feasible, to enhance privacy.
ExePay Limited may transfer your personal data to countries outside the United Kingdom, in accordance with applicable laws and regulations. These transfers may occur in the following circumstances:
We may share your data with regulatory authorities, law enforcement, and government agencies when required or permitted by law. If you send or receive money across borders, we are also required to share certain personal information with institutions in the relevant country as part of our legal and compliance obligations.
We may disclose your personal information to trusted third parties to facilitate and support our services, including:
In the event of a sale, merger, acquisition, or other corporate transaction involving all or part of ExePay Limited, your personal data may be transferred as part of the business assets.
We may share your personal information globally with other entities within the ExePay Limited group, and with financial authorities, credit reporting agencies, courts, or law enforcement bodies to comply with legal obligations or to protect our rights, interests, and those of others.
Some of the recipients of your data may be located in jurisdictions outside the UK that do not benefit from an adequacy decision by the UK Government. In such cases, ExePay Limited ensures that appropriate safeguards are in place by:
At ExePay Limited, we retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including meeting legal, regulatory, accounting, or reporting requirements. When determining appropriate retention periods, we consider the following factors:
These retention periods ensure that we meet our obligations while protecting your privacy. Once your data is no longer needed for these purposes, it will be securely deleted or anonymized in accordance with our data disposal protocols.
ExePay Limited’s services are not intended for, nor directed at, individuals under the age of 18. We do not knowingly collect, process, or store personal data from minors, and we do not seek to engage with children in any capacity through our services.
If we become aware that a person under the age of 18 has registered for or is using our services, we will take immediate steps to:
Under data protection legislation, you have specific rights in relation to the personal data we hold about you. While these rights are not absolute and may be subject to limitations or exemptions under applicable law, they include the following:
You have the right to request access to the personal data we hold about you (commonly referred to as a "data subject access request"). This allows you to confirm that your data is being processed lawfully and to obtain a copy of your personal information.
You may request the correction of inaccurate or incomplete personal data we hold about you. We may need to verify the accuracy of the new information you provide before making any changes.
You can ask us to delete your personal data where there is no valid reason for us to continue processing it. This right also applies if:
You can object to the processing of your personal data where:
You may request that we suspend processing your personal data in the following circumstances:
You have the right to request the transfer of your personal data to you or a third party. We will provide it in a structured, commonly used, machine-readable format. This right only applies to data:
Where we rely on your consent to process your data, you can withdraw it at any time. This will not affect the lawfulness of processing carried out prior to the withdrawal. However, if you withdraw consent, we may no longer be able to provide certain services. We will inform you of any such impact at the time you make the request. If you wish to exercise any of your rights, please contact us at dpo@exepay.co.uk. We may need to verify your identity before processing your request to protect your privacy and security.
You will not be charged a fee to access your personal data or to exercise any of your data protection rights. However, we reserve the right to charge a reasonable fee if a request is clearly unfounded, repetitive, or excessive. In such cases, we may also refuse to comply with the request, in line with applicable data protection laws.
To protect your data and prevent unauthorized access, we may request specific information from you to verify your identity before we respond to your request. This helps ensure that personal data is not disclosed to anyone who is not entitled to receive it. We may also contact you for further details to help clarify or expedite your request.
We aim to respond to all legitimate requests within one month. If your request is particularly complex or you have submitted multiple requests, we may need additional time. Should this occur, we will inform you of the delay and keep you updated on the progress of your request.
At ExePay Limited, we are committed to protecting the personal information you entrust to us. We follow widely recognized industry standards and have implemented appropriate organizational and technical measures designed to prevent accidental loss, unauthorized access, alteration, or disclosure of your personal data.
Access to your personal information is strictly limited to employees who require it for legitimate business purposes. These employees are bound by confidentiality obligations and are required to handle your data in accordance with our policies and legal requirements.
While we strive to ensure the security of your data, it is important to understand that no method of transmission over the internet or electronic storage is completely secure. Therefore, we cannot guarantee absolute security, and any data transmission is undertaken at your own risk.
If you have any questions or concerns about our data security practices, please contact us at dpo@exepay.co.uk.
In the event of a suspected data breach, we have established procedures to respond swiftly and effectively. Where required by law, we will promptly notify you and any relevant regulatory authorities of the breach.
Our website may contain links to external websites, each of which operates under its own privacy practices that may differ from those of ExePay Limited. When you provide personal information to these third-party websites or services, your data will be subject to their respective privacy policies. ExePay Limited is not responsible for, and disclaims any liability related to, the privacy practices or data handling of these external sites.
We strongly recommend that you review the privacy policies of any third-party websites, applications, or services you visit or use.
Additionally, this Privacy Notice does not cover the data practices of third-party entities you may interact with while using our services, such as mobile network operators or other users. We encourage you to contact these third parties directly to understand their privacy policies before sharing any personal information.
To keep up with changing legislation, best practice, and changes in how we process personal information, we may revise this notice at any time. In the case of significant or material changes to this notice, we will let you know.