Last updated: 21 August 2026
This policy explains how QVEX PAYMENTS LIMITED ("QVEX", "we", "us") collects, uses and protects personal data when you use our website and payment services (the "Service").
QVEX PAYMENTS LIMITED is the data controller. We are registered in England & Wales, company no. 17338041, registered office Flat 30, Busbridge House, Brabazon Street, London, E14 6LA, United Kingdom. Contact us at hello@qvex.io.
Merchant applicants and merchants. Business name, company number, registered and trading addresses, website, description of business, expected volumes, bank account details for settlement, and the names, dates of birth, addresses and identification documents of directors, officers and beneficial owners.
Payers (customers of our merchants). The payment amount, currency, reference, the bank selected, the status of the payment, and the name associated with the paying account where the bank provides it. We never receive or store your online banking credentials — you authenticate directly with your own bank.
Website visitors. Limited technical data such as IP address (which we store in hashed form where used for abuse prevention), browser type and pages visited.
To provide and operate the Service; to onboard and verify merchants; to initiate and reconcile payments; to prevent fraud and misuse; to meet our legal and regulatory obligations, including anti-money-laundering and sanctions screening; to keep accounting records; to communicate with you; and to improve the Service.
We rely on: performance of a contract (providing the Service to merchants); legal obligation (anti-money-laundering checks, sanctions screening, record keeping, accounting and tax); and legitimate interests (preventing fraud and abuse, securing and improving the Service), balanced against your rights.
We share personal data with: authorised payment initiation providers who carry out the regulated payment services underlying the Service; identity, company and sanctions data sources, including Companies House and published sanctions lists; hosting, database and infrastructure providers; professional advisers such as lawyers and accountants; and regulators, law enforcement or other authorities where we are legally required to do so. We do not sell personal data.
Some of our providers process data outside the United Kingdom. Where that happens we rely on UK adequacy regulations or on appropriate safeguards such as the UK International Data Transfer Agreement or Addendum to the EU Standard Contractual Clauses.
We keep merchant onboarding and transaction records for five years after the end of the business relationship or the date of the transaction, as required by anti-money-laundering law, and longer where another legal obligation applies. Website technical data is kept for a short period only.
You have the right to access your personal data, to have it corrected or erased, to restrict or object to its processing, and to data portability. Some rights are limited where we must retain data to meet a legal obligation. To exercise any right, email hello@qvex.io.
If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk, though we would ask you to contact us first.
We use only cookies and similar storage that are strictly necessary to operate the website and keep it secure. We do not use advertising or third-party tracking cookies.
We may update this policy from time to time. The date at the top shows when it was last changed, and material changes will be notified to merchants directly.
Questions about privacy? Email hello@qvex.io.