Privacy policy — found from the homepage — PayFit

Cited by

Facts read from this source

• Entity name Report an error

  “This Privacy Policy (the "Policy") describes how Payfit Ltd ("Payfit", "we", or "us") collects, uses, stores, shares and protects your information”

• Applicable law Report an error

  “we are committed to respecting data privacy legislation, and in particular the United-Kingdom General Data Protection Regulation and Data Protection Act 2018”

• Retention customer identification Report an error

  “Customer Identification data (name, surname, email address, etc.), any contractual documents entered into by you and Payfit, billing and financial information (payment, refunds…) 6 years after termination of the Contract”

• Retention prospect Report an error

  “Prospect information (name, surname, contact details, request for a demo…) 3 years or upon request from subject for data to be deleted, whichever is sooner”

• Retention cookies Report an error

  “Cookies 13 months after they were first installed on your terminal”

• Retention copilot interactions Report an error

  “Interactions with Copilot 18 months after the interaction”

• Provider region Report an error

  “The Personal Data we process is stored by our hosting provider Amazon Web Services on servers located within the European Union.”

• Outside EU transfers Report an error

  “we may transfer some of your Personal Data to third party service providers located or using servers located outside the European Union (the "EU") and the European Economic Area (the "EEA").”

• Processor agreements Report an error

  “in accordance with Article 28 of the UK GDPR, access to your Personal Data by our processors is subject to the signature of a written agreement which allows us to monitor and control the way our processors handle your personal data.”

• Encryption tls rsa Report an error

  “All data and information transmitted to our service via the secure TLS 1.2 protocol is encrypted using RSA-4096 keys”

• Oauth2 authentication Report an error

  “Our servers use OAuth2 authentication via JWT tokens, ensuring the integrity, security and authenticity of the data we process at all times.”

• Database encrypted Report an error

  “Our database is also highly encrypted and requires multiple keys to operate.”

• Backups replication Report an error

  “We use replication mechanisms to permanently safeguard your information and guarantee you a service that is always available.”

• Security policy link Report an error

  “You can find further details about they way we protect your personal data in our Security Policy (Security Policy - Payfit).”

• Supervisory authority ico Report an error

  “In the United Kingdom, this authority is the Information Commissioner's Office (ICO), whose website address is: https://ico.org.uk.”

• UK address Report an error

  “Payfit Unit RH.120 The Record Hall, 16-16A Baldwin's Gardens, London, United Kingdom, EC1N 7RJ”

• ISO 27001 Report an error

  “ISO 27001”

• Copilot exists Report an error

  “Interactions with Copilot 18 months after the interaction”

• Policy last updated Report an error

  “Last updated on June 15th 2026.”

1 fact read from this page is not shown because it could not be confirmed on the page as captured.

Scores citing this record

• The Data Protection Officer Employee data protection & co-determination
• The Data Protection Officer European sovereignty
• The IT Integrator Employee data protection & co-determination
• The IT Integrator European sovereignty
• The Payroll Officer Employee data protection & co-determination
• The Payroll Officer European sovereignty
• The People Lead Employee data protection & co-determination
• The People Lead European sovereignty
• The Skeptic Employee data protection & co-determination
• The Skeptic European sovereignty
• The Skeptic Pricing transparency
• The Works Council Advocate Employee data protection & co-determination
• The Works Council Advocate European sovereignty