Privacy Policy
We’re Mishipay Ltd. of 15 Greek Street, London W1D 4DP ( [email protected] ), and we’re subject to English law. We provide you with access to our app and website and enable you to purchase goods from certain retailers with whom we have contractual relationships (Retailers) without needing to check-out at any tills in the Retailers’ stores and to provide related services, in accordance with our terms of use (Terms) (Services)We use your information as further explained in this privacy policy. We’ll be the “controller” of the information you provide to us, except that:
- Stripe, Inc. of 185 Berry Street, Suite 550, San Francisco, CA 94107, for the purposes of processing your payment.
- Alternative Payments Ltd (Company number 07959933), also known as Judopay, a company incorporated in England and Wales and having its registered office at Rise London, 41 Luke Street, London, EC2A 4DP, United Kingdom , for the purposes of processing your payment.
- Ingenico Group SA of 28/32 Boulevard de Grenelle, 75015 Paris, for the purposes of processing your payment.
- Spreedly Inc. of 733 Foster Street Durham, NC 27701, for the purposes of storing card information securely, creating tokens and sharing with MishiPay to allow for the use of the saved cards for making recurring payments.
- SIX Group Ltd and its group companies of Pfingstweidstrasse 110, 8005 Zürich Switzerland, for the purposes of processing your payment.
- VeriFone, Inc. of Royal Center 4, 11700 Great Oaks Way Suite 210 Alpharetta, GA 30022, for the purposes of processing your payment.
- Adyen, PO Box 10095, 1001 EB Amsterdam The Netherlands, for the purposes of processing your payment
- Computop Wirtschaftsinformatik GmbH, Schwarzenbergstraße 4, 96050 Bamberg, Germany, for the purposes of processing your payment
- XPay by MediaMarktSaturn, Wankelstraße 5, Ingolstadt, 85046, for the purposes of processing your payment
- Mercanet by BNP Paribas 16, boulevard des Italiens -75009 PARIS, for the purposes of processing your payment
- Sogecommerce by Société Générale, 29 Boulevard Haussmann 75009 Paris, for the purposes of processing your payment
- Stripe
- JudoPay
- Ingenico
- Spreedly
- Six Group
- VeriFone
- Adyen
- Computop
- XPay by MediaMarktSaturn
- Mercanet
- Sogecommerce
What information do we need and why?
We need your name, age, gender and contact details, and to collect your location information, to provide the Services. We also gather information relating to you and your online behaviour less directly by:- tracking you online and across devices, including using cookies (in accordance with our cookies policy). We use this to market our products and services (and that of Retailers) where we have appropriate consents to do so and to prevent the use of our app/website for fraudulent transactions;
- combining data you provide with other data, in particular, product and transaction data from Retailer systems. We use this to create accurate customer profile based on interests and behaviour on the platform
- using algorithms, which analyse data about you from social media, location data and access to Retailers’ websites. We use this to create profiles related to your shopping habits and, where we have appropriate consents from you to do so, to offer you products and services that you may be interested in. We may also anonymise your data and aggregate it with other users’ data (so that you could not be identified from this information and it is no longer personal data relating to you) and provide data analytic services to certain retailers with whom we have contractual relationships (Retailers).
- to be able to provide the Services
- as this is necessary for our performance of the Terms
- as this is necessary in pursuit of our legitimate interests in offering, developing and marketing the Services. We have balanced our legitimate interests with any potential risks to your data protection rights consider than these are outweighed by the significant benefits in being able to provide the Services to you and other users, improve checkout times when you and others purchase from Retailers and to improve our Services.
Who do we share your information with?
We may share your personal information with:- Retailers for the purposes of carrying out your transactions and performing our Services
- Our IT service and infrastructure providers that we use as part of our app and website and IT storage solutions. Licenses belonging to all 3rd party software and infrastructure providers available upon request. Please email [email protected]
- Stripe, Inc. of 185 Berry Street, Suite 550, San Francisco, CA 94107, for the purposes of processing your payment.
- Alternative Payments Ltd (Company number 07959933), also known as Judopay, a company incorporated in England and Wales and having its registered office at Rise London, 41 Luke Street, London, EC2A 4DP, United Kingdom , for the purposes of processing your payment.
- Ingenico Group SA of 28/32 Boulevard de Grenelle, 75015 Paris, for the purposes of processing your payment.
- Spreedly Inc. of 733 Foster Street Durham, NC 27701, for the purposes of storing card information securely, creating tokens and sharing with MishiPay to allow for the use of the saved cards for making recurring payments.
- SIX Group Ltd and its group companies of Pfingstweidstrasse 110, 8005 Zürich Switzerland, for the purposes of processing your payment.
- VeriFone, Inc. of Royal Center 4, 11700 Great Oaks Way Suite 210 Alpharetta, GA 30022, for the purposes of processing your payment.
- Adyen, PO Box 10095, 1001 EB Amsterdam The Netherlands, for the purposes of processing your payment
- Computop Wirtschaftsinformatik GmbH, Schwarzenbergstraße 4, 96050 Bamberg, Germany, for the purposes of processing your payment
- XPay by MediaMarktSaturn, Wankelstraße 5, Ingolstadt, 85046, for the purposes of processing your payment
- Mercanet by BNP Paribas 16, boulevard des Italiens -75009 PARIS, for the purposes of processing your payment
- Sogecommerce by Société Générale, 29 Boulevard Haussmann 75009 Paris, for the purposes of processing your payment
- Any other third parties as required by law or for the purposes of crime (including fraud), to prevent or investigate breaches of, or to enforce, our Terms, to respond to or investigate security vulnerabilities, or to respond to emergencies, and to protect the rights of third parties.
- Any group companies or companies that may merge with or acquire us. If we were to reorganise or restructure our business due to financial difficulties, it is possible that your data may be considered a saleable asset and may be sold or transferred to third parties.
Use Of Your Information
We will only process the data we collect about you if there is a reason for doing so, and if that reason is permitted under data protection law. We will have a lawful basis for processing your information: if we need to process your information in order to provide you with the service you have requested or to enter into a contract; we have your consent; we have a justifiable reason for processing your data; or we are under a legal obligation to do so.Where we need to in order to provide you with the service you have requested or to enter into a contract, we use your information:- to enable us to provide you with access to the relevant parts of the Sites;
- to supply the services you have requested;
- to enable us to collect payment from you; and
- to contact you where necessary concerning our services, such as to resolve issues you may have with your order.
- to improve the effectiveness and quality of service that our customers can expect from us in the future;
- to tailor content that we display to you;
- to enable our customer support team to help you with any enquiries or complaints in the most efficient way possible;
- to contact you for your views and feedback on our services and to notify you if there are any important changes or developments to the Sites or our services, including letting you know that our services are operating in a new area, where you have asked us to do so;
- to analyse your activity on the Sites so that we can administer, support, improve and develop our business and for statistical and analytical purposes and to help us to prevent fraud;
- to enforce our contractual terms with you and any other agreement, and for the exercise or defence of legal claims and to protect the rights of MISHIPAY LTD., or others (including to prevent fraud).
- create a record of your order(s);
- comply with any legal obligation or regulatory requirement to which we are subject.
Will we transfer your personal data outside the UK?
We may transfer your personal information outside of the UK and the European Economic Area (EEA) to our IT providers and other suppliers. When transferring your personal information outside of the UK or the EEA, we will (and will ensure that service providers acting on our behalf agree to) protect it from improper use or disclosure and ensure the same levels of protection are in place as are applied within the UK and the EEA.How long will we keep it?
We keep your personal information for the period required to perform the Services and then for 26 months following your termination of your relationship with us by deleting your profile on our app or website. Sometimes we de-identify your information so it can’t be attributed to you individually and use this data for data analytics and product development purposes. Otherwise, we securely erase your information once no longer needed.Your rights
You have the following rights regarding your information:The right to be informed
You have the right to be provided with clear, transparent and easily understandable information about how we use your information and your rights. This is why we’re providing you with the information in this Privacy Policy.The right of access
You have the right to obtain access to your information (if we’re processing it), and other certain other information (similar to that provided in this Privacy Policy).This is so you’re aware and can check that we’re using your information in accordance with data protection law.The right to rectification
You’re entitled to have your information corrected if it’s inaccurate or incomplete.The right to erasure
This is also known as ‘the right to be forgotten’ and, in simple terms, enables you to request the deletion or removal of your information where there’s no compelling reason for us to keep using it. This is not a general right to erasure; there are exceptions.The right to restrict processing
You have rights to ‘block’ or suppress further use of your information. When processing is restricted, we can still store your information, but may not use it further. We keep lists of people who have asked for further use of their information to be ‘blocked’ to make sure the restriction is respected in future.The right to data portability
You have rights to obtain and reuse your personal data for your own purposes across different services. Eg, if you decide to switch to a new provider, this enables you to move, copy or transfer your information easily between our IT systems and theirs safely and securely, without affecting its usability.The right to object
You have the right to object to certain types of processing, including processing for direct marketing (which we do only with your consent).Rights in relation to automated decision making and profiling
- baseless or excessive/repeated requests
- further copies of the same information.
Making a complaint
If you are unhappy with how we’ve handled your information or you would like to exercise your rights, contact us here: Mishipay Ltd. 15 Greek Street, London W1D 4DP, [email protected]If you’re not satisfied with our response to your complaint or believe our processing of your information does not comply with data protection law, you can make a complaint to the UK data protection authority, the Information Commissioner’s Office (ICO).