Please view, read, download and save this policy.
Notification of Changes
Some pages on the PayPal website include links to third-party websites. These sites are governed by their own privacy statements, and PayPal is not responsible for their operations, including but not limited to their information practices. Users submitting information to or through these third-party websites should review the privacy statements of these sites before providing them with personally identifiable information.
A Special Note about Children
Children are not eligible to use our service and we ask that minors (persons under the age of 18) do not submit any personal information to us or use the PayPal Services.
2. Binding Corporate Rules
3. Information We Collect
To open a PayPal account or use the PayPal Services, you must provide your name, address, phone number, and email address. In order to make payments through the PayPal Services, you must provide credit card, debit card or bank account information. We also ask you to choose two different security questions to answer (such as your city of birth or your pet’s name). This required information is necessary for us to process transactions, issue a new password if you forget or lose your existing password, protect you against credit card fraud and current account fraud, and contact you should the need arise in administering your account or the PayPal Services.
We will also require other commercial and/or identification information if you send or receive certain high-value transactions or high overall payment volumes through the PayPal Services or as is otherwise required in order for us to comply with our anti-money laundering obligations under European law.
When you access PayPal using a mobile device (e.g. a smartphone), we may additionally collect and store device sign-on data (including device ID) and geolocation data in order to provide our services.
If you use certain functionalities provided by us (such as the PayPal POS Functionality available in your mobile app) we may ask you to upload a picture of you in order to provide these specific services. If we allow you to link your membership of an eligible loyalty scheme to your Account, we may require you to provide to us your loyalty scheme membership ID.
When you use the PayPal Services to send money to someone else or request money from someone else, we ask you to provide information related to that transaction. This information includes the amount and type of the transaction (purchase of goods, purchase of services, or simple money transfer), other purchase details and the email address, Skype ID (if applicable) or phone number of the third party. Also, when you send money to another PayPal customer, you may be asked to provide personal details to that customer to complete the transaction. Those details may also be passed on to us from that customer. We retain this information for each of your transactions through the PayPal Services and may add this information to your account profile to be used for future transactions that you may make with us. We also collect the Internet address (IP address) and other identifying information about the computer or device you use to access your PayPal account or use the PayPal Services, in order to help detect possible instances of unauthorised transactions.
Information about You from Third Parties
In order to protect all our customers against potential fraud, we verify the information you provide with the “Payment Processors” and/or “Credit Reference and Fraud Agencies” listed in the table under the section “Disclosure to Third Parties other than PayPal Customers” below. In the course of such verification, we receive personally identifiable information about you from such services. In particular, if you register a credit card or debit card or bank account with PayPal, we will use card authorisation and fraud screening services to verify that your bank or card information and address match the information you supplied to PayPal, and that the card has not been reported as lost or stolen.
If you send or receive high overall payment volumes through the PayPal Services, or if as a merchant have limited selling history, in some circumstances we will conduct a background check on your business by obtaining information about you and your business, and potentially (if legally permitted) also about your directors, shareholders and partners, from a credit reference or fraud agency such as Dun & Bradstreet, as listed in the table under the section entitled, “Disclosure to Third Parties other than PayPal Customers” below. If you owe us money, we may conduct a credit check on you by obtaining additional information about you from a credit reference or fraud agency, to the extent permitted by law. PayPal, at its sole discretion, reserves the right to periodically retrieve and review a business and/or consumer credit report supplied by such credit reference or fraud agency for any account, and reserves the right to close an account based on information obtained during this credit review process.
If you use your PayPal account to sell items, we may also collect public information about your business and your behaviour on social media platforms (such as the e-mail address and the number of “likes” and “followers”), to the extent relevant to confirm an assessment of your transactions and/or your business, including its size and the size of its customer base.
We may also collect information from members of the eBay Inc. corporate family or other companies (subject to their privacy policies). If you are sending transaction related communication on PayPal’s or eBay’s conflict resolution platforms to your buyer or seller, we may collect such information in order to assess your transactions and any risk associated with your activities, as well as for fraud detection, prevention, and or remediation of fraud, or other illegal actions or to detect, prevent or remediate violations of policies or the applicable user agreements.
If we cannot verify the information that you provide, or if you request a withdrawal by cheque to an address other than your verified credit card billing address, we may ask you to upload or send us additional information by fax (such as your driving licence, credit card statement, and/or a recent utility bill, or other information linking you to the applicable address), or to answer additional questions online to help verify your information.
Website Traffic Information
Because of the way Internet communication standards work, when you arrive at or leave the PayPal website, we automatically receive the web address of the site that you came from or are going to. We also collect information on which pages of our website you visit, IP addresses, the type of browser you use and the times you access our website. We use this information to try to understand our customers’ preferences better and to manage the load on our servers, so as to improve our services and your experience with PayPal.
Below is a summary of few key things you should know about our policy related to the use of such technologies. You can review our full policy here.
We offer certain site features, services, applications, and tools that are available only through our use of these technologies. You are always free to block, delete, or disable these technologies if your browser or device so permits. However, if you decline cookies or other similar technologies, you may not be able to use certain site features, services, applications, or tools. You may also be required to re-enter your password more frequently during a session. For more information on how you can block, delete, or disable these technologies, please review the Help section of your browser, add-on, application, or device.
Where applicable, we protect our cookies and other similar technologies so that only we and/or our authorised service providers can interpret them by assigning them a unique identifier that is designed for interpretation only by us. You may encounter cookies, web beacons, or other similar technologies from authorised third parties, commonly called service providers, that we have contracted with to assist us with various aspects of our site operations, or to provide you our services, applications, and tools. We use both “session” and “persistent” cookies, as well as first-party and third-party cookies and similar technologies.
Our uses of these technologies fall into the following general categories
Operationally Necessary – allow us to operate our sites, services, applications, and tools, and ensure their safety and security, and allow you to access these sites, services, applications, and tools;
Performance-Related – are useful in order to assess the performance of our sites, services, applications, and tools;
Functionality-Related – offer you enhanced functionality when using our sites, services, applications, and tools; and
Advertising- or Targeting-Related – are used by us or our third-party advertising providers to deliver content, including advertisements relevant to your interests.
We may work with third-party companies, commonly known as service providers, who may place third-party cookies, web beacons, or similar technologies for storing information on our sites or in our services, applications, and tools with our permission. These service providers help us operate our sites, applications, services, and tools, and provide you with a better, faster, and safer experience;
Our sites, services, applications, and tools may use third parties, such as network advertisers and ad exchanges, to serve advertisements. These third-party ad networks and exchange providers may use third-party cookies, web beacons, or similar technologies to collect information to provide you with their services. They may also collect your device identifier, IP address, or identifier for advertising (IDFA), which may be used to tailor the advertising you see on our sites or elsewhere on the web.
Customer Service Correspondence
If you send us correspondence, including emails and faxes, we retain such information in the records of your account. We will also retain customer service correspondence and other correspondence from PayPal to you. We retain these records in order to keep records of our relationship, to measure and improve our customer service, and to investigate potential fraud and violations of our User Agreement. We may, over time, delete these records if permitted by law.
Questionnaires, Surveys and Profile Data
From time to time, we offer optional questionnaires and surveys to our users for such purposes as collecting demographic information or assessing users’ interests and needs. The use of the information collected will be explained in detail in the survey itself. If we collect personally identifiable information from our users in these questionnaires and surveys, the users will be given notice of how the information will be used prior to their participation in the survey or questionnaire.
Recipients without registered PayPal Accounts and Requests
When a registered PayPal user either sends a payment to, or requests a payment from, an individual who is not a registered PayPal user, we will retain the information that the registered PayPal user submits to us, including, for example, the other party’s email address, Skype ID (if applicable), phone number and/or name, for the benefit of the registered PayPal user who is attempting to contact the other party, so that the registered PayPal user can see a complete record of his or her transactions, including uncompleted transactions. Although this information is stored for a certain period of time, we will not market to the non-registered person in any way at any time. Additionally, these persons have the same rights to access and correct information about themselves (assuming that their details were correct) as anyone else who uses the PayPal Services.
4. Our Use and Disclosure of Information
We collect, store and process your personal information on servers located in the United States and operated by our parent company, PayPal Inc and elsewhere in the World where PayPal facilities are located. Our primary purpose in collecting personal information is to provide you with a safe, smooth, efficient, and customised experience. You agree that we may use your personal information to:
provide the services and customer support you request;
resolve disputes, collect fees, and troubleshoot problems;
detect, prevent, and/or remediate fraud or other potentially illegal or prohibited activities, or to detect, prevent or remediate violations of policies or applicable user agreements;
customise, measure, and improve our services and the content and layout of our website;
deliver targeted marketing and advertising, service updates, and promotional offers based on the communication preferences you have defined for your PayPal account (please refer to the section “Our Contact with PayPal Customers” below) and your activities when using the PayPal Services; and
compare information for accuracy, and verify it with third parties.
Content Posted by You for Publication
When providing us with content or posting content (in each case for publication, whether on- or off-line) using the PayPal Services, you grant eBay Inc, and its subsidiaries and subsidiary undertakings (which includes, without limitation, PayPal) (the “eBay Group”) a non-exclusive, worldwide, perpetual, irrevocable, royalty-free, sublicensable (through multiple tiers) right to exercise any and all copyright, publicity, trademarks, database rights and intellectual property rights you have in the content, in any media known now or in the future. Further, to the fullest extent permitted under applicable law, you waive your moral rights and promise not to assert such rights against the eBay Group, its sublicensees or assignees. You represent and warrant that none of the following infringe any intellectual property right: your provision of content to us, your posting of content using the PayPal Services, and the eBay Group’s use of such content (including of works derived from it) in connection with the PayPal Services.
We may combine your information with information we collect from other companies and use it to improve and personalise the PayPal Services. If you don’t wish to receive marketing communications from us or participate in our ad-customisation programmes, simply log in to your account, select My Account, Profile, then My account settings and update your Communication preferences, or follow the directions provided with the communication or advertisement.
Disclosure to Other PayPal Customers
If you are a registered PayPal user, your name, email address, Skype ID (if applicable), phone number (if applicable) date of sign-up, the number of payments you have received from verified PayPal users, and whether you have been verified to have control of a bank account are made available to other PayPal customers whom you have paid or senders who are attempting to pay you using the PayPal Services. If you are a Business account holder, we will also display to other PayPal customers the website address (URL) and customer service contact information that you provide us. In addition, this and other information may also be shared with third parties when you use these third parties to access the PayPal Services. However, your credit card number, bank account and other financial information will not be revealed to anyone whom you have paid or who has paid you through the PayPal Services or third parties that use the PayPal Services, except with your express permission or if we are required to do so pursuant to credit card rules, a court order or other legal process.
If you are buying goods or services and pay through PayPal, we may provide the seller with the delivery address for the goods and your billing address to complete your transaction. If an attempt to pay your seller fails, or is later invalidated, we may also provide your seller with details of the unsuccessful payment. To facilitate dispute resolutions, we may provide a buyer with the seller’s address so that goods can be returned to the seller.
If you are using the PayPal POS Functionality on your mobile app, we may share your picture that you have stored with your mobile app with the seller with whom you are attempting to transact in order to verify your identity, as well as the fact that that you are within local reach as a customer.
If you use PayPal as means of logging into external websites or mobile apps, we may share your login status with any third party offering this Service as a login method, as well as the personal and other Account information that you consent to being shared so that the third party can recognise you. PayPal will not give such third party access to your PayPal Account and will only make payments from your Account to that third party with your specific authorisation. You can access, view and control the settings for any such data sharing with merchants when logged into your PayPal account.
If you link your membership of an eligible loyalty scheme to your Account in our mobile app, we may share your loyalty scheme membership ID with any merchant participating in the relevant loyalty scheme when you pay that merchant using PayPal. If you remove your loyalty scheme membership ID from your Account, we will stop sharing this information.
We work with third parties including merchants to enable them to accept or facilitate payments from or to you using the PayPal Services. In doing so, a third party may share information about you with us such as your email address or phone number, when a payment is sent to you or when you are attempting to pay that third party. We use this information to confirm that you are a PayPal customer and that PayPal can be enabled to make a payment, or where a payment is sent to you to send you a notification that you have received a payment. Also, if you request that we validate your status as a PayPal customer with a third party, we will do so. Please note that third parties you buy from and contract with may have their own privacy policies, and PayPal is not responsible for their operations, including but not limited to their information practices.
If you open a PayPal account directly on a third- party website or via a third party application, any information that you enter on that website or application (and not directly through the PayPal Services) will be shared with the owner of such third party website or application and your information may be subject to their privacy policies.
5. Information Security
PayPal is committed to handling your customer information with high standards of information security. We use computer safeguards such as firewalls and data encryption, we enforce physical access controls to our buildings and files, and we authorise access to personal information only for those employees who require it to fulfil their job responsibilities.
For more information on PayPal’s security practices, please see our Safety Advice.
The security of your PayPal account also relies on your protection of your PayPal password. You may not share your PayPal password with anyone. PayPal representatives will never ask you for your password, so any email or other communication requesting your password should be treated as unauthorised and suspicious and forwarded to email@example.com. If you do share your PayPal password with a third party for any reason, including because the third party has promised to provide you additional services such as account aggregation, the third party will have access to your account and your personal information, and you may be responsible for actions taken using your password. If you believe someone else has obtained access to your password, please change it immediately by logging in to your account and changing your Profile settings, and also contact us right away.
6. Accessing and Changing Your Information
You can review the personal information you have provided us and make any desired changes to such information, or to the settings for your PayPal account, at any time by logging in to your account on the PayPal website, selecting My Account, then Profile and changing your preferences. You can also close your account through the PayPal website. If you close your PayPal account, we will mark your account in our database as “Closed”, but will keep your account information in our database. This is necessary in order to deter fraud, by ensuring that persons who try to commit fraud will not be able to avoid detection simply by closing their account and opening a new account. However, if you close your account, your personally identifiable information will not be used by us for any further purposes, nor sold or shared with third parties, except as necessary to prevent fraud and assist law enforcement, or as required by law.
8. IMPORTANT DATA PROTECTION INFORMATION FOR USERS RECEIVING PAYMENTS THROUGH WEBSITE PAYMENTS PRO (INCLUDING VIRTUAL TERMINAL) AND/OR PAYPAL HERE*
* PayPal Here is PayPal POS Functionality within the PayPal Mobile App (as defined in our User Agreement) that enables a User to pay another User (typically a merchant) or anybody to make a direct card payment to that merchant, in each case for goods and services at a physical point of sale (for example, in store).
A GUIDE TO THE USE OF YOUR PERSONAL DATA BY PAYPAL (EUROPE) S.À.R.L. ET CIE, S.C.A. AND CREDIT REFERENCE AGENCIES
SECTION 1: GENERAL INFORMATION ON OUR USE OF CREDIT REFERENCE AGENCIES
Q: What is a credit reference agency?
A: Credit reference agencies (CRAs) collect and maintain information on consumers’ and businesses’ credit behaviour, on behalf of financial institutions and lenders in the UK.
Q: Why do you use them when I have applied to your organisation?
A: Although you have applied to us, PayPal (Europe) S.à.r.l. et Cie, S.C.A. and we will check our own records, we may also contact CRAs to get information on your, your financial and/or business associates’ and your business’ credit behaviour with other organisations. This will help us make the best possible assessment of your overall situation before we make a decision.
Q: Where do they get the information?
A: From publicly available sources, including:
– electoral registers maintained by local authorities;
– County Court Judgments records operated by Registry Trust Limited;
– bankruptcy information held by the Insolvency Service; and
– fraud information from fraud prevention agencies.
Credit information also comes from information on applications to banks, building societies, credit card companies etc and also from the conduct of those accounts.
Q: How will I know if my information is to be sent to a CRA or fraud prevention agency?
A: Organisations are only allowed to send information to CRAs and/or fraud prevention agencies with your agreement and knowledge. You will be told when you apply for Website Payments Pro or PayPal Here if your data will be supplied. The next section of this document will tell you how, when and why we search information at CRAs and what we do with the information we obtain from them. We will also tell you if we plan to send information on you or your business, if you have one, to CRAs.
Q: Why is my data used in this way?
A: We and other organisations want to make the best possible decisions we can, in order to make sure that you, or your business, will be able to carry out your obligations to us. We and other organisations may also use the information to check your identity. In this way we can ensure that we all make responsible decisions. At the same time we also want to make decisions quickly and easily and, by using up-to-date information, provided electronically, we are able to make the most reliable and fair decisions possible.
Q: Who controls what credit reference agencies are allowed to do with my data?
A: All organisations that collect and process personal data are regulated by the Data Protection Act 1998, overseen by the Office of the Information Commissioner. All credit reference agencies are in regular dialogue with the Commissioner. Use of the Electoral Register is controlled under the Representation of the People Act 2000.
Q: Can just anyone look at my data held at credit reference agencies?
A: No, access to your information is very strictly controlled and only those that are entitled to do so may see it. Usually that will only be with your agreement or (very occasionally) if there is a legal requirement.
SECTION 2: WHAT PAYPAL (EUROPE) S.À.R.L. ET CIE, S.C.A. DOES
Please read this section very carefully.
When you apply to us for Website Payments Pro or PayPal Here we may:
Check our own records for information on your PayPal account(s).
Search at credit reference agencies for:
public data on your credit behaviour;
information on the conduct of your personal credit accounts if you are proprietors of a small business; and
information on your business accounts.
Search at fraud prevention agencies for information on you
What we do with the information you supply to us as part of the application:
Information that is supplied to us will be sent to credit reference agencies.
If you give us false or inaccurate information and we suspect fraud, we will record this and may also pass this information to financial and other organisations involved in fraud prevention to protect us, them and our respective customers from theft and fraud.
Your data may also be used by PayPal, to offer your business other products.
With the information that we obtain we will:
Assess your application for Website Payments Pro or PayPal Here;
Verify your identity and the identity of other directors/partners;
Undertake checks for the prevention and detection of fraud and/or money laundering;
Possibly use scoring methods to assess this application and to verify your identity;
Manage your PayPal account(s) with ourselves; and/or
Undertake periodic statistical analysis or testing to ensure the accuracy of existing and future products and services.
Any or all of these processes may be automated.
What we do when you have set up Website Payments Pro or PayPal Here:
Where you have access to and use Website Payments Pro or PayPal Here, we will give details of your PayPal account and other details of your use of Website Payments Pro or PayPal Here (as the case may be), including names and parties to the account, and how you manage it to credit reference agencies.
If you owe us money and do not pay in full and on time, we will tell credit reference agencies.
We may make periodic searches of our own group records, credit reference and fraud prevention agencies to manage your account with us, to take decisions regarding your identity and also credit, including whether to make Website Payments Pro or PayPal Here (as the case may be) available or to continue or extend existing services to you.
If you owe us money and do not make payments that you owe us, we will trace your whereabouts and recover payment.
SECTION 3: WHAT CREDIT REFERENCE AGENCIES DO
When credit reference agencies receive a search from us they will:
Place a search “footprint” on you and/or your business’ credit file whether or not this application proceeds. If the search was for a credit application the record of that search (but not the name of the organisation that carried it out) may be seen by other organisations when you apply for credit in the future.
Link together the previous and subsequent names advised by you, of anyone that is a party to the account.
Supply to us:
Information about you and/or your business or credit information such as previous applications for credit and the conduct of the accounts;
Public information, such as details of County Court Judgments (CCJs) and bankruptcies;
Electoral register information on you and your business partners; and/or
Fraud prevention information.
When information is supplied by us, to them, on your account(s):
Credit reference agencies will record the details that are supplied on your account including previous and subsequent names of the parties
If you owe us money and do not pay in full and on time, credit reference agencies will record the outstanding debt.
Records shared with credit reference agencies remain on file for six years after they are closed whether settled by you or defaulted.
How your data WILL NOT be used by credit reference agencies:
It will not be used to create a blacklist.
It will not be used by the credit reference agency to make a decision.
How your data WILL be used by credit reference agencies:
The information which we, other organisations and fraud prevention agencies provide to the credit reference agencies about you, your financial and/or business associates and your business may be supplied by credit reference agencies to other organisations and used by them to:
Verify your identity if you or your financial or business associate applies for other facilities including all types of insurance applications and claims.
Assist other organisations to make decisions on credit, credit related services and on motor, household, life and other insurance proposals and insurance claims, about you, your partner, other members of your household or your business.
Trace your whereabouts and recover payment if you do not make payments that you owe.
Conduct checks for the prevention and detection of crime including fraud and/or money laundering.
Manage your personal, your partner’s and/or business account
Manage your personal, your partner’s and/or business insurance policies (if you have one/any).
Undertake statistical analysis and system testing.
Your data may also be used for other purposes for which you give your specific permission or, in very limited circumstances, when required by law or where permitted under the terms of the Data Protection Act 1998.
Your data may also be used to offer you other products, but only if you have not opted out of receiving such offers.
How to Find Out More
You can contact credit reference agencies currently operating in the UK (the main ones are listed below). The information they hold may not be the same so it is worth contacting them all. They will charge a small statutory fee.
CallCredit Ltd., Consumer Services Team, PO Box 491, Leeds, LS3 1WZ
0870 0601 414 (UK)
Experian, CreditExpert, PO Box 7710, Nottingham, NG80 7WE
0870 2416 212 (UK)
Equifax Plc, Credit File Advice Centre, PO Box 1140, Bradford, BD1 5US
0870 0100 583 (UK)
Dun & Bradstreet Ltd, Customer Service Department, Marlow International, Parkway, Marlow, Bucks, SL7 1AJ
0845 145 1700 (UK)
If you want to receive details of those fraud prevention agencies from whom we obtain and with whom we record information about you, write to us at PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal L-2449, Luxembourg. You have a legal right to these details.