At Can Do Payments Ltd, we are committed to protecting and respecting your privacy. This policy explains how we collect, use, and store your personal information when you use our services, including when you visit our website, contact us, or submit your payment processing statements for analysis.

1. Who we are

Can Do Payments Ltd (“we,” “us,” “our”) is a payment services provider registered in the UK. We offer businesses payment processing services and related solutions.

Company name: Can Do Payments Ltd
Address: The Technology Centre, Inward Way, Ellesmere Port, CH65 3EN
Email: hello@candopayments.com
Phone: 0800 368 2989

2. What information we collect

We may collect and process the following types of personal data:

Contact information: Name, email address, phone number, and business name.
Business information: Information related to your business, such as the industry, location, and services you are interested in.
Financial information: When you submit your payment processing statements for analysis, we may collect transactional data, including the payment methods, fees, and volumes associated with your business.
Technical information: Information about your visit to our website, such as your IP address, browser type, and usage data (cookies and similar technologies).
Communication data: Any information you provide when you contact us, including inquiries or feedback.

3. How we use your information

Service provision: To provide you with our payment processing services, analyse your current payment provider's fees, and offer a tailored solution.
Communication: To communicate with you regarding your inquiries, provide updates on your analysis, and send service-related information.
Marketing: To send you marketing communications, offers, and promotions about our services to which you have consented.
Legal compliance: To comply with our legal and regulatory obligations.

4. Legal basis for processing

Consent: For marketing communications and where you have voluntarily submitted your payment processing statements for analysis.
Contractual necessity: To fulfil our obligations under any contract with you.
Legitimate interests: To improve our services, customer relationship management, and direct marketing (where applicable).
Legal obligation: To comply with legal or regulatory requirements.

5. How we share your information

We do not sell or rent your data. However, we may share your information with:

Service providers: Third-party service providers who assist us in delivering our services (e.g. hosting providers and payment processors).
Business transfers: Your data may be transferred to the new owner if our business is sold or merged with another company.
Legal obligations: We may disclose your information if required by law or in response to legal requests.

6. Data retention

We will retain your personal data only for as long as necessary to fulfil the purposes for which we collected it, including satisfying any legal, accounting, or reporting requirements. For financial data such as payment processing statements, we will retain this information for six months after completing our analysis and delivering our proposed solution unless longer retention is required by law.

7. Data security

We implement appropriate technical and organisational security measures to protect your personal data from unauthorised access, loss, misuse, or alteration. This includes the use of encryption technologies for data transmission and secure servers for data storage.

8. Your data protection rights

Under the UK GDPR, you have the following rights regarding your personal data:

Right to access: You have the right to request copies of your personal data.
Right to rectification: You have the right to request that we correct any information you believe is inaccurate.
Right to erasure: You have the right to request that we erase your personal data under certain conditions.
Right to restrict processing: You have the right to request that we restrict the processing of your personal data.
Right to object: You have the right to object to the processing of your personal data.
Right to data portability: You have the right to request that we transfer your data to another organisation.

If you wish to exercise any of these rights, please contact us using the details above.

9. Cookies

Our website uses cookies and similar technologies. Please see our Cookie Policy for more information.

9a. WhatsApp communications

You can contact us via WhatsApp on 01244 955 444. When you do, we collect and process the messages, phone number and any media (e.g. photos of statements) you send us in order to answer your enquiry or provide support. Messages are handled through Zoho Desk under our existing data processor arrangements. Meta Platforms Ireland Limited processes message delivery and metadata as an independent controller under WhatsApp's own privacy policy.

Lawful basis: legitimate interests (responding to enquiries) or performance of a contract (existing customers).
Retention: non-customer enquiry threads are closed and purged after 12 months; customer support threads are retained in line with our general retention policy above.
Sensitive data: please do not send full card numbers, PINs or full bank details over WhatsApp. If received, we delete the message from Desk and ask you to resend via a secure channel.
Your rights: subject access and erasure requests cover WhatsApp threads held in Desk as well as CRM records — see section 8.

10. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date.

11. Contact us

If you have any questions about this Privacy Policy, please contact us at:

Email: hello@candopayments.com
Phone: 0800 368 2989
Address: The Technology Centre, Inward Way, Ellesmere Port, CH65 3EN