Last updated 13 September 2026
This policy explains what personal data CleonPay handles, why, and the rights you have. CleonPay is a trading name providing payment technology.
For your CleonPay account and our own operations, CleonPay is the data controller.
When we process payment data on behalf of a merchant, we act as that merchant's processor and follow their instructions and the merchant agreement.
Account and onboarding data, such as business details, contact details, and identity or verification documents where the law requires them.
Transaction data, such as amount, currency, payment method, status, timestamps, references and the payer or recipient details a scheme or bank requires, for example a name, email, IBAN or sort code.
Technical data, such as IP address, device and browser information, and the logs needed to run and secure the service.
Communications you send to us.
Card numbers are captured over encrypted connections and passed directly to the regulated payment processor. CleonPay never stores a full card number and never stores a card security code.
Bank and payout details are used only to carry out the payout you request.
To provide and operate the service, process payments and payouts, and give support.
To prevent and detect fraud and to meet anti money laundering and other legal duties.
To keep the service secure and to improve it.
We rely on performance of a contract, compliance with legal obligations, our legitimate interests in running and securing the service, and consent where it is required.
The regulated financial institutions, payment partners and banks that process and settle transactions.
Service providers who help us run the platform, under confidentiality obligations.
Regulators, authorities or law enforcement where we are legally required to share it.
We do not sell personal data.
Data is stored within the EU or the UK. Where data is transferred outside these areas, we use appropriate safeguards.
Transaction and onboarding records are kept for as long as financial and anti money laundering law requires, and are deleted after that period. Live customer records are not deleted before the end of their required retention.
We use encryption, access controls and monitoring to protect data. No system is perfectly secure, but we work continuously to reduce risk.
You may ask for access to your data, correction, deletion, restriction or portability, and you may object to certain processing. You may also complain to your data protection authority.
To make a request, email info@cleonpay.com.
We use only the cookies needed to run the dashboard and keep sessions secure.
The service is for businesses and is not intended for anyone under 18.
We may update this policy. The current version is always on this page.
Privacy questions can be sent to info@cleonpay.com.