Last Updated: September 2025

Valegro Pay Ltd (“we”, “our”, “us”) respects your privacy and is committed to protecting your personal data. This Privacy Notice explains how we collect, use, store, and protect your information when you visit our website www.valegropay.com or use our services. It also outlines your rights under data protection law.

1. Who We Are

Valegro Pay Ltd is a company registered in the United Kingdom. We provide payment solutions and financial technology services.

If you have any questions about this Privacy Notice, you can contact us at:
Email: info@valegropay.com
Postal Address: Valegro Pay Ltd, Ealing House, 33 Hanger Lane, London, W5 3HJ, United Kingdom

2. Information We Collect

We may collect and process the following types of information:

  • Personal identification data: name, email address, phone number. Any information capable of identifying an individual. It does not include anonymised data.
  • Technical data: IP address, browser type, device information.
  • Usage data: pages visited, time spent on our website, and interactions.
  • Transaction data: payment details and billing information (where required to provide our services).
  • Communication Data: that includes any communication that you send to us whether that be through the contact form on our website, through email, text, social media messaging, social media posting or any other communication that you send us. We process this data for the purposes of communicating with you, for record keeping and for the establishment, pursuance or defence of legal claims. Our lawful ground for this processing is our legitimate interests which in this case are to reply to communications sent to us, to keep records and to establish, pursue or defend legal claims.

3. How We Collect Your Information

  • Directly from you when you fill out forms on our website, contact us, or register for services.
  • Automatically via cookies and essential website technologies when you browse our website.
  • From third-party partners, such as payment providers, where necessary.

4. How We Use Your Information

We use your information to:

  • Provide and manage our services.
  • Process payments and transactions.
  • Communicate with you about updates, services, or inquiries.
  • Improve our website and customer experience.
  • Comply with legal and regulatory obligations.

5. Legal Basis for Processing

We process your personal data under the following legal grounds:

  • Contractual necessity – to deliver services you request.
  • Legal obligations – to comply with UK laws and regulations.
  • Legitimate interests – to improve our services and protect against fraud.
  • Consent – where you have given explicit consent (e.g., for marketing communications).

6. Sharing Your Information

We may share your personal data with:

  • Trusted third-party service providers (such as payment processors and IT support).
  • Regulators and law enforcement agencies when legally required.
  • Business partners where you have consented.
  • We may send your information to Clients in order to demonstrate our compliance processes are correct. This includes information in your file to ensure you are engaged correctly with our business. This also includes any call logs to demonstrate that your registration and status has been evaluated correctly that information on contracting opportunities are in accordance with our terms of business.
  • Where required, we may also share your personal data with our client (and their advisors) in relation to any requests necessary to deal with any challenges as regards to your contractual and employment status, this includes sharing information in regards to HMRC and Employment Tribunal issues.
  • We may have to share your personal data with third parties, including third-party service providers for example because it is necessary to administer the working relationship with you or where we have another legitimate interest in doing so. Third party providers may carry out the following services: accounting and payroll, pension administration, benefits provision and administration, IT services.

We require all third parties to whom we transfer your data to respect the security of your personal data and to treat it in accordance with the law. We only allow such third parties to process your personal data for specified purposes and in accordance with our instructions.

We never sell your personal information.

7. Cookies and Tracking Technologies

Our website uses only essential cookies necessary for its proper operation. We do not use Google Analytics, advertising trackers, or third-party marketing cookies.

8. Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. When deciding what the correct time is to keep the data for we look at its amount, nature and sensitivity, potential risk of harm from unauthorised use or disclosure, the processing purposes, if these can be achieved by other means and legal requirements.

For tax purposes the law requires us to keep basic information about our customers (including Contact, Identity, Financial and Transaction Data) for six years after they stop being customers.

In some circumstances we may anonymise your personal data for research or statistical purposes in which case we may use this information indefinitely without further notice to you.

9. Your Rights

Under the UK GDPR, you have the following rights:

  • Access to your personal data.
  • Correction of inaccurate or incomplete data.
  • Erasure of your data (“right to be forgotten”).
  • Restriction of processing.
  • Data portability.
  • Objection to processing.
  • Withdraw consent at any time (where processing is based on consent).

To exercise your rights, please contact us at info@valegropay.com.

10. Security

We have put in place security measures to prevent your personal data from being accidentally lost, used, altered, disclosed, or accessed without authorisation. We also allow access to your personal data only to those employees and partners who have a business need to know such data. They will only process your personal data on our instructions and they must keep it confidential.

We have procedures in place to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach if we are legally required to.

11. International Transfers

Some of our third-party service providers may be located outside the United Kingdom. Where your personal data is transferred outside the UK, we ensure that it is protected by implementing one or more of the following safeguards:

  • The country has been designated by the UK Government as providing an adequate level of protection for personal data (adequacy regulations).
  • We use Standard Contractual Clauses (SCCs) or the UK International Data Transfer Agreement (IDTA) approved by the Information Commissioner’s Office.
  • We apply other appropriate safeguards permitted by UK data protection law.

In some cases, where no other safeguard is available, we may rely on your explicit consent for a specific transfer. In such cases, you will be fully informed of the potential risks and your right to withdraw your consent at any time.

12. Cookies

You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly. For more information about the cookies we use, please see our cookie policy.

13. Changes to This Notice

We may update this Privacy Notice from time to time. The latest version will always be posted on this page with the date of revision.