Privacy Policy

Last updated: 28 August 2026

1. Our Details

Legal Entity: M World Business Solutions Ltd
 
Unit 3 Green Farm
Abbots Ripton
Huntingdon
Cambridgeshire
PE28 2PF
United Kingdom
 
 

2. Categories of Personal Information We Collect

Depending on the Services you use, we may collect the following categories of personal information:
 

Identity Information

  • Name
  • Business name
  • Job title
  • Company registration details

Contact Information

  • Email address
  • Telephone number
  • Business address

Merchant Information

  • Merchant ID
  • Clover Merchant ID
  • Store information
  • Terminal identifiers
  • Account settings

Transaction Information

Where required to provide our Services:
  • Transaction references
  • Order references
  • Refund references
  • Payment status
  • Settlement information
We do not collect or store full payment card numbers, CVV codes or PIN data.
 

Technical Information

  • IP Address
  • Device identifiers
  • Browser type
  • Operating system
  • Application version
  • Diagnostic information
  • Error reports

Usage Information

  • Login history
  • Audit logs
  • Security events
  • Feature usage
  • Support interactions

Communications

Information you voluntarily provide when contacting us via:
  • Email
  • Telephone
  • Website forms
  • Support tickets
  • Live Chat
  • Our AI Assistant (“Mia”)

3. Sources of Personal Information

Personal information may be collected from:
 
  • Merchants using our Services
  • Authorised users
  • Clover POS devices
  • Clover APIs
  • Integrated payment gateways
  • Third-party software integrations
  • Our websites
  • Customer support requests
  • Cookies and similar technologies

4. Why We Process Personal Information

We process personal information to:
 
  • Create and manage customer accounts
  • Deliver our software and payment services
  • Process transactions
  • Provide technical support
  • Respond to enquiries
  • Maintain platform security
  • Detect fraud
  • Improve our Services
  • Produce analytics
  • Maintain audit records
  • Comply with legal obligations
  • Send service communications
  • Deliver marketing communications where permitted by law

5. Legal Basis for Processing

Under the UK GDPR and applicable data protection legislation, we rely upon one or more of the following lawful bases:
 

Contract

Where processing is necessary to provide our Services.
 

Legal Obligation

Where processing is required to comply with taxation, accounting, regulatory or legal requirements.
 

Legitimate Interests

Including:
 
  • Fraud prevention
  • Cybersecurity
  • Product development
  • Customer support
  • Internal administration
  • Service monitoring
  • Business continuity

Consent

Where consent is required, including:
 
  • Marketing communications
  • Optional cookies
  • Optional integrations

6. Withdrawal of Consent

Where processing is based on your consent, you may withdraw that consent at any time by contacting:
 
Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
 

7. Data Controller and Data Processor

Depending upon the Services being provided, MWBS may act as either a Data Controller or a Data Processor.
 
We act as a Data Controller when:
 
  • Managing customer accounts
  • Providing quotations
  • Billing customers
  • Responding to enquiries
  • Sending marketing communications
  • Operating our website
We act as a Data Processor when:
 
Processing customer or transaction data solely on behalf of Merchants using our payment services or Clover applications.
Where MWBS acts as a Data Processor, the Merchant remains the Data Controller responsible for determining the purposes and means of processing.
 

8. Sharing Personal Information

We may share personal information, where necessary and in accordance with applicable data protection laws, with carefully selected third parties who provide services on our behalf, including:
 
  • Cloud hosting providers
  • Clover and affiliated service providers
  • Payment processors
  • Technology partners
  • Software providers
  • Cybersecurity providers
  • IT support providers
  • Analytics providers
  • Our appointed marketing agency and digital marketing partners, who assist us with website management, search engine optimisation (SEO), digital advertising, lead generation, marketing campaigns, customer communications and website analytics. These providers process personal information only in accordance with our instructions and under appropriate contractual safeguards.
  • Professional advisers including accountants, auditors and solicitors
  • Government authorities, regulators, law enforcement agencies or courts where legally required
All third parties processing personal information on our behalf are contractually required to protect that information and process it only for the agreed purposes.
M World Business Solutions Ltd does not sell, rent or trade personal information to third parties for their own commercial or marketing purposes.
 

9. International Transfers

Some of our service providers may process information outside the United Kingdom or European Economic Area.
 
Where international transfers occur, MWBS ensures appropriate safeguards are implemented, including:
 
  • UK International Data Transfer Agreement (IDTA)
  • EU Standard Contractual Clauses (SCCs)
  • Transfers to countries recognised as providing adequate protection
  • Other lawful safeguards recognised under applicable data protection legislation

10. Data Retention

We retain personal information only for as long as necessary for the purposes for which it was collected.
 
Typical retention periods include:
 
  • Customer account information – whilst the account remains active and for up to seven years afterwards where required by law
  • Transaction records – in accordance with legal and financial obligations
  • Support requests – up to six years
  • Security logs – up to two years
  • Marketing preferences – until consent is withdrawn
Where information is no longer required, it will be securely deleted or anonymised.
 

11. Cookies and Tracking Technologies

Our website and applications use cookies and similar technologies to:
 
  • Maintain website functionality
  • Authenticate users
  • Improve security
  • Measure website performance
  • Produce anonymous analytics
  • Remember user preferences
You may control or disable cookies through your browser settings.
Please note that disabling cookies may affect certain website functionality.
Further information is available in our Cookie Policy.
 

12. Automated Decision Making

MWBS may use automated systems to assist with:
 
  • Fraud detection
  • Security monitoring
  • Transaction risk analysis
  • System diagnostics
  • Performance monitoring
These systems assist our staff but are not solely relied upon to make decisions producing legal or similarly significant effects on individuals.
 

13. AI Assistant (“Mia”)

Our website includes an AI-powered assistant known as Mia.
 
Information submitted through Mia may be processed to:
 
  • Answer customer enquiries
  • Improve customer support
  • Improve our AI services
  • Maintain security
  • Diagnose technical issues
Interactions may be securely logged and retained in accordance with this Privacy Policy.
 

14. Children’s Privacy

Our Services are designed for businesses and business users.
They are not intended for children under the age of 18, and we do not knowingly collect personal information from children.
Should we become aware that personal information relating to a child has been collected, we will take appropriate steps to delete that information promptly.
 

15. Security

MWBS employs appropriate technical and organisational security measures including:
 
  • Encryption
  • Secure hosting
  • Authentication controls
  • Access management
  • Firewall protection
  • Monitoring systems
  • Audit logging
  • Regular software maintenance and updates
Whilst we employ industry-standard safeguards, no internet-based service can guarantee absolute security.
 

16. Your Rights

Subject to applicable law, you may have the right to:
 
  • Access your personal information
  • Correct inaccurate information
  • Request deletion
  • Restrict processing
  • Object to processing
  • Request data portability
  • Withdraw consent
  • Lodge a complaint with the Information Commissioner’s Office (ICO)
Requests should be sent to:
 

17. Payment Processing Agreements, Acquiring Partners and Service Resilience

M World Business Solutions Ltd (“MWBS”) provides and arranges payment processing services using hardware, software, systems, integrations and technology owned, operated, licensed or controlled by MWBS (“MWBS Technology”) and works with multiple acquiring banks, payment service providers, processors and other payment partners (“Acquiring Partners”).

17.1 Payment Processing Services Agreement

Where you enter into, sign or electronically accept a Payment Processing Services Agreement with MWBS (the “Payment Processing Agreement”), that agreement governs the provision of the relevant payment processing hardware, software, technology and associated services.

By signing or electronically accepting the Payment Processing Agreement, you expressly acknowledge and authorise MWBS to work with one or more Acquiring Partners and, where reasonably necessary, to use and share relevant information for the purpose of arranging, establishing, maintaining and supporting your payment processing and acquiring services, subject at all times to applicable data protection law.

17.2 Information We May Share

Information processed or shared with an existing or prospective Acquiring Partner may include, where relevant:

  • information about your business and its activities;
  • information supplied as part of a merchant or payment processing application;
  • trading and transaction information;
  • anticipated or historic transaction volumes and values;
  • business and financial information;
  • contact and identification information;
  • information relating to directors, partners, shareholders, beneficial owners and authorised representatives;
  • information required for identity, business and ownership verification;
  • information required for underwriting, fraud prevention, anti-money laundering and other regulatory or compliance purposes; and
  • other information reasonably required by an Acquiring Partner to assess, establish, maintain or support an acquiring relationship.

We will only share personal data where we have an appropriate lawful basis and where the sharing is reasonably necessary and proportionate for the relevant purpose.

17.3 Multiple and Alternative Acquiring Partners

MWBS may process and share relevant information with more than one Acquiring Partner where reasonably necessary to assess, arrange, establish, maintain or support payment processing services.

This may include identifying, introducing, arranging or facilitating primary, secondary, additional, replacement or alternative acquiring arrangements.

We may do this for purposes including:

  • reducing dependency on a single Acquiring Partner;
  • operational resilience;
  • business continuity;
  • contingency planning;
  • disaster recovery;
  • maintaining or protecting the availability of payment processing services; and
  • reducing the risk or impact of disruption to a merchant’s payment processing services.

17.4 Changes to Acquiring Partners

We may process and share relevant information with an alternative or prospective Acquiring Partner where an existing Acquiring Partner is unable or unwilling to continue providing services, suspends or restricts services, experiences an outage or other disruption, changes its underwriting criteria, risk appetite, commercial or technical requirements, or otherwise ceases to be suitable or available for the relevant merchant services.

We may also do so where MWBS ceases, or intends to cease, working with, supporting, integrating with or referring business to a particular Acquiring Partner, or where the commercial, contractual, technical or operational relationship between MWBS and an Acquiring Partner ends, is suspended or materially changes.

Where reasonably necessary to support continuity of service, relevant information may be provided to a prospective alternative or additional Acquiring Partner before an existing acquiring arrangement ends, enabling that Acquiring Partner to undertake assessment, underwriting, verification, compliance and onboarding processes.

17.5 MWBS Technology

Where acquiring services are integrated with or supported by MWBS Technology, information may also be processed through MWBS Technology for the purposes of operating, supporting, administering and maintaining payment processing services and facilitating connections or transitions between Acquiring Partners.

The fact that services are provided through or supported by MWBS Technology does not alter the respective data protection responsibilities of MWBS or an Acquiring Partner.

Depending on the circumstances, an Acquiring Partner may process personal data as an independent data controller and may provide its own privacy notice explaining how it processes personal data.

17.6 Our Lawful Basis

The signing or electronic acceptance of a Payment Processing Agreement provides the contractual authority described in that agreement for MWBS to arrange and facilitate the relevant payment processing and acquiring services. It does not mean that MWBS relies on consent as the lawful basis for every processing activity involving personal data.

Our lawful basis for processing and sharing personal data will depend upon the circumstances and may include processing necessary for the performance of a contract or to take steps before entering into a contract, compliance with a legal obligation, and our legitimate interests or those of relevant third parties in arranging, operating, securing and maintaining appropriate and resilient payment processing services.

Where required by applicable data protection law, we will identify and apply the appropriate lawful basis before processing or sharing personal data.

 

18. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our Services, legal obligations or business practices.
 
Where material changes are made, we may notify customers by one or more of the following methods:
 
  • Email notification
  • Website announcement
  • Merchant Portal notification
  • In-application notification
The Effective Date shown at the top of this Policy will always indicate the latest published version.
 

19. Contact Us

If you have any questions regarding this Privacy Policy or your personal information, please contact:
 
Privacy Officer
M World Business Solutions Ltd
Unit 3 Green Farm
Abbots Ripton
Huntingdon
Cambridgeshire
PE28 2PF
United Kingdom
 
 
If you remain dissatisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at https://ico.org.uk.

Talk To An Expert Today

We have helped hundreds of businesses throughout the UK save money on their rates. Book a review today!

gold-circle

Send enquiry