Privacy Policy
Last updated: 28 August 2026
1. Our Details
Abbots Ripton
Huntingdon
Cambridgeshire
PE28 2PF
United Kingdom
2. Categories of Personal Information We Collect
Identity Information
- Name
- Business name
- Job title
- Company registration details
Contact Information
- Email address
- Telephone number
- Business address
Merchant Information
- Merchant ID
- Clover Merchant ID
- Store information
- Terminal identifiers
- Account settings
Transaction Information
- Transaction references
- Order references
- Refund references
- Payment status
- Settlement information
Technical Information
- IP Address
- Device identifiers
- Browser type
- Operating system
- Application version
- Diagnostic information
- Error reports
Usage Information
- Login history
- Audit logs
- Security events
- Feature usage
- Support interactions
Communications
- Telephone
- Website forms
- Support tickets
- Live Chat
- Our AI Assistant (“Mia”)
3. Sources of Personal Information
- Merchants using our Services
- Authorised users
- Clover POS devices
- Clover APIs
- Integrated payment gateways
- Third-party software integrations
- Our websites
- Customer support requests
- Cookies and similar technologies
4. Why We Process Personal Information
- Create and manage customer accounts
- Deliver our software and payment services
- Process transactions
- Provide technical support
- Respond to enquiries
- Maintain platform security
- Detect fraud
- Improve our Services
- Produce analytics
- Maintain audit records
- Comply with legal obligations
- Send service communications
- Deliver marketing communications where permitted by law
5. Legal Basis for Processing
Contract
Legal Obligation
Legitimate Interests
- Fraud prevention
- Cybersecurity
- Product development
- Customer support
- Internal administration
- Service monitoring
- Business continuity
Consent
- Marketing communications
- Optional cookies
- Optional integrations
6. Withdrawal of Consent
7. Data Controller and Data Processor
- Managing customer accounts
- Providing quotations
- Billing customers
- Responding to enquiries
- Sending marketing communications
- Operating our website
8. Sharing Personal Information
- Cloud hosting providers
- Clover and affiliated service providers
- Payment processors
- Technology partners
- Software providers
- Cybersecurity providers
- IT support providers
- Analytics providers
- Our appointed marketing agency and digital marketing partners, who assist us with website management, search engine optimisation (SEO), digital advertising, lead generation, marketing campaigns, customer communications and website analytics. These providers process personal information only in accordance with our instructions and under appropriate contractual safeguards.
- Professional advisers including accountants, auditors and solicitors
- Government authorities, regulators, law enforcement agencies or courts where legally required
9. International Transfers
- UK International Data Transfer Agreement (IDTA)
- EU Standard Contractual Clauses (SCCs)
- Transfers to countries recognised as providing adequate protection
- Other lawful safeguards recognised under applicable data protection legislation
10. Data Retention
- Customer account information – whilst the account remains active and for up to seven years afterwards where required by law
- Transaction records – in accordance with legal and financial obligations
- Support requests – up to six years
- Security logs – up to two years
- Marketing preferences – until consent is withdrawn
11. Cookies and Tracking Technologies
- Maintain website functionality
- Authenticate users
- Improve security
- Measure website performance
- Produce anonymous analytics
- Remember user preferences
12. Automated Decision Making
- Fraud detection
- Security monitoring
- Transaction risk analysis
- System diagnostics
- Performance monitoring
13. AI Assistant (“Mia”)
- Answer customer enquiries
- Improve customer support
- Improve our AI services
- Maintain security
- Diagnose technical issues
14. Children’s Privacy
15. Security
- Encryption
- Secure hosting
- Authentication controls
- Access management
- Firewall protection
- Monitoring systems
- Audit logging
- Regular software maintenance and updates
16. Your Rights
- Access your personal information
- Correct inaccurate information
- Request deletion
- Restrict processing
- Object to processing
- Request data portability
- Withdraw consent
- Lodge a complaint with the Information Commissioner’s Office (ICO)
17. Payment Processing Agreements, Acquiring Partners and Service Resilience
M World Business Solutions Ltd (“MWBS”) provides and arranges payment processing services using hardware, software, systems, integrations and technology owned, operated, licensed or controlled by MWBS (“MWBS Technology”) and works with multiple acquiring banks, payment service providers, processors and other payment partners (“Acquiring Partners”).
17.1 Payment Processing Services Agreement
Where you enter into, sign or electronically accept a Payment Processing Services Agreement with MWBS (the “Payment Processing Agreement”), that agreement governs the provision of the relevant payment processing hardware, software, technology and associated services.
By signing or electronically accepting the Payment Processing Agreement, you expressly acknowledge and authorise MWBS to work with one or more Acquiring Partners and, where reasonably necessary, to use and share relevant information for the purpose of arranging, establishing, maintaining and supporting your payment processing and acquiring services, subject at all times to applicable data protection law.
17.2 Information We May Share
Information processed or shared with an existing or prospective Acquiring Partner may include, where relevant:
- information about your business and its activities;
- information supplied as part of a merchant or payment processing application;
- trading and transaction information;
- anticipated or historic transaction volumes and values;
- business and financial information;
- contact and identification information;
- information relating to directors, partners, shareholders, beneficial owners and authorised representatives;
- information required for identity, business and ownership verification;
- information required for underwriting, fraud prevention, anti-money laundering and other regulatory or compliance purposes; and
- other information reasonably required by an Acquiring Partner to assess, establish, maintain or support an acquiring relationship.
We will only share personal data where we have an appropriate lawful basis and where the sharing is reasonably necessary and proportionate for the relevant purpose.
17.3 Multiple and Alternative Acquiring Partners
MWBS may process and share relevant information with more than one Acquiring Partner where reasonably necessary to assess, arrange, establish, maintain or support payment processing services.
This may include identifying, introducing, arranging or facilitating primary, secondary, additional, replacement or alternative acquiring arrangements.
We may do this for purposes including:
- reducing dependency on a single Acquiring Partner;
- operational resilience;
- business continuity;
- contingency planning;
- disaster recovery;
- maintaining or protecting the availability of payment processing services; and
- reducing the risk or impact of disruption to a merchant’s payment processing services.
17.4 Changes to Acquiring Partners
We may process and share relevant information with an alternative or prospective Acquiring Partner where an existing Acquiring Partner is unable or unwilling to continue providing services, suspends or restricts services, experiences an outage or other disruption, changes its underwriting criteria, risk appetite, commercial or technical requirements, or otherwise ceases to be suitable or available for the relevant merchant services.
We may also do so where MWBS ceases, or intends to cease, working with, supporting, integrating with or referring business to a particular Acquiring Partner, or where the commercial, contractual, technical or operational relationship between MWBS and an Acquiring Partner ends, is suspended or materially changes.
Where reasonably necessary to support continuity of service, relevant information may be provided to a prospective alternative or additional Acquiring Partner before an existing acquiring arrangement ends, enabling that Acquiring Partner to undertake assessment, underwriting, verification, compliance and onboarding processes.
17.5 MWBS Technology
Where acquiring services are integrated with or supported by MWBS Technology, information may also be processed through MWBS Technology for the purposes of operating, supporting, administering and maintaining payment processing services and facilitating connections or transitions between Acquiring Partners.
The fact that services are provided through or supported by MWBS Technology does not alter the respective data protection responsibilities of MWBS or an Acquiring Partner.
Depending on the circumstances, an Acquiring Partner may process personal data as an independent data controller and may provide its own privacy notice explaining how it processes personal data.
17.6 Our Lawful Basis
The signing or electronic acceptance of a Payment Processing Agreement provides the contractual authority described in that agreement for MWBS to arrange and facilitate the relevant payment processing and acquiring services. It does not mean that MWBS relies on consent as the lawful basis for every processing activity involving personal data.
Our lawful basis for processing and sharing personal data will depend upon the circumstances and may include processing necessary for the performance of a contract or to take steps before entering into a contract, compliance with a legal obligation, and our legitimate interests or those of relevant third parties in arranging, operating, securing and maintaining appropriate and resilient payment processing services.
Where required by applicable data protection law, we will identify and apply the appropriate lawful basis before processing or sharing personal data.
18. Changes to this Privacy Policy
- Email notification
- Website announcement
- Merchant Portal notification
- In-application notification
19. Contact Us
Abbots Ripton
Huntingdon
Cambridgeshire
PE28 2PF
United Kingdom
Talk To An Expert Today
We have helped hundreds of businesses throughout the UK save money on their rates. Book a review today!