Privacy Policy

This Privacy Policy applies to our website, and its associated subdomains (collectively, our "Service") alongside our application, Spoynt. By accessing or using our Service, you signify that you have read, understood, and agree to our collection, storage, use, and disclosure of your personal information as described in this Privacy Policy and our Terms of Service.

Effective from: 25 Sep, 2026

Spoynt Limited ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how your personal information is collected, used, and disclosed by Spoynt.

1. Definitions and key terms

To ensure clarity throughout this Privacy Policy, the following terms are strictly defined:

Cookie
A small data file generated by a website and stored by your web browser to identify your browser, provide analytics, or remember preferences like language or login details.
Company
Refers to Spoynt Limited, located at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom, the entity responsible for your information under this policy.
Country
The United Kingdom, where Spoynt Limited and its owners/founders are based.
Customer
Any company, organization, or individual that registers to use Spoynt's services to manage relationships with their consumers or service users.
Device
Any internet-connected device (e.g., phone, tablet, computer) used to access Spoynt's services.
IP Address
A unique number assigned to your device when connected to the internet, often indicating your geographic location.
Personnel
Individuals employed by or contracted to Spoynt to perform services.
Personal Data
Information that can identify an individual, either directly or indirectly, including in combination with other data like a personal identification number, as defined under GDPR and UK GDPR.
Service
The payment processing and related services provided by Spoynt, as described on our platform.
Third-Party Service
External entities such as advertisers or analytics providers that enhance our content or services.
Website
Spoynt's online platforms, mobile applications, accessible at spoynt.com, spoynt.co.uk and spush.co.uk.
You
Any person or entity registered to use Spoynt's services.

2. Introduction

Spoynt Limited, registered in England and Wales, acts as the data controller for your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Where applicable, we also comply with the EU General Data Protection Regulation (GDPR) for users in the European Economic Area (EEA). Our registered office is:

71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom

This Privacy Policy explains how we collect, use, and disclose information from users, focusing on data tied to financial transactions. By accessing our websites spoynt.com, spoynt.co.uk and spush.co.uk, subdomains, mobile application (collectively, the "Sites"), or payment processing services, you agree to this policy. If you disagree, please do not use our services.

3. Information We Collect

We gather various types of information to deliver and enhance our payment processing services, in line with GDPR and UK GDPR requirements.

4. Your Rights

Under GDPR Chapter III and UK GDPR, you have these rights:

  • Access: Request your personal data (Article 15).
  • Rectification: Correct inaccurate data (Article 16).
  • Erasure: Request deletion (“right to be forgotten,” Article 17), subject to legal retention obligations.
  • Restriction: Limit processing in specific cases (Article 18).
  • Portability: Receive your data in a structured format (Article 20).
  • Objection: Oppose processing based on legitimate interests or for marketing (Article 21).
  • Withdraw Consent: Where processing relies on consent (Article 7).
  • Complain: Lodge a complaint with the UK Information Commissioner’s Office (ICO) at www.ico.org.uk or your local EEA supervisory authority.

To exercise these rights, contact our Data Protection Office: privacy@spush.co.uk. We will respond within one month, as required by GDPR/UK GDPR, extendable by two months for complex requests.