Last updated: 7 November 2026
Privacy policy
Last updated: 7 November 2026
This policy explains how Fyno collects, uses and protects personal information. We've tried to keep it short and in plain English. If anything is unclear, contact us at support@fynopayments.co.uk.
1. Who we are
Fyno is a trading name of Simon Webb, a sole trader based in the United Kingdom.
- Address: [Business address]
- Email: support@fynopayments.co.uk
- Website: fynopayments.co.uk
- ICO registration number: [ICO registration number]
Fyno provides software that lets businesses send payment requests and get paid by their customers through "Pay by bank" (open banking). Fyno is not a bank and does not hold, receive or transfer money. Payments are initiated by our regulated payment partner (see section 6), and money goes directly from the customer's bank account to the business's bank account.
2. Our role: controller or processor
How we handle your information depends on who you are:
| Who you are | Our role | What that means |
|---|---|---|
| A visitor to our website | Controller | We decide how your information is used, and this policy applies in full |
| A business using Fyno, or a member of its team | Controller | We decide how your account information is used, and this policy applies in full |
| A customer paying a business through a Fyno payment link | Processor | The business you are paying decides how your information is used. We process it on their behalf and under their instructions. Their privacy notice applies, and you should contact them first about your information. This policy explains what we do as their processor |
Our payment partner acts as an independent controller for the payment itself and will give you its own privacy notice during the payment.
3. Information we collect
Website visitors
- Information you give us, such as your name, email, phone number, business name and message when you join a waitlist, book a demo, use the savings calculator or contact us
- Technical information, such as IP address, browser, device and pages visited (see our Cookie policy)
Businesses and their team members
- Account details: name, email, phone number, job role, login details and security settings (such as multi-factor authentication)
- Business details: legal name, trading name, company number, address, industry, logo, expected payment volumes, and the verification status and merchant ID given to us by our payment partner. We do not store identity documents; these are collected by our payment partner
- Billing details: subscription plan, invoices and payment history. Card or Direct Debit details for your Fyno subscription are handled by Stripe, not stored by us
- Usage information: actions taken in the app, audit logs, IP addresses and device information
- Communications: support requests, feedback and call or demo notes
Customers paying a business (processed on the business's behalf)
- Name, mobile number and email address
- Job or payment details: amount, description, reference and payment plan
- Bank chosen to pay with (we remember this to make later payments quicker)
- Payment status and timestamps returned by our payment partner, for example "completed" or "failed"
- Messages sent to you (SMS, WhatsApp or email) and their delivery status
- Technical information when you open a payment link, such as IP address and device type
We never see or store your online banking login details or card numbers. You approve payments inside your own banking app.
4. How and why we use information
| Purpose | Information used | Lawful basis (UK GDPR) |
|---|---|---|
| Providing the Fyno service to businesses: accounts, payment requests, reminders, receipts, dashboards, reports, integrations such as Xero | Account, business, usage and payer information | Contract (for businesses); legitimate interests (for team members); processing for the business (for payers) |
| Onboarding businesses with our payment partner and keeping the platform safe from fraud, scams and misuse | Account, business and usage information | Legal obligation and legitimate interests (preventing fraud and keeping payments secure) |
| Billing for our subscriptions and fees | Account and billing information | Contract |
| Customer support | Communications and account information | Contract; legitimate interests |
| Improving the service and measuring how it is used | Usage and technical information (aggregated where possible) | Legitimate interests; or consent or a permitted exemption where cookies are involved (see the Cookie policy) |
| Responding to enquiries, demo requests and waitlist sign-ups | Contact details and messages | Legitimate interests; steps before entering a contract |
| Sending service updates (for example, changes to terms or security notices) | Contact details | Contract; legal obligation |
| Sending marketing emails about Fyno | Contact details | Consent, or legitimate interests for existing business customers (soft opt-in). You can unsubscribe at any time |
| Keeping records for tax, accounting and legal reasons | Billing and transaction records | Legal obligation |
| Establishing or defending legal claims | Relevant records | Legitimate interests |
Where we rely on legitimate interests, we have balanced our interests against yours. You can ask us for more detail.
We do not sell personal information, and we do not make decisions about people that have legal or similarly significant effects using solely automated means. We may use automated checks to flag possible fraud, but a person reviews any decision to suspend an account.
5. Who we share information with
We share information only where needed to run Fyno, with:
- Our payment partner: GoCardless Ltd ("GoCardless, a Mollie company"), which initiates Pay by bank payments and verifies businesses. It acts as an independent controller and is authorised and regulated by the Financial Conduct Authority. We may add or change payment partners; we will update this policy when we do.
- Service providers (processors) that help us run Fyno, under contracts requiring them to protect your information:
- Hosting and database: Supabase (UK/London region) and Vercel
- Messaging: Twilio (SMS and WhatsApp) and Meta (WhatsApp Business), and [Postmark or Resend] (email)
- Subscription billing: Stripe
- Background jobs and monitoring: Inngest, Sentry, PostHog and Better Stack
- Demo booking: Cal.com
- Apps a business connects, such as Xero, when the business chooses to connect them
- Professional advisers, such as accountants, lawyers and insurers
- Authorities, such as the police, regulators or HMRC, where the law requires it or to prevent fraud or crime
- A buyer or successor, if the business is sold, restructured or incorporated (for example, transferred to Fyno Ltd)
An up-to-date list of our sub-processors is in our Data processing agreement.
6. Payments and our payment partner
When a customer pays through a Fyno link, the payment is initiated by our regulated payment partner, and the customer approves it in their own banking app. Our partner's terms and privacy notice apply to that step and are shown in the payment flow. Fyno receives only the payment status and related details needed to show the business that it has been paid.
7. International transfers
We aim to keep information in the UK. Our main database is hosted in London. Some service providers (for example, in the US or EU) may access or store information outside the UK. When that happens, we use a lawful safeguard, such as:
- a UK adequacy decision (for example, for the EU or for US companies certified under the UK Extension to the EU–US Data Privacy Framework), or
- the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses.
Contact us if you'd like more information.
8. How long we keep information
| Information | How long |
|---|---|
| Business account information | While the account is open, then 6 years after it closes (for tax, accounting and legal claims) |
| Payment and billing records | 6 years after the end of the financial year they relate to |
| Payer information processed for a business | As instructed by the business. Deleted or returned within 90 days of the business closing its account, unless the law requires us to keep it |
| Enquiries, waitlist and demo requests | Up to 2 years after our last contact, unless you become a customer |
| Support messages | Up to 3 years |
| Security and audit logs | Up to 12 months, or longer if needed to investigate an incident |
| Analytics data | Up to 12 months |
9. Keeping information secure
We use measures appropriate to the risk, including encryption in transit and at rest, multi-factor authentication for business owners and admins, strict access controls that separate each business's data, audit logs, regular backups and monitoring. No system is completely secure. If a breach is likely to put you at risk, we will tell you and the Information Commissioner's Office (ICO) as the law requires.
10. Your rights
Under UK data protection law, you have the right to:
- access the personal information we hold about you
- have inaccurate information corrected
- have information deleted in some circumstances
- restrict or object to certain uses, including any use for direct marketing
- data portability in some circumstances
- withdraw consent at any time, where we rely on consent
To use any of these rights, email support@fynopayments.co.uk. We'll respond within one month. If your information relates to a payment you made to a business, we will usually pass your request to that business, because it is the controller, and help it respond.
11. Complaints
If you are unhappy with how we have handled your personal information, please complain to us first at support@fynopayments.co.uk (or by post to the address above). We will acknowledge your complaint within 30 days, look into it promptly, and tell you the outcome.
You also have the right to complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint, or call 0303 123 1113.
12. Children
Fyno is a service for businesses and is not aimed at children. We do not knowingly collect information from anyone under 18 except where a business sends a payment request to them.
13. Changes to this policy
We may update this policy from time to time. The "last updated" date at the top shows when it last changed. If we make significant changes, we'll tell business customers by email or in the app.