Privacy Statement

Background

This Privacy Statement (‘Statement’) explains how we hold, collect and process personal information provided to us via our website, in accordance with data protection laws. It explains why we collect personal information, what we collect, how we use it, who we share it with and how we protect it. It also details the rights available to you in relation to your personal information, how to exercise those rights and what to do if more information is required.

It is important that you read and retain this Statement, together with any other notice we provide on specific occasions when we are collecting or processing personal information about you, so that you are aware of how and why we are using that information and your rights.

Any reference to “personal information” in this Statement means any information relating to a living individual, from which that living individual can be identified directly or indirectly (in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person). We do not consider anonymous data, or data where the identity of the individual has been irretrievably removed, as personal information.

Who are we?

We are PayStream Accounting Services with the company number 07598955 and registered address at Mansion House, Manchester Road, Altrincham, WA14 4RW.

PayStream Accounting Services Limited (“PAS”) is the entity which employs internal staff to operate the running of our business and for making decisions as to the data we collect from employees and how such data is processed.

As such, PAS is a Data Controller as defined by Article 4(7) of the UK GDPR and on the instruction of PAS, we process data as outlined in this Privacy Statement.

The information we collect - and the way in which we use it

At PayStream, we take your privacy seriously.
There are various reasons why we need to collect, store and use your personal information. Generally, we need personal information in order that we can get you set up, so that we can call, text and email you to encourage you to (as applicable) accept our offer of employment, register for services, or to complete onboarding or registration requirements.

Wherever you provide personal information to us on this website (such as your name, address, email, telephone and/or mobile phone number and any additional information as relevant) (“Personal Data”), the Personal Data will be emailed to our New Business team (and/or another team where relevant, depending on the purpose for which you provided the information. Where appropriate, the Personal Data will also be sent to our Marketing Team. Each team in receipt of the Personal Data may get in touch with you as relevant about our services, contracts and/or employment (as we believe appropriate in our reasonable opinion).

We want you to know that whenever you give us Personal Data on this website, we will keep your details safe and only use your Personal Data to notify you via email, post, SMS or phone call (unless opted out) with information about our products, special offers, company news, prize draws and any other information we reasonably deem appropriate.

This is in our legitimate interests, although there may on occasion be additional grounds which justify our use of your Personal Data. There may be legal requirements for instance that we or you need to adhere to from time to time which mean we are required to obtain and process your Personal Data. In all cases, we only collect, store and/or process your Personal Data where we have a lawful basis to do so.

Where you consent to receive marketing communications from us, you may opt out at any time by emailing mymaxinfo@paystream.co.uk. Whilst we will never sell, trade or rent your Personal Data to others, in limited circumstances we may need to share your Personal Data with others including third-party service providers who provide services to us or on our behalf. We will do so where we are required by law, to assist us with administering the relationship with you, or where it is otherwise in our legitimate interests to do so. We only permit third parties to process your Personal Data for specified purposes in accordance with our instructions. Where we share Personal Data externally, we do this securely so as to reduce the likelihood of any data breach and we require third parties to respect the security of your data and to treat it in accordance with the law. Whilst it is expected that any transfer of Personal Data will usually remain within the EEA in the vast majority of cases, on the rare occasion Personal Data is required to be transferred to a country outside the EEA without adequate data protection laws, then unless an exemption for restricted transfers apply, we will ensure such transfers are made in compliance with the requirements of relevant data protection laws.

We may also need to process your Personal Data without your knowledge or consent where this is required or permitted by law, and may use your personal information in the following situations; however, these are likely to be rare:

• Where we need to protect your interests (or someone else’s interests)
• Where it is needed in the public interest or for official purposes

Personal Data collected by us will be held for as long as it is required to fulfil the purpose it was collected and to protect our business and our rights. The length of time we keep your information will depend on the type of information and the purpose for which it was obtained. To determine the appropriate retention period for personal data, we consider: the amount, nature and sensitivity of the personal data; the potential risk of harm from unauthorised use or disclosure of your personal data; the purposes for which we process your personal data and whether we can achieve those purposes through other means; and the applicable legal requirements.

The use of "cookies" and IP Address

Any cookies used on this Website do not contain any personally identifying information, but simply enable us to make using this site a simpler experience. Our Cookie policy can be found here.

On you visiting this website, we may also record the Internet Protocol (IP) address of your device and data analytics help to provide you with the best experience we can.

External links

PayStream is not responsible for the privacy practices or the content of other Websites linked to from the PayStream Website.

How we protect your personal information

We take data protection seriously and we recognise the importance of personal information entrusted to us.

We are committed to safeguarding the privacy and security of the information that we gather. We have implemented appropriate physical, technical, and organisational security measures designed to secure your personal information against accidental loss and unauthorised access, use, alteration, or disclosure. We keep our computer systems, files and buildings secure by following legal requirements and security guidance, make sure that all staff are trained on how to protect personal information and that our processes clearly identify the requirements for managing personal information. We regularly audit our systems and processes to ensure that we remain compliant with our policies and legal obligations.

All personal information will be treated with the utmost care and we take steps to ensure that all information we collect about you is adequate, relevant, not excessive, and processed for limited purposes.

Your rights

You have a number of rights in respect of your personal information.

You have the right to request a copy of the information that we hold about you. If you would like a copy of some or all of your personal information, please email privacyteam@paystream.co.uk.

We want to make sure that your personal information is accurate and up to date. Please ask us to correct or remove information you think is inaccurate.

You have the right to erasure, although this does not provide an absolute ‘right to be forgotten’ and applies only in these specific circumstances: where your personal information is no longer necessary in relation to the purpose for which it was originally collected/processed, you withdraw consent, you object to the processing and there is no overriding legitimate interest for continuing the processing, we unlawfully processed your personal information and, where your personal information has to be erased in order to comply with a legal obligation.

We will only use your personal information as we have described in this Privacy Statement (except as outlined in any additional privacy notice which we may provide to you, for example if you do decide to sign up to our services, or join our employment). In the unlikely event that we need to use it in a different way, we will provide you with an updated Privacy Statement.

Where we have based our processing on our legitimate interests, you do have the right to object to the processing or restrict us processing your information in this way. In this case, we will need to demonstrate to you that our legitimate interests are sufficiently compelling to override your interests or rights, or that purpose is to establish or defend legal claims.

Where we have based our processing on the performance of a contract, you will have the right to receive this information from us in a structured, commonly used way and have the right to send this to someone else.

You have the right to object to processing of your personal data in certain circumstances. If you have provided consent to the collection, processing and transfer of your personal data for a specific purpose, you can withdraw consent for that specific processing by contacting the Privacy Team, after which time we will no longer process your information for the purpose(s) you originally agreed to, unless we have another legitimate basis for doing so in law.

We do not envisage that any decisions will be taken about you using solely automated means. Should this change, you will not be subject to decisions that will have a significant impact on you based solely on automated decision-making, unless we have a lawful basis and have notified you. If we make an automated decision based on any sensitive personal information, we will request your explicit written consent unless this is justified in the public interest, with appropriate measures in place to safeguard your right.

Changes to our Privacy Statement

We keep this Statement under regular review and should we change it, we will provide you with an updated copy. If PayStream contacts you in respect of our services, contracts or employment, we will provide you with further privacy information. If you choose to opt into one or more of our services, then there may be additional ways in which we use your Personal Data. In such instance, additional privacy notices may become applicable to you from time to time. You can read these by visiting https://www.paystream.co.uk/misc-pages/privacy-notices/paystream-group/.

How to contact us

If you have any questions about this Statement or the information we hold about you, please contact privacyteam@paystream.co.uk or write to the Privacy Team at PayStream, Mansion House, Manchester Road, Altrincham, WA14 4RW. Our Data Protection Officer can be reached at the same address and email.

If you are unhappy with the way we use your personal information, we would appreciate the opportunity to respond to your concerns directly in the first instance. You also have the right to complain to the Information Commissioner’s Office (ICO) via their website: Information Commissioner's Office (ICO).

Mobile App - Collection and Use of Personal Information

At PayStream, we take your privacy most seriously and we will keep your details safe. Our phone application (‘App’) may, at our discretion, include functionality which allows you the option to send personal information to us, or, to a third party.

Information as to how PayStream handle your personal data is outlined to you in our Privacy Policy. Any material you transmit or post to our App that is not personal data or sensitive personal data shall be treated as non-confidential and non-proprietary.

Whenever you use the App there is certain information that always gets recorded automatically. The type of information we may collect includes information about the device you are using, what operating system you are using, device settings, unique device identifiers and crash data (data analytics). What type of information we collect depends on what type of device you are using and to learn more about what information your device makes available to us, please also check the policies of your device manufacturer or software provider. This information is, for example, used to improve the application and the service you receive. You have the option to opt out of this analytics provision via the application. PayStream’s Terms of Use are also available via the application or on request.