Privacy Policy
Last updated: July 2026
This Privacy Policy explains how Ripple Holdings Limited collects, uses and protects personal information when you use Ripple Pay and our related websites and services.
Who we are
Ripple Pay is operated by Ripple Holdings Limited, a company registered in the Isle of Man (company number 136751C), registered office 52 Victoria Road, Douglas, Isle of Man, IM2 4HQ. We are registered with the Isle of Man Information Commissioner (registration R004094). In this policy, "Ripple", "we", "us" and "our" refer to Ripple Holdings Limited. We are the controller of the personal information described below. Our data protection contact is Daniel Lees, info@startyourripple.co.uk.
Information we collect
- Account and business details such as your name, business name, email address, phone number, trading address and company information.
- Verification information we need to set you up as a merchant, such as identity and address documents and bank account details.
- Transaction information relating to the invoices and payments processed through your account.
- Technical information such as device, browser and usage data collected automatically when you use our services.
We do not collect or store your card number or security code. When a customer pays an invoice, the card details are entered on our payment provider's secure hosted page (Cashflows) and are processed by them; we only receive confirmation that a payment succeeded and a reference for it.
How we use your information
We use personal information to set up and manage your account, verify your identity, process payments, send reminders and service messages, provide support, keep our services secure, and meet our legal and regulatory obligations.
Our lawful bases
We rely on the performance of our contract with you, our legitimate interests in operating and improving our services, your consent where required, and compliance with legal obligations such as anti money laundering and tax rules.
Sharing your information
We share information with the partners who help us deliver the service: our payment partners (Cashflows, and where used Worldpay, and London & Zurich for Direct Debit), the accounting platforms you connect (Xero and QuickBooks), our email provider (SendGrid), our hosting and security providers (Cloudflare and Railway), and our error-monitoring provider (Sentry). Each processes data only on our instructions under a data processing agreement. We may also share information where required by law or to protect our rights.
International transfers
The Isle of Man is recognised by the European Union as providing an adequate level of data protection, so information can flow freely to the United Kingdom and the European Union. Some of our providers are based outside the UK and EU (for example in the United States); where information is transferred to them, it is protected by appropriate safeguards such as the provider's data processing agreement incorporating standard contractual clauses.
How long we keep it
We keep financial and transaction records for six years to meet tax and accounting requirements. Other personal information is kept only for as long as needed and is then anonymised or deleted. If you close your account, we anonymise your personal information while retaining anonymised financial records for the legal period.
Your rights
Subject to applicable law, you have the right to access, correct, export, delete or restrict the use of your personal information, and to object to certain processing. If you are a merchant, you can do most of this yourself in the Pay Now portal under Settings, then Your data and privacy. If you are a customer who has paid an invoice, please contact the business you paid, who manages your data, or contact us and we will pass your request on. To exercise any right, contact info@startyourripple.co.uk. You also have the right to complain to the Isle of Man Information Commissioner (inforights.im).
Cookies
The Pay Now portal uses a single strictly necessary cookie to keep you logged in. We do not use analytics, advertising or tracking cookies. You can control cookies through your browser settings.
Security
We use appropriate technical and organisational measures to protect personal information. No method of transmission or storage is completely secure, but we work to safeguard your data and limit access to it.
Changes to this policy
We may update this policy from time to time. When we do, we will revise the date at the top of this page.
Contact us
If you have any questions about this policy or how we handle your information, contact our data protection contact, Daniel Lees, at info@startyourripple.co.uk, or write to Ripple Holdings Limited, 52 Victoria Road, Douglas, Isle of Man, IM2 4HQ.