Payhorizon Limited · Last updated: March 2026 · Version 1.0
Payhorizon Limited is an independent merchant services broker registered in England and Wales. We introduce businesses to payment providers. We are the data controller and are registered with the ICO under No. ZC038563.
Directly from you: Name, date of birth, identity documents, contact details, business information (name, company number, VAT number, turnover, nature of business), bank details, processing statements, and communication records.
Automatically: IP address, browser type, device, pages visited, and cookie identifiers (see Cookie Policy).
From third parties: Companies House (director verification), credit reference agencies, fraud prevention databases, and acquiring banks (account status, compliance).
| Basis | Purpose |
|---|---|
| Contract | Processing applications, managing merchant accounts, arranging introductions |
| Legal obligation | AML/KYC compliance, regulatory responses, record-keeping |
| Legitimate interests | Fraud prevention, service improvement, B2B marketing, commercial records |
| Consent | Non-essential cookies; individual marketing where legitimate interests doesn't apply |
Acquiring banks: AIB Merchant Services, Elavon, Trust Payments, emerchantpay, Worldpay (via MWBS), and payabl. Each is an independent data controller. We share only what's necessary for your application.
MWBS: M World Business Solutions Limited (FCA FRN 1003907, ICO ZA655280) may receive data as part of the introduction process.
Service providers: CRM, email, cloud storage, analytics — all bound by data processing agreements.
Primarily UK/EEA. Where transfers occur outside these areas, we ensure appropriate safeguards (Standard Contractual Clauses or adequacy decisions).
| Category | Period |
|---|---|
| KYC / AML identity documents | 5 years from end of relationship (MLR 2017) |
| Merchant account records | 6 years from end of contract (Limitation Act 1980) |
| Unsuccessful applications | 12 months |
| Email correspondence | 6 years |
| Marketing records | Until opt-out + 12 months |
Under UK GDPR you have rights to: access, rectification, erasure, restriction, portability, and to object. Contact privacy@payhorizon.co.uk. Respond within one month. Complaints to ICO at ico.org.uk or 0303 123 1113.
We implement access controls, TLS/SSL encryption, secure cloud storage, and staff awareness training. We report qualifying breaches to the ICO within 72 hours.
Email: privacy@payhorizon.co.uk · Post: 16 Brampton Court, 7 Union Road, Romford, RM7 0GS