Compliance & Security
Frequently asked questions
What kind of data do you process? 
In line with GDPR, SurePay processes personal data because this is necessary to perform the obligation that exists between you or us and a bank or organisation through an agreement. The data we process is called personal data. This entails data which is related directly or indirectly to your person. Examples of this are your name or IBAN (your account number). Data such as name records of a proprietorship, VOF (LLP or Limited Liability Partnership) or other partnerships is considered personal data.
How do you obtain my data?
We receive your data from banks and other companies (also considered as Data Providers) to perform the IBAN-Name Check, Switch Check or PayID service. This happens either every 24 to 48 hours or through a direct link with the database of the Data Provider. These Data Providers share your data with us based on the agreements that you made with them. If you want to know who your Data Provider is, you can always check with your bank. In most cases they are the Data Provider.
Do you process my data outside the EEA/UK?
No, SurePay does not process data outside of the EEA/UK. Our data processing centres located are in Dublin (IR) and Frankfurt (GE).
What if I want you to stop using my data?
SurePay has several reasons for processing your data, however, it is always possible to contact us in case of questions. We are happy to help and inform you on data processing. When necessary, we might refer you to your Data Provider so you can better control what data flows to SurePay.
How do you keep my data safe?
Any data processed in the solution is encrypted, adheres to the OWASP Application Security Verification Standard and can only be accessed by the name matching functionality itself. Throughout the design of the SurePay solution, the main principle has been “Security by Design".
Besides that, we do thorough third-party assessments with all our suppliers and partners ensuring a high level of security in the first instance.
I would like information on a specific transaction or Account Number
You can always contact us at [email protected] with questions regarding the exercise of your rights as a Data Subject. SurePay aims to help you with any requests for information, rectification or other requests regarding your data. In some cases, we might ask you to contact your Data Provider based on your request. For more information you can always check our Privacy Statement.
How will Brexit affect the provision of your Service in the UK?
In our article on Brexit, at ‘’Brexit, a new year but not a new service!’’ we explain in depth what the Brexit means for our UK Service provision.