This policy together with the Cardholder Agreement, which was either (i) provided to you when you were issued with your gift card, open loop, winnings or other pre-paid card (“Card”) or (ii) is available online at the website advised to you when you purchased your Card, sets out the basis on which any personal data we collect about you, or that you provide to us, will be used by us, the conditions under which it may be disclosed to others and how it is kept secure.

We are EML Money Designated Activity Company (company number 423276).

If we are the issuer of your Card, then we are the data controller in relation to the processing activities described below. This means that we decide why and how your personal information is processed.

If your Card was issued by a financial institution, then we will process your personal information on their behalf then this will be explained in the Cardholder Agreement issued to you with your Card.

If another company issued your Card, then that company (and not EML) is the data controller of personal information relating to the use of your Card. Please refer to the privacy policy of your card issuer to find out how your personal information is used.

3.1 Information you give us

Usually our Cards are issued anonymously and in which case we do not collect any personal information about you. However, in some circumstances where a Card is issued above a certain load limit we are legally required to obtain personal information from you before you can be issued with a Card, or we may need to obtain personal information from you in order to provide you with a service that you have requested. In such circumstances, we may collect your personal information when you correspond with us by phone, e-mail or when you purchase Cards and provide personal data as part of the purchase (whether online or in store).

The information you give us may include your name, address, e-mail address, phone number, identification information and any other information as necessary for us to provide you with the Card services you have requested, any requested customer support services and to comply with our anti-money laundering obligations and to prevent financial crime.

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

We do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data). Nor do we collect any information about criminal convictions and offences.

Where we need to collect personal data by law, or under the terms of a contract we have with you, and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to issue you with a Card). In this case, we may have to cancel a product or service you have with us but we will notify you if this is the case at the time.

Information we collect from other sources

here you purchase your Card from one of our partners or distributors, we may ask them to collect information about how you use your Card and transactions you undertake in order to comply with our anti-money laundering obligations and to prevent financial crime. If you choose to continue with your Card purchase and provide the requested personal information to the distributor, then the distributor will pass this information to us.

The information you give us may include information necessary for us to be able to verify your identity.

The purposes for which we use your information and the legal basis under data protection laws on which we rely to do this are explained below.

Note that we will not use your personal information for marketing purposes.

4.1 Where there is a LEGAL REQUIREMENT

We will use your personal information to comply with our legal obligations: (i) in connection with our obligations in relation to anti-money laundering; (ii) to identify you when you contact us; and/or (iii) to verify the accuracy of data we hold about you.

4.2 Where there is a LEGITIMATE INTEREST

We may use and process your personal information where it is necessary for us to pursue our legitimate interests as a business, or that of a third party, for the following purposes:

We may also monitor or record telephone calls with you, to make sure we to assess and improve our service to customers, follow your instructions correctly and train our staff.

4.3 Where it is required to complete a CONTRACT

We may use and process your personal information where we have supplied you (or continue to supply you) with any services in connection with your Card, where we have arranged for the supply of another company’s Cards or services to you, or where you are in discussions with us about any new Card or service. We will also use and process your personal data if you require customer services support with respect to your Card or you lose your Card and request a replacement.

We will use this information in connection with the contract for the supply of Cards or services when it is needed to carry out that contract or for you to enter into it.

5.1 Our Group companies

We may share your information with other companies within the EML group. They may use your personal information in the ways set out in the “How we use your personal information” section above, in connection with the products and/or services that complement our own range of products and/or services.

Please see our website for the details of our group companies with whom we may share your personal information.

5.2 Our suppliers and service providers

We may disclose your information to our third-party service providers, agents, subcontractors and other organisations for the purposes of providing services to us or directly to you on our behalf. Such third parties may include cloud service providers (such as hosting and email management), foreign exchange providers and administrative services.

When we use third party service providers, we only disclose to them any personal information that is necessary for them to provide their service and we have a contract in place that requires them to keep your information secure and not to use it other than in accordance with our specific instructions.

5.3 Third parties who provide products and services to you

We work closely with various third parties to including business partners, suppliers and sub-contractors and may share your information with them strictly as necessary in order to provide you with the Card you purchased and associated services (such as transaction processing).

We may also share your information:

5.4 To meet our legal obligations

We will share your personal information where we are legally obliged to do so (under any law or regulation) or if we are under a duty to disclose or share your personal data in order to comply with any legal obligation as part of our checks to prevent fraud, financial crime or money laundering, including with fraud prevention agencies and other organisations which may use the information to prevent fraud and money laundering.

5.5 Credit/debit card payment processors

When you purchase any products or services online, your credit/debit card payment is processed by a third-party payment processor, who specialises in the secure online capture and processing of credit/debit card transactions. If you have any questions regarding secure transactions, please contact us using the details at the end of this policy.

5.6 Other ways we may share your personal information

We may transfer your personal information to a third party as part of a sale of some or all of our business and assets to any third party or as part of any business restructuring or reorganisation. We may also transfer your personal information if we’re under a duty to disclose or share it in order to comply with any legal obligation, to detect or report a crime, to enforce or apply the terms of our contracts or to protect the rights, property or safety of our visitors and customers. We will always take steps with the aim of ensuring that your privacy rights continue to be protected.

The personal information that you provide may be disclosed to fraud prevention agencies which may keep a record of that information. The checks performed by these agencies are to confirm your identity only, a credit check is not performed, and your credit rating will be unaffected.

We may also disclose and use information in aggregate (so that no individual customers are identified) for marketing and strategic development purposes.

All information you provide to us may be transferred to countries outside the European Economic Area (EEA). By way of example, this may happen where any of our group companies or operational divisions are incorporated in a country outside of the EEA or if any of our servers or those of our third-party service providers are from time to time located in a country outside of the EEA. These countries may not have similar data protection laws to the EEA.

If we transfer your information outside of the EEA in this way, we will take steps to ensure that appropriate security measures are taken with the aim of ensuring that your privacy rights continue to be protected as outlined in this policy. These steps include imposing contractual obligations on the recipient of your personal information or ensuring that the recipients are subscribed to ‘international frameworks’ that aim to ensure adequate protection. Please contact us using the details at the end of this policy for more information about the protections that we put in place and to obtain a copy of the relevant documents.

If you use our services whilst you are outside the EEA, your information may be transferred outside the EEA in order to provide you with those services.

All information you provide to us is stored on our secure servers. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.

Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to us; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

Our site may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies.

Please check these policies before you submit any personal data to these websites.

You have a number of rights in relation to your personal information under data protection law. In relation to certain rights, we may ask you for information to confirm your identity and, where applicable, to help us to search for your personal information. Except in rare cases, we will respond to you within one month from either (i) the date that we have confirmed your identity or (ii) where we do not need to do this because we already have this information, from the date we received your request.

If we collect your personal information, the length of time we retain it is determined by a number of factors including the purpose for which we use that information and our obligations under other laws. We do not retain personal information in an identifiable format for longer than is necessary.

We may need your personal information to establish, bring or defend legal claims. For this purpose, we will always retain your personal information for 6 years after the date it is no longer needed by us for any of the purposes listed under How we use your personal information above. The only exceptions to this are where:

Any changes we make to our privacy policy in the future will be posted on this page and, where appropriate, notified to you by e-mail. Please check back frequently to see any updates or changes.

Like many websites, our website uses "Cookie" technology to assist you in your user experience and to allow us to gain an understanding of how users interact with our site. For further information regarding our approach to Cookies please refer to our Cookie Policy.

Questions, comments and requests regarding this privacy policy are welcomed and should be addressed to

In the event this privacy policy is translated into languages other than English, such translation is provided for information purposes only and the English language version will take precedence.

Last Updated: 12 July 2021