Privacy Policy

QR Code Kits

This privacy statement/notice tells you how we use your information and confirms that your Data Controller is SumUp (“we”, “us”, “our”), SumUp Payments Limited, 32 - 34 Great Marlborough Street, W1F 7JB, London, England.

If you have a complaint or concern about how we use your personal information, please contact us in the first instance and we will attempt to resolve the issue as soon as possible.

Our Data Protection Officer is contactable at: [email protected]

What Personal Information we collect?

We collect the following personal information from you directly:

  • Your email address

  • Your first name

  • Your last name

  • Your address

How we collect your Personal Information?

We collect the personal information directly from you via a web form.

How we use your Personal Information?

Purpose: We use the personal information provided to us to add you to the waitlist for shipping of the QR code kit.

We use the information provided to ship the QR code requested by you. This is necessary for us to complete your request to receive the QR code kit.

We rely on your consent for processing your data and shipping the QR code kit to you.

How we share your Personal Information?

We can share information about you with our group companies, and other affiliates, for the purposes outlined above, and as it is necessary to provide our services to you.

We may share information to service providers under contract who help with parts of our business operations e.g., Shipping services provider

How long we keep your personal information?

We will not process personal data for a longer period than is necessary for fulfilling the purpose of such processing, as set out in this Privacy Policy. Your personal data will be anonymized or deleted once it is no longer relevant for the purposes for which it was collected.

What are your personal data protection related rights?

You have the right under certain circumstances to:

  • be provided with access to your personal data held by us;

  • request the rectification or erasure of your personal data held by us;

  • request that we cease processing your data;

  • in addition, where you have provided your consent to our processing of your personal data you can withdraw this at any time;

  • object to profiling activities based on our own legitimate interests;

  • object to solely automated processing; and

  • request that we restrict the processing of your personal data (while we verify or investigate your concerns with this information, for example);

  • request that your data be transferred to a third party (data portability).

If you would like to exercise any of your rights set out above, you can contact us at [email protected] with your request. Please note that we may need to verify your identity before granting access or otherwise changing or correcting your information.

How we protect your information?

We always process personal data in accordance with applicable laws and regulations, and we have implemented appropriate technical and organizational security measures to prevent your personal data from being used for non-legitimate purposes or disclosed to unauthorized third parties and otherwise protected from misuse, loss, alteration, or destruction. The technical and organizational measures that we have implemented are designed to ensure a level of security appropriate to the risks that are associated with our data processing activities, in particular accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to your personal data including access control to premises, facilities, systems and data, disclosure control, input control, job control, availability control and segregation control.