Man in a light blue suit with glasses

GDPR for fintech: handling customer data the right way

By SendPay Business · · 2 min read

A quick ID check
  1. Add your photo ID
  2. Add proof of address
  3. Checked and verified

The General Data Protection Regulation (GDPR) sets the rules for handling personal data in the EU, and the UK has its own version, UK GDPR, alongside the Data Protection Act 2018. Fintechs handle a lot of sensitive data, so getting this right matters.

Key principles

0 of 4 done

Tick each step as you do it, so you can see what is left.

Your ticks are saved on this device.
Man in a suit on the phone at a desk

GDPR and KYC work together

Anti-money laundering rules require firms to collect ID and keep records for set periods. GDPR allows this because it's a legal obligation, but the data should only be used for that purpose and kept no longer than the law requires.

Try it

Name your platform and watch it come to life

Type a name, tap a colour and pick what it does. The phone changes as you go.

Colour

What it does

Build mine

Design and preview your whole platform free, then launch when you are ready.

Breaches and customer rights

Serious personal data breaches must usually be reported to the regulator within 72 hours, which is the ICO in the UK. Customers can ask to see their data, correct it and, in some cases, have it deleted. Fines for serious failures can reach €20 million or 4% of worldwide annual turnover, whichever is higher, with equivalent sterling limits in the UK.

Woman in a blue shirt using a laptop

Where SendPay fits

SendPay lets you launch your own branded platform with GBP, EUR and USD accounts, transfers and branded Visa cards, powered by licensed partners.

Team collaborating around a laptop in an office

How it works

Your own money app
  1. Name it and pick your colours
  2. Choose what it does
  3. Launch when you are ready

Why sign up

Create your free SendPay account

It's all about creating your own financial platform with ease. Start with a free account today.

  • A free business accountOpen it in about a minute with your business name, email, password and mobile. No card and no documents to start.
  • Get paid from day oneTake card payments, and share your own payment link and invoices so customers pay in a click.
  • A free business websiteFree to build, free to publish and free to keep, with unlimited visits.
  • Your own financial platformDesign and preview your whole platform free, then launch when you are ready.

SendPay Business is a technology company, not a bank. Accounts, cards and payments are powered by licensed partners.

Questions people ask

What are KYC and AML?

The checks that confirm who customers are.

KYC and AML →
What is open banking?

Sharing bank data securely with customer consent.

Open banking →
What is DORA?

The EU rules on tech resilience for financial firms.

What is DORA? →

Read next

Spotted a mistake or something out of date? and we'll fix it. How our guides are made

This guide is general information, not legal or financial advice. SendPay Business is a technology company, not a bank, and does not take deposits; regulated services on the platforms are provided by licensed partners. Other companies named in this guide are reference points only and are not affiliated with SendPay Business.