Revolut People Privacy Notice

1. Introduction

We’re committed to protecting and respecting your privacy.

We will:

• always keep your personal data safe and private
• never sell your personal data
• allow you to manage your marketing choices at any time

This privacy notice sets out how we will handle your personal data when you use our website, our services or otherwise interact with us.

This notice only applies to personal data. It does not apply to company information.

If you are an employee of a company that has a Revolut People account, and your employer has invited you to use Revolut People, then your employer is the ‘controller’ of your personal data and we act as a ‘data processor’. This means that your employer is primarily responsible for your personal data under data protection laws. As such, please contact your employer if you have any questions about how your personal data is processed by Revolut People on its behalf.

2. About us

Revolut Ltd. (“we”, “us” or “our”) is the company responsible for collecting, and using, your data.

If you have concerns about how we use your personal data, you can contact us at [email protected].

3. What personal data do you collect about me?

You may provide us with personal data when you:

• fill in any forms
• correspond with us
• respond to any of our surveys
• open a Revolut People account
• use our products or services
• speak with a member of our social media or customer support teams
• contact us for other reasons

Information we collect directly

We will collect the following information:

• your name
• your email address
• your country
• your phone number
• any other information you provide us

Information we obtain from third parties

We may also collect your personal data through third-party services and organisations. For example, if you use our website or services through a third-party application or a third-party login service, we may collect information about you from that third party that you have made available via your privacy settings.

Moreover, if you choose to integrate your Revolut People account with third-party services and organisations (including, but not limited to Google Workspace, Microsoft etc)., we will obtain certain information from such third-party services and organisations. Depending on the specific features you use, we may obtain information about your or your users’ emails (such as email addresses, names and surnames) in order to sync emails and email threads as well to send emails directly from Revolut People. If you choose an integration with third-party calendar services, we will store your userID for that calendar and the authorization token to give you the ability to store, view and edit data from your calendars, and autocomplete contacts when you create events.

Revolut People are obtaining the above-mentioned information through third party integrations so we could auto-complete contact data to set up your organisational structure and send invites.

Revolut People will process this data independently from third-party services and organisations and will not use such data for any other purpose than described above.

Information we collect automatically

Whenever you use our website, we collect the following information:

• technical information, including the internet protocol (IP) address used to connect your computer to the internet, your login information, the browser type and version, the time zone setting, the operating system and platform, the type of device you use, a unique device identifier (for example, your device's IMEI number, the MAC address of the device's wireless network interface, or the mobile phone number used by the device), mobile network information, your mobile operating system and the type of mobile browser you use
• information about your visit, including the links you’ve clicked on, through and from our website or app (including date and time), services you viewed or searched for, page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling and clicks), and methods used to browse away from the page

We collect some of this information from you through cookies and other similar technologies. For more information about our use of cookies, please see our Cookies Policy (accessible here).

4. How do you use my personal data?

We have explained the purposes for which we use your personal data, as well as our lawful bases for doing so, in the table below.

5. What are my rights?

You have the following rights in relation to your personal data:

• the right to access personal data which we hold about you
• the right to ask us to correct your personal data if you think it's wrong
• the right to ask us to delete your personal data in certain circumstances
• the right to object to us processing your personal data on the basis of our legitimate interests
• the right to ask us to restrict how we use your personal data in certain circumstances
• the right to ask us to transfer personal data to you or another company in a structured, commonly used, machine-readable format in certain circumstances
• the right to withdraw your consent (where you have previously given us this)

Please note that not all of these rights are absolute and we may not be required to comply with your request where exemptions apply under applicable data protection laws.

You can exercise any of your rights as described in this notice and under data protection laws by contacting Revolut’s Data Protection Officer through [email protected].

You also have the right to complain to your local data protection regulator if you are unhappy with the way we handled your data.

6. Do you share my personal data with anyone else?

We may share your personal data with our third party service providers, such as our data hosting providers and communications service providers to the extent necessary to achieve the purposes set out above.

7. Do you transfer my personal data outside the UK and EEA?

Revolut is located in the United Kingdom and our main data hosting facilities are located in the United Kingdom (“UK”) and European Union (“EU”). However, it’s possible we may need to transfer your personal data internationally to achieve the purposes set out in section 4 (How do you use my personal data?) above. If we transfer your personal data outside the EU or UK, please rest assured that we will always take all necessary steps to make sure that your personal data is protected. This includes entering into Standard Contractual Clauses with third party recipients of your data or transferring it to third parties in countries which are recognised as having an adequate level of protection for personal data. If you would like more information, please contact us by sending an email to [email protected].

8. How long will you keep my personal data for?

We will keep your personal data for as long as necessary to achieve the purposes set out in section 4 (How do you use my personal data?) above. However, we may need to retain your personal data for a longer period to the extent required by applicable laws.

9. How do you protect my personal data?

We recognise the importance of protecting and managing your personal data. Any personal data we process, including sensitive data, will be treated with the utmost care and security.

We use a variety of physical and technical measures to:

• keep your personal data safe
• prevent unauthorised access to your personal data
• make sure your personal data is not improperly used or disclosed.

Electronic data and databases are stored on secure computer systems with control over access to information using both physical and electronic means. Our staff receives data protection and information security training. We have detailed security and data protection policies which staff are required to follow when they handle personal data.

While we take all reasonable steps to ensure that your personal data will be kept secure from unauthorised access, we cannot guarantee it will be secure during transmission by you to our website or other services. We use HTTPS (HTTP Secure), where the communication protocol is encrypted through Transport Layer Security for secure communication over networks, for all our web services.

10. Updates

We may update this privacy notice from time to time. Any changes will be posted on this page. If we make any material changes to this privacy notice, we may notify you by email before the change becomes effective.