© Revolut Bank UK Ltd 2026 If you would like to find out more about which Revolut entity you receive services from, or if you have any other questions, please reach out to us via the in-app chat in the Revolut app. Revolut Bank UK Ltd is registered in England and Wales (Registered No. 12871051). Registered address: 30 South Colonnade, London, E14 5HX. Authorised by the Prudential Regulation Authority and regulated by the Financial Conduct Authority and Prudential Regulation Authority (Financial Services Register No. 981170).Revolut Ltd (No. 08804411) is authorised by the Financial Conduct Authority under the Electronic Money Regulations 2011 (Firm Reference 900562). Registered address: 30 South Colonnade, London E14 5HX, United Kingdom. Investment services are provided by Revolut Trading Ltd (No. 11567840), which is authorised and regulated by the Financial Conduct Authority (FRN: 933846). Registered address: 30 South Colonnade, London E14 5HX, United Kingdom. We are also registered with the Financial Conduct Authority to offer cryptocurrency services under the Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017. Revolut&#39;s commodities service is not regulated by the FCA.

Estados Financieros

Data Privacy Statement for Candidates

Legal disclaimer

Funcionalidades, Productos y Servicios

AML Data Collection Notice

Cookie Policy

Reporte Anual

Business Terms

Consulta los Costos y Comisiones de nuestros productos

Sistema de Remuneraciones

Buró de Entidades Financieras

Complaints Policy

Financial Difficulties for Personal Credit Customers

IPAB

Whistleblowing Policy

Revolut Business Customer Privacy Notice

Despachos de Cobranza

Personal terms

Personal Fees (Standard)

Imprint

Website Terms

ESG Policy

Multi-Currency Cards Terms and Conditions

Modern Slavery and Human Trafficking Statement

Privacy Policy

<h1>Data Processing Addendum</h1><h3>1. Definitions</h3> “Agreed Purpose(s)” means as set out in clause 2 of this DPA. &quot;DPA&quot; means this Data Processing Addendum. “Data Protection Laws” means any applicable law relating to the protection of personal data and privacy, including (i) in the United Kingdom, the Data Protection Act 2018 (the &quot;UK GDPR&quot;) and the Privacy and Electronic Communications (EC Directive) Regulations 2003 (as amended); and (ii) in the European Union, the General Data Protection Regulation ((EU) 2016/679)) (“GDPR”), Directive 2002/58/EC (as amended) and any applicable Member State laws, regulations or secondary laws implementing the same. “SharedPersonal Data” means as set out in clause 2 of this DPA. “Third Party Personal Data” means any personal data belonging to your own clients, customers, or other third parties, which is processed by the Consultant The terms “data controller”, ‘’data processor”, “data subject”, “personal data”, “personal data breach” and “process” have the meanings given to them in the Data Protection Laws. Capitalised terms used herein but not otherwise defined in this DPA shall have the meanings ascribed to them in the Terms. <h3>2. Introduction</h3> 2.1 You acknowledge that we may act either as an independent data controller or a data processor on your behalf when processing Consultants’ personal data pursuant to these Terms. Clause 3 explains when we act as an independent controller. Clause 4 explains when we act as a data processor. 2.2 You acknowledge that where we act as a data processor on your behalf, we are also acting as a data processor on behalf of the EoR, who are the original controllers of the Consultant’s personal data. As a result, in line with EoR’s instructions, we can only share certain details regarding Consultants where such sharing has been authorised by the Consultant. 2.3 Each party will comply fully with Data Protection Laws when performing its obligations under these Terms. <h3>3. Controller terms</h3> 3.1 This table sets out the Shared Personal Data which you will share with us and the Agreed Purposes for which we may process it: <table><thead><tr><td width="265.0" >Subject</td><td width="474.0" >Detail</td></tr></thead><tbody><tr><td width="265.0" >Agreed Purpose</td><td width="474.0" >To enable provision of the Revolut GlobalHire under these Terms, namely by onboarding Consultants</td></tr><tr><td width="265.0" >Shared Personal Data and Data Subjects</td><td width="474.0" >Personal Data shared by you with us as necessary for onboarding, including full legal name, nationality and contact details.</td></tr></tbody></table> 3.2 For the purposes of Data Protection Laws, we will act as an independent controller when processing the Shared Personal Data for the Agreed Purpose. 3.3 Each party will comply fully with Data Protection Laws when performing its obligations under these Terms. In particular, each party will: <ul><li>only process the Shared Personal Data for the Agreed Purpose; </li><li>ensure it has a valid lawful basis for processing the Shared Personal Data for the Agreed Purposes and provide all necessary notices as required by Data Protection Laws to allow it to process the Shared Personal Data for the Agreed Purpose; </li><li>implement appropriate technical and organisational measures to protect the Shared Personal Data against accidental or unlawful destruction or accidental loss, damage, alteration, unauthorised disclosure or access; and</li><li>only retain the Shared Personal Data for as long as necessary to achieve the Agreed Purpose unless it is otherwise required to retain the Shared Personal Data to comply with its obligations under applicable laws, in which case it will delete the shared Personal Data upon expiry of this period.</li></ul> <h3>4. Processor terms </h3> 4.1 We also process Consultants’ personal data as a data processor on your behalf. The table in the Appendix of this DPA sets out the subject matter, duration, nature, and purpose of the processing, as well as the data subjects and personal data categories we process as a data processor on your behalf. 4.2 When processing personal data on your behalf under this Clause 4 of the DPA, we will: <ul><li>only process the personal data on your written instructions as set out in this Clause 4, unless we are required by applicable laws to otherwise process the personal data; in which case, we will, to the extent permitted by the relevant law, notify you of this requirement before performing the processing;</li><li>notify you without undue delay if we consider that any of your instructions conflict with Data Protection Laws; </li><li>implement appropriate technical and organisational measures to protect against the unauthorised or unlawful processing of the personal data and against accidental loss or destruction of, or damage to, the personal data; </li><li>ensure that all personnel who have access to and/or process the personal data are obliged to keep the personal data confidential;</li><li>assist you in responding to any request from a data subject and in ensuring compliance with your obligations under Data Protection Laws with respect to breach notifications, impact assessments and consultations with any data protection supervisory authority or regulators; </li><li>notify you without undue delay and, in any event, within 72 hours after becoming aware of a personal data breach affecting the personal data, and provide you with such assistance as you may reasonably require to comply with your obligations in respect of such personal data breach under Data Protection Laws; </li><li>at the written direction of you, either delete or return the personal data and copies thereof to you on termination of this Clause 4; </li><li>maintain complete and accurate records of processing and information to demonstrate our compliance with this Clause and provide you with a copy of such information upon request. In the event you do not consider the information provided to be sufficient to determine our compliance with our obligations under this Clause, we will allow you or your designated auditor (provided such auditor is not a competitor of us) to conduct audits of our facilities, provided that: (a) you must give at least 30 days’ prior written notice of any such audit; (b) any audit shall be conducted during normal business hours and you shall minimise the disruption caused by the audit to the greatest extent possible; (c) you shall bear the costs involved in the audit; and (d) you shall only be permitted to carry out an audit once per calendar year. </li></ul> 4.3 You grant us general authorisation to appoint third parties to process personal data on your behalf (each being a “Sub-Processor”). If we wish to appoint or change any Sub-Processor, we will notify you in advance, thereby giving you a reasonable opportunity to object to such appointment or change. For the avoidance of doubt, you consent to us appointing the Sub-Processor(s) listed in the Data Processing Information table above below as from the date of this DPA. 4.4 In respect of each Sub-Processor, we will:<ul><li>enter into a written agreement incorporating terms which are substantially similar to those set out in this clause; and </li><li>remain liable to you for all acts or omissions of the Sub-Processor. </li></ul> <h3>5. International Transfers</h3>You acknowledge that we may transfer personal data outside the United Kingdom and European Economic Area provided that any such transfer will be carried out in accordance with the requirements of Data Protection Laws. <h3>6. Third Party Personal Data</h3> Consultants may process Third Party Personal Data in the course of providing their services to you. You acknowledge that:<ul><li>you are solely responsible for ensuring that your instructions to the Consultants comply with Data Protection Laws and that such instructions will not cause the Consultants to violate Data Protection Laws;</li><li>you are solely responsible for implementing and maintaining appropriate technical and organisational measures to ensure the security of Third Party Personal Data; and</li><li>neither we nor the EoR is not acting as a Processor of Third Party Personal Data under Data Protection Laws. The EoR’s role is strictly limited to facilitating the engagement of Consultants, and it does not involve any direct processing, control, or determination of the purposes and means of processing Third Party Personal Data. Due to the EoR having no direct role in processing Third Party Personal Data, the EoR has no obligation (and no means by which) to notify you if any instructions violate Data Protection Laws.</li></ul> <h3>7. Liability</h3> For the avoidance of doubt, our liability to you under this DPA shall be subject to the limitations and exclusions of liability set out in Clause 7 (Are we responsible if something goes wrong with your use of Revolut GlobalHire?) of these Terms.

<h1>Appendix - Data Processing Information</h1> <table><thead><tr><td width="263.0" >Subject</td><td width="476.0" >Detail</td></tr></thead><tbody><tr><td width="263.0" >Processing Purpose</td><td width="476.0" >To transmit Consultants’ personal data to you to enable you to comply with applicable laws and to manage relationships with Consultants.</td></tr><tr><td width="263.0" >Nature of processing</td><td width="476.0" >Displaying the personal data on the Revolut GlobalHire platform.</td></tr><tr><td width="263.0" >Personal Data</td><td width="476.0" >Personal data processed by us on your behalf include: <ul><li>Copy of employment agreement; and</li><li>When sharing is enabled by the Consultant: (a) Payroll and tax data; (b) Personal information relating to criminal records and ongoing criminal procedures; and (c) Health-related information that refers to illness or injury, sick leaves, medical certificates or documentation substantiating the need for absence, disabilities, infirmity, accidents, expositions to risk factors, physical and mental fitness to perform specific tasks. </li></ul></td></tr><tr><td width="263.0" >Data Subjects</td><td width="476.0" >Consultants</td></tr><tr><td width="263.0" >Duration of Processing </td><td width="476.0" >Term of the Terms</td></tr><tr><td width="263.0" >Approved Sub-Processors</td><td width="476.0" >Google Cloud, providing data hosting services in UK and EU</td></tr></tbody></table>

Revolut GlobalHire Terms and Conditions

<h1>Data Processing Addendum</h1><h3>1. Definitions</h3> “Agreed Purpose(s)” means as set out in clause 2 of this DPA. &quot;DPA&quot; means this Data Processing Addendum. “Data Protection Laws” means any applicable law relating to the protection of personal data and privacy, including (i) in the United Kingdom, the Data Protection Act 2018 (the &quot;UK GDPR&quot;) and the Privacy and Electronic Communications (EC Directive) Regulations 2003 (as amended); and (ii) in the European Union, the General Data Protection Regulation ((EU) 2016/679)) (“GDPR”), Directive 2002/58/EC (as amended) and any applicable Member State laws, regulations or secondary laws implementing the same. “SharedPersonal Data” means as set out in clause 2 of this DPA. “Third Party Personal Data” means any personal data belonging to your own clients, customers, or other third parties, which is processed by the Consultant The terms “data controller”, ‘’data processor”, “data subject”, “personal data”, “personal data breach” and “process” have the meanings given to them in the Data Protection Laws. Capitalised terms used herein but not otherwise defined in this DPA shall have the meanings ascribed to them in the Terms. <h3>2. Introduction</h3> 2.1 You acknowledge that we may act either as an independent data controller or a data processor on your behalf when processing Consultants’ personal data pursuant to these Terms. Clause 3 explains when we act as an independent controller. Clause 4 explains when we act as a data processor. 2.2 You acknowledge that where we act as a data processor on your behalf, we are also acting as a data processor on behalf of the EoR, who are the original controllers of the Consultant’s personal data. As a result, in line with EoR’s instructions, we can only share certain details regarding Consultants where such sharing has been authorised by the Consultant. 2.3 Each party will comply fully with Data Protection Laws when performing its obligations under these Terms. <h3>3. Controller terms</h3> 3.1 This table sets out the Shared Personal Data which you will share with us and the Agreed Purposes for which we may process it: <table><thead><tr><td width="265.0" >Subject</td><td width="474.0" >Detail</td></tr></thead><tbody><tr><td width="265.0" >Agreed Purpose</td><td width="474.0" >To enable provision of the Revolut GlobalHire under these Terms, namely by onboarding Consultants</td></tr><tr><td width="265.0" >Shared Personal Data and Data Subjects</td><td width="474.0" >Personal Data shared by you with us as necessary for onboarding, including full legal name, nationality and contact details.</td></tr></tbody></table> 3.2 For the purposes of Data Protection Laws, we will act as an independent controller when processing the Shared Personal Data for the Agreed Purpose. 3.3 Each party will comply fully with Data Protection Laws when performing its obligations under these Terms. In particular, each party will: <ul><li>only process the Shared Personal Data for the Agreed Purpose; </li><li>ensure it has a valid lawful basis for processing the Shared Personal Data for the Agreed Purposes and provide all necessary notices as required by Data Protection Laws to allow it to process the Shared Personal Data for the Agreed Purpose; </li><li>implement appropriate technical and organisational measures to protect the Shared Personal Data against accidental or unlawful destruction or accidental loss, damage, alteration, unauthorised disclosure or access; and</li><li>only retain the Shared Personal Data for as long as necessary to achieve the Agreed Purpose unless it is otherwise required to retain the Shared Personal Data to comply with its obligations under applicable laws, in which case it will delete the shared Personal Data upon expiry of this period.</li></ul> <h3>4. Processor terms </h3> 4.1 We also process Consultants’ personal data as a data processor on your behalf. The table in the Appendix of this DPA sets out the subject matter, duration, nature, and purpose of the processing, as well as the data subjects and personal data categories we process as a data processor on your behalf. 4.2 When processing personal data on your behalf under this Clause 4 of the DPA, we will: <ul><li>only process the personal data on your written instructions as set out in this Clause 4, unless we are required by applicable laws to otherwise process the personal data; in which case, we will, to the extent permitted by the relevant law, notify you of this requirement before performing the processing;</li><li>notify you without undue delay if we consider that any of your instructions conflict with Data Protection Laws; </li><li>implement appropriate technical and organisational measures to protect against the unauthorised or unlawful processing of the personal data and against accidental loss or destruction of, or damage to, the personal data; </li><li>ensure that all personnel who have access to and/or process the personal data are obliged to keep the personal data confidential;</li><li>assist you in responding to any request from a data subject and in ensuring compliance with your obligations under Data Protection Laws with respect to breach notifications, impact assessments and consultations with any data protection supervisory authority or regulators; </li><li>notify you without undue delay and, in any event, within 72 hours after becoming aware of a personal data breach affecting the personal data, and provide you with such assistance as you may reasonably require to comply with your obligations in respect of such personal data breach under Data Protection Laws; </li><li>at the written direction of you, either delete or return the personal data and copies thereof to you on termination of this Clause 4; </li><li>maintain complete and accurate records of processing and information to demonstrate our compliance with this Clause and provide you with a copy of such information upon request. In the event you do not consider the information provided to be sufficient to determine our compliance with our obligations under this Clause, we will allow you or your designated auditor (provided such auditor is not a competitor of us) to conduct audits of our facilities, provided that: (a) you must give at least 30 days’ prior written notice of any such audit; (b) any audit shall be conducted during normal business hours and you shall minimise the disruption caused by the audit to the greatest extent possible; (c) you shall bear the costs involved in the audit; and (d) you shall only be permitted to carry out an audit once per calendar year. </li></ul> 4.3 You grant us general authorisation to appoint third parties to process personal data on your behalf (each being a “Sub-Processor”). If we wish to appoint or change any Sub-Processor, we will notify you in advance, thereby giving you a reasonable opportunity to object to such appointment or change. For the avoidance of doubt, you consent to us appointing the Sub-Processor(s) listed in the Data Processing Information table above below as from the date of this DPA. 4.4 In respect of each Sub-Processor, we will:<ul><li>enter into a written agreement incorporating terms which are substantially similar to those set out in this clause; and </li><li>remain liable to you for all acts or omissions of the Sub-Processor. </li></ul> <h3>5. International Transfers</h3>You acknowledge that we may transfer personal data outside the United Kingdom and European Economic Area provided that any such transfer will be carried out in accordance with the requirements of Data Protection Laws. <h3>6. Third Party Personal Data</h3> Consultants may process Third Party Personal Data in the course of providing their services to you. You acknowledge that:<ul><li>you are solely responsible for ensuring that your instructions to the Consultants comply with Data Protection Laws and that such instructions will not cause the Consultants to violate Data Protection Laws;</li><li>you are solely responsible for implementing and maintaining appropriate technical and organisational measures to ensure the security of Third Party Personal Data; and</li><li>neither we nor the EoR is not acting as a Processor of Third Party Personal Data under Data Protection Laws. The EoR’s role is strictly limited to facilitating the engagement of Consultants, and it does not involve any direct processing, control, or determination of the purposes and means of processing Third Party Personal Data. Due to the EoR having no direct role in processing Third Party Personal Data, the EoR has no obligation (and no means by which) to notify you if any instructions violate Data Protection Laws.</li></ul> <h3>7. Liability</h3> For the avoidance of doubt, our liability to you under this DPA shall be subject to the limitations and exclusions of liability set out in Clause 7 (Are we responsible if something goes wrong with your use of Revolut GlobalHire?) of these Terms.