Last Updated: 1 September 2026
cedar-mink operates in accordance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. We recognise the importance of protecting personal and business data processed through our payment services.
We process data under the following legal bases:
Under GDPR, you have the following rights regarding your personal data:
You may request copies of personal data we hold about you. We will provide this information within 30 days of receiving a valid request.
If information we hold is inaccurate or incomplete, you may request corrections. We will update records within 14 days of verification.
You may request deletion of your personal data. This right is subject to legal retention requirements for financial records, which mandate seven-year retention of transaction data.
You may request temporary restriction of data processing while we investigate accuracy disputes or assess the need for continued processing.
You may request transfer of your data to another service provider in a structured, commonly used format.
You may object to processing based on legitimate interests. We will cease processing unless compelling legitimate grounds override your interests.
We use automated systems for fraud detection. You have the right to request human review of automated decisions affecting your service access.
To exercise any GDPR rights, submit requests to:
Data Protection Officer
cedar-mink
42 Threadneedle Street
London EC2R 8AY
United Kingdom
Email: [email protected]
We will respond within 30 days. Complex requests may require additional time, about which we will notify you.
Our appointed Data Protection Officer oversees compliance with data protection regulations and serves as your primary contact for privacy concerns.
We primarily process data within the United Kingdom. When international transfers are necessary for payment processing, we ensure appropriate safeguards through:
In the event of a data breach affecting your personal information, we will:
Our services are designed for businesses and adults aged 18 and over. We do not knowingly collect information from individuals under 18.
Where processing relies on consent (such as marketing communications), you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing conducted before withdrawal.
If you believe we have not complied with GDPR requirements, you may:
ICO contact information:
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Telephone: 0303 123 1113
Website: ico.org.uk
We review this GDPR compliance statement annually and update it as necessary to reflect changes in our processing activities or legal requirements. Material changes will be communicated to active customers.