Legal document
Privacy policy
Last updated: 22 October 2026
Last updated: 22 October 2026
PayTrip attaches particular importance to the protection of your personal data.
This Policy simply explains what data we use, why we use it, with whom it may be shared and what your rights are when you use PayTrip services, including the PayTrip app, the accounts and cards offered with our partners, PayTrip Link and our websites.
1. Who processes your data?
PayTrip SAS
1 avenue du Champ de Mars
45100 Orléans – France
RCS Orléans: 833 745 748
Email: client@paytrip.fr
PayTrip processes the data needed to operate its services, manage its relationship with users, provide support, ensure security, prevent fraud and meet its administrative and contractual obligations.
DiPocket
The payment accounts, cards and electronic money services offered as part of the PayTrip offering are provided by DiPocket UAB, an electronic money institution authorised and supervised by the Bank of Lithuania.
DiPocket processes, under its own responsibility, the data required to provide those services, in particular for account and card management, the execution of payments and compliance with its regulatory obligations.
Our other service providers
PayTrip also uses specialist providers, in particular for identity verification, payment processing, security, fraud prevention, hosting, support and communications.
They receive only the data needed for their involvement.
2. Who is covered?
This Policy applies in particular to PayTrip customers, beneficiaries designated by a customer, people using PayTrip Link to make a payment, visitors to our websites and people who contact PayTrip.
A PayTrip Link payer can make a payment without holding a PayTrip account.
3. What data do we use?
The data processed depends on the services used.
| Category | Examples |
|---|---|
| Identity and contact details | Surname, first name, date of birth, nationality, address, email, phone number |
| Identity verification | Identity documents, KYC information and results of related checks |
| Account and payment instruments | Information relating to the PayTrip account, cards and beneficiaries |
| Transactions | Amount, date, currency, sender, recipient, reference and status of transactions |
| Situation and use of the service | Information needed to open and manage the relationship, the origin or destination of certain funds, and the expected use of the services |
| PayTrip Link | Recipient, amount, currency, payment reference, information needed to allocate the payment |
| Support | Messages, requests, complaints and documents sent to our teams |
| Technical and security data | IP address, device, browser, logins and security or fraud indicators |
We limit collection to the data needed for the services used and the related checks.
4. PayTrip Link
When someone uses paytrip.link, PayTrip processes the information needed to display the recipient, enable the payment, track its outcome and credit the correct destination.
The payer may in particular provide their name, contact details and the information needed for the payment and its security.
PayTrip shows the payer only the information needed for them to check who they are sending money to.
Sensitive card details are entered in the payment provider’s secure environment. PayTrip does not retain the full card number or its security code (CVV/CVC).
PayTrip may receive the information needed to track the payment, such as its reference, amount, status, certain card characteristics and the results of security checks.
5. Why do we use your data?
| Purpose | Main legal basis |
|---|---|
| Create and manage your access to PayTrip services | Performance of the contract |
| Provide PayTrip accounts, cards and features | Performance of the contract |
| Enable and track PayTrip Link payments | Performance of the contract |
| Respond to requests and provide support | Performance of the contract / legitimate interest |
| Verify identity and comply with applicable obligations | Legal and regulatory obligations |
| Prevent fraud and secure the services | Legitimate interest / applicable obligations |
| Detect and analyse unusual transactions or behaviour | Legitimate interest / applicable obligations |
| Handle complaints and defend PayTrip’s rights | Legitimate interest / legal obligations |
| Comply with accounting, tax or administrative obligations | Legal obligation |
| Send commercial communications | Consent or legitimate interest, as the case may be |
A PayTrip Link payer’s data is not used for commercial purposes merely because they made a payment.
6. Security and fraud checks
PayTrip and its partners may use automated and manual checks to protect users and the services.
These checks may in particular lead to a request for further verification, a review of a transaction or, where necessary, a refusal or restriction of a transaction or of access to the service.
Decisions are based on the information available and the level of risk identified.
7. Where does the data come from?
Data may come directly from you, from your use of PayTrip services, from DiPocket, from our payment or identity-verification providers, from the banks and payment networks concerned and, where authorised, from sources used for fraud prevention or to meet our obligations.
8. Who do we share data with?
Where necessary, data may be disclosed to authorised PayTrip teams, DiPocket, payment providers, banks and card networks, identity-verification, security, hosting and fraud-prevention providers, and to competent authorities where the law requires or allows it.
PayTrip does not sell your personal data to advertisers or to third parties.
9. How long do we keep the data?
PayTrip keeps data for as long as needed to provide the services and then, where necessary, for as long as needed to meet its obligations or defend its rights.
Data relating to the customer relationship, payment transactions, security, regulatory checks or complaints may therefore be retained after the relationship ends where this is necessary.
Data used solely for commercial purposes is kept until consent is withdrawn or for the period allowed.
PayTrip does not retain the security code or the full number of cards used in PayTrip Link.
10. Transfers of data outside the European Economic Area
Some providers may process data from countries outside the European Economic Area.
Where this is necessary, PayTrip ensures that such transfers benefit from the appropriate safeguards provided for by applicable regulation.
11. Security
PayTrip implements technical and organisational measures designed to protect data against unauthorised access, loss, alteration, disclosure or fraudulent use.
Access to data is limited to people who need it in the course of their duties, and sensitive access or operations may be logged and monitored.
12. Your rights
Depending on your situation, you may request access to your data, its rectification, erasure or restriction of processing.
You may also object to certain processing, request portability of certain data, or withdraw your consent where processing is based on it.
Some data may nonetheless have to be retained where PayTrip or its partners are subject to a legal obligation.
To exercise your rights:
By email
client@paytrip.fr
By post
PayTrip SAS
Personal data protection
1 avenue du Champ de Mars
45100 Orléans – France
We may ask for additional information where this is needed to verify your identity.
You may also lodge a complaint with the Commission nationale de l’informatique et des libertés (CNIL).
13. Cookies and similar technologies
PayTrip websites and services may use cookies or similar technologies that are necessary for their operation and security and, depending on your choices, for audience measurement or other non-essential uses.
Where your consent is required, you can accept, refuse or change your choices via the preference management module available on the site concerned.
14. Changes to this Policy
PayTrip may update this Policy in particular when its services, partners or data processing activities change.
The version in force is the one published on PayTrip’s official channels. The date of the last update appears at the top of the document.