We may also share your personal data with third parties in the event that we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets, along with its professional advisers.

If we use your personal data in ways that are not described above, we will provide you with notice of this before doing so.

If you have an online account with us, then we will store your username and password in order to manage your access to our platforms.

For instance, you may get in touch with us via our website or by telephone, we may email you or vice versa or you may send us feedback via a survey form.

We may collect certain details about you and your preferences (as a prospective customer, customer and/or card holder). This may include your purchasing behavior and preferences.

This may include your date of birth and personal address, passport number, driving license number and/or national insurance number.

If you are a director or beneficial owner of a prospective customer then we may capture and use your personal data to conduct credit and anti-money laundering checks.

Please bear in mind that we may collect and consult your personal data in public registers and public sources (e.g. via the internet) as part of the know your client process.

We do not sell or otherwise disclose your data, except as described in this privacy policy. We may share you data with the following parties:

1. Other members of the FLEETCOR group.
2. Providers of transaction services, such as card issuers, merchants, payment processors and other suppliers to assist with the transactions and administration of payment services.
3. Marketing and data analytics companies.
4. IT suppliers.
5. Risk and fraud prevention agencies and monitoring providers.
6. Our insurers and professional advisers.
7. Regulators and other government agencies including, but not limited to, public authorities, regulators, the police and other law enforcement agencies.

We do not authorize any third parties that we share data with to use or disclose your data except as necessary to perform certain services on our behalf, to comply with legal requirements. We require these third parties, through our contractual arrangements with them, to appropriately safeguard the privacy and security of the data they process on our behalf.

We may also receive data about you from the following third parties:

• Social media platforms.
• Data brokers.
• Our commercial partners.
• Public databases.
• Regulators and other government agencies.

If you would like to receive a full list of our suppliers and other third parties who we share your data with or receive your data from then you can get in touch with us using the details provided in the section “Who should you contact with questions?”.

As with any multinational organization, we are often required to transfer data internationally. Accordingly, your personal data may be transferred globally (if your data is collected within the European Union, this means that your data may be transferred outside of it). This includes transfers that have been identified in the previous section “Who do we share your data with and for what purposes”.

When using personal data as described in this privacy policy, it may be transferred either within or outside the country or territory where it was collected, including to a country, territory or international organisation that may not have EU equivalent data protection standards.

For example, we may transfer your personal data to our vendors based outside the European Union. In all cases, the transfer will be on the basis of a European Commission adequacy decision or we will implement adequate measures, for example the EU Model Contracts, and including appropriate security measures, for the protection of personal data in those countries, territories or international organisations in accordance with applicable data protection laws. If you would like more information about any of the data transfer measures on which we rely please contact us using the details provided in the section “How to reach us”?.

Corpay One, as part of Corpay, will take appropriate technical and organisational security measures to secure your personal data and to protect it from loss, misuse or alteration. Personal data that we hold about you is stored on our secure servers or those of our appointed suppliers. Our web pages that collect your data are secured with Secure Socket Layers (SSLs).

Where we have given you (or where you have chosen) a password which enables you to access certain parts of our website, you are responsible for keeping this password confidential. We ask you not to share this password with anyone.

Corpay One, as part of Corpay., maintains an information security program that is designed to:

• Secure and maintain confidentiality of your personal data.
• Protect against anticipated threats or hazards to security or integrity of your data.
• Protect against unauthorized access to or use of your data that could result in substantial harm or inconvenience to you or your entity if compromised.
• Comply with applicable laws.

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

Details of retention periods for different aspects of your personal data can be requested by contacting the DPO.

In some circumstances you can ask us to delete your data, please see “Your Rights and Choices”.

In some circumstances we may anonymise your personal data (so that it can no longer be associated with or be used to identify you) for research or statistical purposes in which case we may use such data indefinitely without further notice to you.

Corpay’s websites, including Corpay One websites, are not intended for use by children, especially those under the age of 18. No one under the age of 18 should provide any personal data or participate in any forums, chats, or online discussions. Minors under the age of 18 are prohibited from applying for emails, newsletters and/or products or services, on our websites. If we identify that we have received any such personal data we will delete it.

You may have some or all of the following rights in respect of personal data about you that we hold:

• Request us to give you access to it.
• Request us to rectify it, update it, or erase it.
• Request us to restrict our use of it, in certain circumstances.
• Object to our using it, in certain circumstances.
• Where legally possible, withdraw your consent to use it.
• Data portability, in certain circumstances.
• Opt out from using it for direct marketing.
• Lodge a complaint with the supervisory authority in your country (if there is one).

You are able to exercise these rights by contacting us using the details set out in the “How to reach us” section.

You have the rights set out in the table below:

If you have any questions about our privacy policy, including any requests to exercise your legal rights in relation to the data we hold on you, then please contact the Corpay One DPO using the details set out below:

How to reach us - Data Controller / DPO Contact Details 

Country: Denmark
Product: Corpay One
Data Controller: Corpay One
DPO: Darren Pascoe
Email address: dpo@fleetcor.com
Postal Address: Heath Farm Hampton Lane, Meriden, Coventry CV7 7LL

If your country of residence has a data protection authority, you have a right to contact it with any questions or concerns. If we cannot resolve your questions or concerns, you also have the right to seek judicial remedy before a national court.

Updates to this privacy policy

We will update this policy from time to time to reflect changes in our business. We will inform you of these changes as required under applicable laws.