Last updated: 7 October 2026
This Privacy Policy explains how Enhanced Merchant Solutions ("EMS", "we", "us" or "our") collects, uses, stores and protects personal information when you use our website, submit an application, contact us, make a referral or use any services provided by EMS.
EMS is a UK-registered company. We are committed to handling personal data responsibly and in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Depending on how you interact with EMS, we may collect the following information:
When you apply for merchant services, we may collect information such as:
Where required to provide our services, we may collect bank account details such as:
Sensitive financial information is handled using appropriate security measures and only accessed where necessary for legitimate business purposes.
If you refer a business or individual to EMS, we may collect the information you provide about that referral, such as their name, business name, telephone number and email address.
You should only provide another person's personal information where you have a lawful basis to do so.
We may retain information contained in emails, messages, support requests, application forms and other communications you send to us.
When you use our website or online portal, we may collect technical information such as:
This information may be used for security, fraud prevention, troubleshooting and improving our website and services.
We may use your personal information to:
Where we send marketing communications, we will provide an appropriate opportunity to opt out where required by law.
Under UK data protection law, we will only process personal information where we have a lawful basis to do so.
Depending on the circumstances, this may include:
Where we rely on consent, you may withdraw that consent at any time.
We may share personal information where reasonably necessary to provide our services or meet our legal obligations.
This may include sharing information with:
We do not sell your personal information to third parties.
Where we use third-party service providers to process personal information on our behalf, we take appropriate steps to ensure that your information is handled securely and in accordance with applicable data protection requirements.
Some of our service providers may process information outside the United Kingdom.
Where personal data is transferred outside the UK, we will take appropriate steps to ensure that the transfer is lawful and that suitable safeguards are in place in accordance with applicable UK data protection legislation.
We take reasonable and appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
These measures may include access controls, secure authentication, encryption, secure hosting, monitoring and appropriate staff access restrictions.
However, no online system can be guaranteed to be completely secure. You should take reasonable precautions when providing information online, including keeping passwords and account details confidential.
Our website may use cookies and similar technologies.
Some cookies are necessary for the website to function correctly, maintain sessions and provide security.
Where required, non-essential cookies, analytics or similar technologies will only be used with your consent.
You may change or withdraw your cookie preferences through the cookie controls provided on our website.
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including where necessary to:
When information is no longer required, we will take reasonable steps to securely delete or anonymise it.
Under UK data protection law, you may have the right to:
These rights are subject to certain legal conditions and exemptions.
To exercise your rights, please contact us using the details provided below.
Our services are intended for businesses and adults. We do not knowingly collect personal information from children unless there is a lawful reason to do so.
We may update this Privacy Policy from time to time to reflect changes to our services, legal requirements or how we process personal information.
If you have questions about this Privacy Policy, wish to make a data protection request or have concerns about how your personal information is being handled, please contact us at hello@shift4referrals.com.