INTRODUCTION
We at Vitesse care about your privacy.
We build our relationships with clients, service users and other individuals whose personal information we process in connection with our services.
This Privacy Notice was created to explain what personal information we collect, how and why we use it, where we collect it from, who we will share your personal information with, how long we will keep your personal information for, what are your subject rights and how we keep your personal information safe.
Vitesse is headquartered in London, England and has offices in London and Rotterdam in the Netherlands, and New York, and provides treasury management and payment services to corporate customers. The controller of your personal information is the Vitesse entity with which you interact.
Whenever Vitesse processes your personal data, we are processing it in line with our regulatory obligations, including the UK and EU General Data Protection Regulations, as well as applicable US Privacy laws.
This Privacy notice relates to our use of any personal information we collect from you as follows:
- When you visit or interact with our website;
- When you fill in an application form, enquiry, or any other form of contact;
- when we communicate by email or text message or other electronic means;
- when we communicate with you by telephone or through a virtual meeting;
- when you use our platform; or
- we process a payment in which you are the payer or payee, beneficiary or another payment party; or
- when we receive information about you from our clients or other relevant sources.
INFORMATION WE WILL COLLECT ABOUT YOU
Website Users
When you visit or interact with our website, we may collect information such as your IP address, browser and device information, cookie identifiers, pages viewed, dates and times of access, and information you provide through forms or enquiries.
We use this information to operate and secure the website, respond to enquiries and service requests, including by contacting the relevant client where necessary, understand website usage and improve our services. Where required, we obtain consent before using non-essential cookies or similar technologies. Further information is available in our Cookie Policy.
Platform Users
When you visit or interact with our portal, we may collect information such as your IP address, browser and device information, cookie identifiers, pages viewed, dates and times of access, information about how you interact with the portal, and information you provide through forms or enquiries.
We use this information to operate and secure the platform, respond to enquiries, understand platform usage and improve our services. Where required, we obtain consent before using non-essential cookies or similar technologies. Further information is available in our Cookie Policy.
Corporate client
When a corporate client applies to use our services, we will collect details about key individuals within that business, including names, email addresses, postal and/or residential addresses, telephone or mobile numbers, gender, dates of birth and other relevant business and financial information. We process this information to assess and manage the application, verify identities, provide our services, comply with legal and regulatory obligations, and pursue our legitimate interests in managing and protecting our business. We will act as data controller for those details.
We also may gather personal information from third parties relevant to financial crime such as fraud prevention and anti-money laundering. This includes US financial crime compliance regulations, including the ‘travel rule’, where applicable..
Payment originators and beneficiaries
When a corporate client instructs us to make a payment to or on behalf of an entity or individual, we will collect, where relevant, names, email addresses, postal addresses, telephone or mobile numbers, gender, dates of birth and bank account information. These details will be passed to us by our client, or directly by you where we have been instructed to collect this information directly by our client. We process this information to execute and administer payments, comply with our legal and regulatory obligations, prevent financial crime and protect our services. We and our client, with whom you have a direct relationship, will be both data controllers in our own right.
Please note that sometimes we may require you to provide additional personal information, depending on the country destination where payments are being made from or to. When we do this, we will provide further information, to our client, about why we are collecting this information and how we will use it.
Telephone Call Recordings
If you telephone us via Customer Support, we may record the call in order to confirm any instructions given to us, for training purposes, for crime prevention, to improve the quality of our customer service and to comply with our legal or regulatory obligations.
We may also record or transcribe business calls and virtual meetings with the consent of participants’. We may use automated tools to generate transcripts, summaries and related insights. Participants will be informed before recording or transcription begins.
Marketing
Vitesse may use your data to personalise the marketing messages you receive about our services, and to measure or understand the effectiveness of our marketing communications.
We may use data that we hold about you to provide you with information about other similar products and services we offer which we feel may interest you.
We rely on our legitimate interests in promoting our services, or on consent where required by law. You can opt out of direct marketing at any time by contacting privacy@vitesse.io.
Sharing of your information with others
Your personal data may be shared beyond Vitesse for the following reasons:
- For the performance of any contract we enter into with our clients or you, we may be required to share data with selected third parties, including:
- business partners;
- suppliers;
- subcontractors.If we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms of use and other agreements; or - To protect the rights, property, or safety of Vitesse, our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and the prevention and detection of crime.
How long we will retain your information
We will keep your information only as long as necessary. The time will depend on the type of relationship you have with Vitesse. All data required to execute a payment will be kept for 7 years as we are required by law to keep this information.
When our relationship with our client ends, we will keep relevant information for 7 years after the contract end date. If the application to become a Vitesse client is rejected, we will keep any relevant details for a maximum of 12 months.
Where we store your information
The personal data provided is stored in our main processing centres in the UK, EU and US. Your data will be stored in one or more of these secure hosting environments.
The transaction data that we collect may be transferred to other global locations. We ensure that appropriate safeguards are in place, including, as applicable, adequacy arrangements, Standard Contractual Clauses, or the International Data Transfer Agreement.
The transmission of information via the internet is not completely secure. Vitesse has accredited information security practices in place but we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk.
We employ a range of technologies and procedures to ensure that this data is secure, including encryption, anti-virus and anti-malware software, intrusion detection, company-wide data usage policies, and mandatory security and privacy staff training.
OUR OBLIGATIONS TO YOU
Depending on the jurisdictions where you are resident, you may have specific legal rights in relation to your data. Vitesse looks to uphold the following rights even where it is not legally required to do so, provided this does not conflict with our other legal obligations.
The right to be informed
You have the right to request access to the information we hold about you by making a Subject Access Request, by emailing privacy@vitesse.io.
The right of access
You have the right to be informed why and how we collect your personal data, how we will use this information, who we share it with, what are the measures we take to protect this information and your individual rights. We publish this information in this Privacy Notice.
The right to rectification
You have the right for inaccurate or incomplete data we hold to be updated. You can make a request by emailing privacy@vitesse.io
The right to erasure
You may have the right to be forgotten in the circumstances where we are not obliged by law to keep your information. If you wish to exercise this right please contact us by emailing privacy@vitesse.io.
The right to restrict processing
In certain circumstances, you may request that we restrict the processing of your personal data, including while we consider a request to correct your data or an objection to its processing. For example: when you contact us to update your details you have the right to request restriction until your details have been updated.
The right to withdraw consent
For the processing activities where we have asked you for consent, you have the right to withdraw this consent at any point by emailing privacy@vitesse.io. Withdrawal will not affect the lawfulness of processing carried out before consent was withdrawn.
.
The right to object
You can object to the processing of your personal data at any point by emailing privacy@vitessepsp.com. There may be instances where we may not be able to fulfil those requests, but we will provide you with an explanation when replying back to you.
Vitesse will always respond to requests for information about personal data processing, requests for a copy of the personal data we hold about you, requests to delete personal data and requests to opt out from receiving direct marketing communications.
The right not to be subject to automated decisions and profiling
Vitesse may use automated tools, including AI-enabled tools, to support its services and business operations. We do not currently use solely automated processing to make decisions about you that produce legal or similarly significant effects. If this changes, this Privacy Notice will be updated and you will be informed where required.
The right to data portability
If you have provided us with your personal data with consent or contract, you have the right to request the data that you have provided to us in a machine-readable format should you decide to move to another data controller.
The right to complain
If you feel we have been intrusive to your privacy or misused your data you may have the right to complain to us via privacy@vitesse.io or to the relevant dataprotection or regulatory authority in your jurisdiction, including Information Commissioner’s Office if you are based in the U.K.
Cookies
Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site. For detailed information on the cookies we use and the purposes for which we use them see our Cookie Policy.
Changes To Our Privacy Notice
This notice was last updated on 27 Aug 2026. Any changes we make to our privacy policy in the future will be posted on this page and, where appropriate, notified to you by e-mail. Please check back frequently to see any updates or changes to our privacy policy.
Our site may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
ADDITIONAL CONSIDERATIONS FOR U.S. RESIDENTS
The personal data provided by you is stored in a secure hosting environment based in the U.S.
The transaction data that we collect may be transferred to, and also stored at, a destination outside the U.S. It may also be processed by staff operating outside the U.S. who work for Vitesse or for one of our suppliers. This includes staff engaged in the processing of your payment details and the provision of support services. By submitting personal data, you acknowledge that it may be transferred, stored or processed as described above. To ensure your data is secure we comply with our privacy obligations, we have data processing agreements and appropriate security, operational, organisational and technical measures in place in accordance with this Notice.
For California residents:
We will not share information we collect about you with non-affiliated third parties, except as permitted by law, including, for example, with your consent or to service your account. We will limit sharing with our affiliates to the extent required by California law.
You may have certain rights under the California Consumer Privacy Act (“CCPA”) regarding your personal data, including:
- The right to be informed of the personal data we collect, use, and process for purposes described in this Privacy Notice.
- Further detail on:
- the categories of personal data collected,
- the sources from which we collect it,
- the business or commercial purposes of collection,
- as well as the categories of third parties to whom we disclose personal data, are described within this Privacy Policy,
- The right to request the specific pieces of personal data that we have collected about you in the twelve (12)months preceding your request;
- The right to request deletion of your personal data that we collected;
- The right to correct any inaccurate information that we hold about you;
- The right to limit the use of your sensitive personal information to only that which is necessary for providing products or services;
- The right to opt-out of the sale or sharing of personal information,
- The right not to be discriminated against for exercising any of these rights. - You should be aware that this section does not apply to:
- Personal information covered by certain sector-specific privacy laws, including the Gramm-Leach-Bliley Act and its implementing regulations, the California Financial Information Privacy Act, and the Driver’s Privacy Protection Act of 1994; or other information subject to a CCPA exception.
For Vermont residents:
We will not share information we collect about you with non-affiliated third parties, except as permitted by law, including, for example with your consent or to service your account. We will not share information about your creditworthiness with our affiliates, other than as permitted by Vermont law, unless you authorise us to make those disclosu