🔥 HOT: It/legal/privacy center - High Quality
Stripe Privacy Center
Welcome to the Stripe Privacy Center
Stripe respects the privacy of everyone that engages with our platform, and we are committed to being transparent about our privacy processes and policies. We are a platform that enables millions of businesses, and in order to provide our services to our Business Users and End Users, we collect and process personal data.
The Stripe Privacy Center contains the answers to frequently asked questions about how we collect and use personal data, the rights that individuals have in relation to personal data held by Stripe, and how Stripe complies with international data protection laws.
All materials have been prepared for general information purposes only. The information presented is not legal advice, is not to be acted on as such, may not be current and is subject to change without notice.
Below is a list of terms that will help “you” navigate the Privacy Center:
“YOU” | MEANING | STRIPE EXAMPLES |
|---|---|---|
Business User | Stripe provides services to entities (“Business Users”) who directly and indirectly provide us with “End Customer” Personal Data in connection with those Business Users’ own business and activities. | Stripe user or merchant Platform User Connect Accounts |
End Customer | When you do business with, or otherwise transact with, a Business User (typically a merchant using Stripe Checkout, e.g. when you buy a pair of shoes from a merchant that uses Stripe for payment processing) but are not directly doing business with Stripe, we refer to you as an “End Customer.” | Individual using Identity Cardholder using Checkout |
End User | When you directly use an End User Service (such as when you sign up for Link, or make a payment to Stripe Climate in your personal capacity), for your personal use, we refer to you as an “End User.” | User of Link Personal contributor to Stripe Climate |
Representative | When you are acting on behalf of an existing or potential Business User (e.g. you are a founder of a company, or administering an account for a merchant who is a Business User), we refer to you as a “Representative.” | Beneficial owner Shareholder, officer, director Account representative |
Visitor | When you visit a Site without being logged into a Stripe account or otherwise communicate with Stripe, we refer to you as a “Visitor.” (e.g. you send Stripe a message asking for more information because you are considering being a user of our products). | Stripe Sessions attendee Stripe Site visitor |
Contents
How We Collect, Disclose, and Use Personal Data
Is Stripe acting as a data controller or a data processor?
The answer is both.
The “data controller” is the entity which determines the purposes and means of the data processing taking place. The “data processor” is an entity acting on behalf and under the instructions of a controller in processing Personal Data.
Stripe is a data controller when it determines the purposes and means of the processing taking place. Please see this Privacy Center article for more information on Stripe’s controller activities.
Stripe is a data processor where it is providing the Stripe Services to Business Users and facilitating payment transactions on behalf of and at the direction of a Business User. Our Business Users direct us to take payment from cardholders / End Customers and we act on their instructions.
Stripe is also considered a processor when servicing the Stripe platform (e.g. when Stripe responds to a request for customer support from a Business User).
As a platform provider, we need to ensure consistency across our platform, and that includes consistency with respect to the commitments that we give about how we operate our platform. We contract with all of our Business Users (including some of the world’s largest companies) on this basis.
Which Stripe entities are involved?
For most of our services, the primary data controller is either Stripe, Inc., the US parent company operating under US law or Stripe Technology Company, Limited (“STC”), an Irish company operating under Irish law.Â
The Stripe entities responsible for your data will depend on your location, the product or service you use with us and the specific context of the data processing which determines whether Stripe is acting as a data controller and/or data processor.
If you are located outside of the Americas [e.g., European Economic Area (“EEA”), Switzerland, the United Kingdom, the Middle East and Africa, or Asia Pacific (“APAC”)], the following entities may act as data controllers, either individually or jointly depending on the product or service you use:Â
- Stripe Technology Company, Limited (“STC”): An Irish company that is Stripe’s main establishment in Europe under GDPR. STC has primary responsibility for processing your Personal Data outside of the Americas.Â
- Stripe Payment Europe, Limited (“SPEL”): An Irish company with principal responsibility for contracting with Stripe Users in certain jurisdictions outside of the Americas (see table below).Â
- Stripe local regulated entities:Â These are specific Stripe entities that are licensed, authorised or registered by a local regulatory authority in a particular jurisdiction. When payment processing services offered by Stripe require an authorised provider or electronic money institution or where otherwise specified, the Stripe local regulated entity will provide those services. In such instances STC, SPEL and the relevant Stripe local regulated entity are joint data controllers of your Personal Data.
If you are located in the Americas, your Data Processing Agreement (“DPA”) will be with SINC and if you are located outside of the Americas, your DPA will be with SPEL.Â
Please see our table below for more information on which Stripe entity is your data controller in these jurisdictions:
User location | Purposes of processing | Stripe Entity/Your data controller | Stripe Entity Location |
Australia | Provision of services and regulated activities in accordance with https://stripe.com/au/legal/ssa | Stripe Payments Australia Pty Ltd A.C.N. 160 180 343 | Australia |
|
| STC | Ireland |
|