Track 1 platform and get the weekly governance digest. No credit card required.
This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology
This is Adyen's privacy policy explaining how the company collects and uses your personal data when you interact with Adyen's payment services, either directly or through a merchant that uses Adyen to process payments. The most important thing to know is that Adyen may process your financial transaction data, device identifiers, and behavioral information for fraud prevention and business purposes even when you never directly signed up with Adyen, because Adyen operates behind many online and in-store payment checkouts. If you are in the EU, UK, or California, you have the right to request access to, correction of, or deletion of your personal data by contacting Adyen's privacy team at privacy@adyen.com.
This document is Adyen's privacy statement governing the collection, processing, and sharing of personal data for individuals who interact with Adyen's payment processing platform, website, and related services, with legal bases including contractual necessity, legitimate interests, legal obligations, and consent as applicable under GDPR and equivalent frameworks. The statement asserts that Adyen processes a broad range of personal data categories including identification data, financial and transaction data, device and behavioral data, and in limited contexts special categories of data such as biometric data for KYC purposes, with the terms authorizing sharing with financial institution partners, fraud prevention networks, government authorities, and third-party service providers globally. Notably, the policy discloses that Adyen processes data as both a data controller and a data processor depending on the service context, a distinction that materially affects which rights individuals may exercise directly against Adyen versus the merchant using Adyen's infrastructure. The document engages GDPR, UK GDPR, CCPA and California Privacy Rights Act, and regional frameworks across APAC and LATAM markets, with explicit acknowledgment of cross-border data transfer mechanisms including Standard Contractual Clauses for transfers outside the EEA. Material compliance considerations include the dual controller-processor role, the breadth of legitimate interests asserted as a processing basis, and the adequacy of consent mechanisms for cookie-based and behavioral data collection.
Institutional analysis available with Professional
Regulatory exposure by statute, material risk assessment, vendor due diligence action items, and enforcement precedent. Available on Professional.
Start Professional free trialMonitoring
Adyen has updated this document before.
Watcher includes same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
Professional Governance Intelligence
Need provision-level monitoring and regulatory mapping?
Professional includes governance timelines, compliance memos, audit-ready analysis, and full provision tracking.
Start Professional free trialCross-platform context
See how other platforms handle Automated Fraud Decision-Making and similar clauses.
Compare across platforms →Governance Monitoring
Structured alerts for policy changes, governance events, and provision updates across 318+ platforms.