Checkout.com uses 'legitimate interests' as a legal reason to process personal data for fraud prevention, security, service improvement, and business marketing without requiring your explicit consent in each case.
This analysis describes what Checkout.com's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Legitimate interests is a flexible but contested legal basis under GDPR; individuals have the right to object to processing on this basis, and Checkout.com must stop unless it can demonstrate compelling grounds that override the individual's interests.
Interpretive note: The sufficiency of legitimate interests as a legal basis for specific processing activities depends on documented LIA outcomes and regulatory interpretation, which vary by jurisdiction and processing context.
The updated policy establishes formal complaint procedures for UK and Australia users, requiring Checkout to acknowledge complaints within 30 days and respond without undue delay. For UK users specifically, the policy clarifies that complaints must first be raised with Checkout before escalating to the Information Commissioner's Office. The policy also discloses that transaction information collection now includes country data alongside currency and amount. For Australia users, the policy clarifies that identity verification is a legal requirement and cannot be provided anonymously or pseudonymously. Users in these jurisdictions can submit data protection complaints through Checkout's designated process and escalate to their respective regulatory authorities if dissatisfied with Checkout's response.
View change record →Processing on legitimate interests grounds means Checkout.com may use personal data for fraud prevention, analytics, and marketing to business contacts without asking for consent each time, but EU and UK individuals retain the right to object to this processing by contacting dpo@checkout.com.
How other platforms handle this
to object to profiling activities based on our own legitimate interests
If you choose to reveal any personal information about yourself to other users, you do so at your own risk. We strongly encourage you to use caution in disclosing any personal information online.
When you are asked to provide information, you may decline to do so; but if you choose not to provide information that is necessary to provide some of our Services, you may not be able to use those Services.
"We may process your personal data where it is necessary for our legitimate interests or those of a third party, provided those interests are not overridden by your interests or fundamental rights and freedoms. Legitimate interests include fraud prevention, network and information security, improving our services, and direct marketing to business contacts.Excerpt from Checkout.com's Privacy
1.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Legitimate interests is a flexible but contested legal basis under GDPR; individuals have the right to object to processing on this basis, and Checkout.com must stop unless it can demonstrate compelling grounds that override the individual's interests.
Processing on legitimate interests grounds means Checkout.com may use personal data for fraud prevention, analytics, and marketing to business contacts without asking for consent each time, but EU and UK individuals retain the right to object to this processing by contacting dpo@checkout.com.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Checkout.com.