The notice discloses that personal data may be shared with Checkout group affiliates, third-party service providers covering a range of functions including advertising networks and background screening, and payment ecosystem partners including banks, card schemes, alternative payment method providers, and issuers.
This analysis describes what Checkout.com's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision identifies the categories of third-party recipients of personal data and notably includes advertising networks and background screening companies among the service provider categories, which are operationally distinct from the core payment processing function and may engage additional regulatory considerations.
The updated policy establishes formal complaint procedures for UK and Australia users, requiring Checkout to acknowledge complaints within 30 days and respond without undue delay. For UK users specifically, the policy clarifies that complaints must first be raised with Checkout before escalating to the Information Commissioner's Office. The policy also discloses that transaction information collection now includes country data alongside currency and amount. For Australia users, the policy clarifies that identity verification is a legal requirement and cannot be provided anonymously or pseudonymously. Users in these jurisdictions can submit data protection complaints through Checkout's designated process and escalate to their respective regulatory authorities if dissatisfied with Checkout's response.
View change record →Under these terms, personal data may be shared with a broad set of third parties including Checkout group affiliates, advertising networks, background screening companies, data and cloud services providers, and payment ecosystem partners such as banks and card schemes. The notice does not identify the specific third parties in each category beyond the named biometric processors.
Cross-platform context
See how other platforms handle Third-Party Data Sharing with Payment Partners and Service Providers and similar clauses.
Compare across platforms →"In order to provide our services to you we may share your personal data with the following parties: Members of the Checkout Group: Your information may be shared with our affiliates within the Checkout.com group, to provide you with our services. Third party service providers: We may also use third-party service providers acting on our behalf. These service providers help us with data and cloud services, website hosting, data analysis, background screening, fraud detection and prevention, application services, advertising networks, information technology and related infrastructure, customer service, communications, and auditing. Payment partners: We may share your personal data with third parties across the payments ecosystem as necessary to securely and effectively process payments. This includes banks, card schemes, alternative payment method providers and issuers.Excerpt from Checkout.com's Privacy
1.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision identifies the categories of third-party recipients of personal data and notably includes advertising networks and background screening companies among the service provider categories, which are operationally distinct from the core payment processing function and may engage additional regulatory considerations.
Under these terms, personal data may be shared with a broad set of third parties including Checkout group affiliates, advertising networks, background screening companies, data and cloud services providers, and payment ecosystem partners such as banks and card schemes. The notice does not identify the specific third parties in each category beyond the named biometric processors.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Checkout.com.