“for transfers from the European Economic Area or United Kingdom, we rely on approved contractual protections (such as Standard Contractual Clauses) and additional technical and organizational safeguards...”
This analysis describes what Mercury's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The clause identifies the specific legal mechanisms Mercury uses to legitimize cross-border transfers of Personal Information from the EEA and UK, which are subject to heightened regulatory requirements.
The updated policy expands the categories of personal information Mercury collects and processes for business customers. Mercury now explicitly collects investment profile information, demographic data (citizenship status, sex assigned at birth), and information about dependents and payment beneficiaries. For business customers, Mercury may collect personal information directly from contractors, payment recipients, and other connected individuals at the business's direction to support payroll, benefits, and payment processing. The policy also clarifies that marketing SMS messages require separate consent from transactional messages, and that phone numbers will not be shared with third parties for their own advertising purposes. You can opt out of marketing SMS messages without affecting receipt of transactional messages.
View change record →The updated policy discloses Mercury's SMS and MMS messaging practices and establishes specific protections for users who opt in. The policy states that mobile phone numbers and opt-in consent data will not be sold, rented, or shared with third parties for marketing purposes, and will only be shared with telecommunications carriers under binding confidentiality agreements to deliver the service. You can opt out at any time by replying 'STOP' to any message or updating your notification preferences in your Mercury account settings.
View change record →If your Personal Information is transferred from the EEA or UK, Mercury applies Standard Contractual Clauses and additional technical and organizational safeguards to protect it.
How other platforms handle this
Indeed Ireland's transfers of Personal Data of individuals in the EEA, the United Kingdom, and Switzerland to jurisdictions outside the EEA, United Kingdom, and Switzerland are performed using lawful transfer mechanisms pursuant to GDPR.
Whenever we transfer your personal data to third parties located in other countries, we will ensure that these companies comply with applicable data protection laws and we will take all measures that are reasonably necessary to ensure the existence of adequate safeguards...
Any information you provide through use of the Sites may be stored and processed, transferred between, and accessed from the United States and other countries which may not guarantee the same level of protection of Personal Information as the one in which you reside.
"for transfers from the European Economic Area or United Kingdom, we rely on approved contractual protections (such as Standard Contractual Clauses) and additional technical and organizational safeguards...Excerpt from Mercury's Privacy Policy
ConductAtlas detected a major restructuring of Meta’s privacy policy that removed detailed consumer rights disclosures and relocated them to separate documents.
Your genetic data may be transferred to a new owner as a business asset. Here is what the Terms of Service actually say and what you can do right now.
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
The clause identifies the specific legal mechanisms Mercury uses to legitimize cross-border transfers of Personal Information from the EEA and UK, which are subject to heightened regulatory requirements.
If your Personal Information is transferred from the EEA or UK, Mercury applies Standard Contractual Clauses and additional technical and organizational safeguards to protect it.
ConductAtlas has identified this type of provision across 280 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Mercury.