Revolut · Revolut Privacy Policy · View original document ↗

Commitment Not to Sell Personal Data

Low severity High confidence Explicitdocumentlanguage Unique · 0 of 343 platforms
Share 𝕏 Share in Share 🔒 PDF
Monitor governance changes for Revolut Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.
Document Record

What it is

Revolut explicitly promises it will never sell your personal data to third parties for money.

This analysis describes what Revolut's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

This is a meaningful consumer protection commitment that goes beyond a legal minimum, particularly relevant for users aware of data broker practices in the financial technology industry.

Consumer impact (what this means for users)

This provision provides assurance that Revolut's data sharing practices do not include selling your personal data, distinguishing commercial data sharing from data sales, though the policy does permit sharing with third-party service providers and partners for service delivery purposes.

How other platforms handle this

Ledger Medium

At Ledger, earning and maintaining our users' trust is a top priority. That's why we are deeply committed not only to protecting your privacy and securing your personal data, but also to being fully transparent about how we handle it.

Strava Medium

We use information to enhance the quality, reliability, and/or accuracy of our AI Features by creating, developing, training, testing, improving, and maintaining AI and ML models run by Strava or our service providers. We use aggregated, de-identified data for this purpose. We also use personal info...

Garmin Medium

If you are located in the European Economic Area, Switzerland, or the United Kingdom, you have the right to access, correct, or erase your personal data; the right to restrict or object to our processing of your personal data; the right to data portability; and, where our processing is based on your...

See all platforms with this clause type →

Monitoring

Revolut has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.

Start Monitor free trial Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
Our promises: we will always keep your personal data safe. We will never sell your personal data. We will always try to give you as much control as possible over how we use your personal data.

— Excerpt from Revolut's Revolut Privacy Policy

ConductAtlas Analysis

Institutional analysis (Compliance & governance intelligence)

(1) REGULATORY LANDSCAPE: In the UK context, this commitment is voluntary and exceeds the baseline requirements of UK GDPR, which does not specifically prohibit data sales but requires a lawful basis for any sharing. Under the CCPA in California, businesses must provide opt-out rights for data sales; this commitment would satisfy that requirement if Revolut serves California residents through any US entity. The FTC monitors deceptive practices, and any breach of this stated commitment could constitute an unfair or deceptive act. (2) GOVERNANCE EXPOSURE: Low as a standalone provision, but medium from an audit and enforcement perspective. The commitment creates a binding representation to users; any undisclosed arrangement that could be characterized as a data sale, including certain data sharing for advertising or analytics purposes, could expose Revolut to regulatory scrutiny and reputational risk if the definition of 'sell' is interpreted broadly. (3) JURISDICTION FLAGS: California's CCPA defines 'sale' broadly to include sharing for valuable consideration; legal teams should confirm that Revolut's data sharing arrangements with advertising or analytics partners do not meet the CCPA definition of a sale if any US-facing entity is involved. UK GDPR does not use the sale concept but requires lawful bases for all sharing. (4) CONTRACT AND VENDOR IMPLICATIONS: This commitment should be reflected in data processing agreements with third-party vendors to ensure no downstream arrangement inadvertently constitutes a data sale. Procurement teams should review commercial data sharing arrangements against this representation. (5) COMPLIANCE CONSIDERATIONS: Compliance teams should maintain documentation confirming that no data sharing arrangement meets the definition of a sale under applicable law, particularly CCPA if US operations are in scope, and should conduct periodic reviews of commercial data arrangements against this public commitment.

Full compliance analysis

Regulatory citations, enforcement risk, and due diligence action items.

Track 1 platform — free Try Monitor free for 14 days

Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.

Applicable agencies

  • FTC
    The FTC could investigate if this public commitment not to sell personal data were breached, as it would constitute an unfair or deceptive trade practice under the FTC Act.
    File a complaint →

Applicable regulations

Connecticut Data Privacy Act Amendments
US-CT
CAN-SPAM
United States Federal
FCRA
United States Federal
FTC Act Section 5
United States Federal
GDPR
European Union
GLBA
United States Federal
Indiana Consumer Data Protection Act
US-IN
Kentucky Consumer Data Protection Act
US-KY
UK GDPR
United Kingdom
Universal Opt-Out Mechanism Expansion 2026
US

Provision details

Document information
Document
Revolut Privacy Policy
Entity
Revolut
Document last updated
May 5, 2026
Tracking information
First tracked
May 7, 2026
Last verified
May 9, 2026
Record ID
CA-P-007672
Document ID
CA-D-00538
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
3f454e91dd6036e21544d2d7f616cb24e6b62cdc91bd14ac3626b944cdb7ec1f
Analysis generated
May 7, 2026 09:22 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Revolut
Document: Revolut Privacy Policy
Record ID: CA-P-007672
Captured: 2026-05-07 09:22:24 UTC
SHA-256: 3f454e91dd6036e2…
URL: https://conductatlas.com/platform/revolut/revolut-privacy-policy/commitment-not-to-sell-personal-data/
Accessed: June 28, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Low
Categories

Other risks in this policy

Related Analysis

Compliance Governance Intelligence

Need to monitor specific governance provisions?

Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Compliance free trial

Or start with Monitor →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does Revolut's Commitment Not to Sell Personal Data clause do?

This is a meaningful consumer protection commitment that goes beyond a legal minimum, particularly relevant for users aware of data broker practices in the financial technology industry.

How does this clause affect you?

This provision provides assurance that Revolut's data sharing practices do not include selling your personal data, distinguishing commercial data sharing from data sales, though the policy does permit sharing with third-party service providers and partners for service delivery purposes.

Is ConductAtlas affiliated with Revolut?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Revolut.