Track 1 platform and get the weekly governance digest. No credit card required.
This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology
This is Revolut's privacy policy for UK customers, explaining how the company collects and uses your personal data including your identity documents, bank account details, card numbers, location, device activity, transaction history, and even data derived from Open Banking access to your other bank accounts. The most important thing for most users is that Revolut uses automated profiling and decision-making to make decisions about your eligibility for products like credit, meaning a computer may make significant financial decisions about you based on your data without a human reviewing it first. You have the right to request human review of automated decisions and can manage your privacy preferences directly in the Revolut app or by contacting dpo@revolut.com.
This is the Revolut Ltd Customer Privacy Notice (effective 17 March 2026), governing personal data processing for UK customers across all Revolut products and services, with the stated legal controller being either Revolut Bank UK Ltd or Revolut Ltd depending on the product used. The notice states that Revolut collects identity documents, financial details, device and location data, transaction history, biometric data for identity verification, credit reference agency data, Open Banking data, and behaviorally inferred data; the terms authorize use of this data for service delivery, fraud prevention, credit decisioning, automated profiling, product improvement, and marketing where permitted. A notable provision is the explicit commitment that Revolut will never sell personal data, alongside a broad automated decision-making disclosure including credit scoring and fraud detection that relies on profiling with potentially significant legal effects, which the document states is subject to rights of human review under applicable law. The notice engages UK GDPR and the UK Data Protection Act 2018 as primary frameworks, with the ICO as the lead supervisory authority, and separately references compliance obligations under AML, PSD2/Open Banking, and financial services regulation; international data transfers to third countries are disclosed and stated to be covered by Standard Contractual Clauses or other appropriate safeguards. For customers using investment, crypto, or credit products, additional standalone notices and just-in-time disclosures apply, creating a layered privacy framework where this document serves as the master notice but does not contain the full picture for all product lines.
Institutional analysis available with Professional
Regulatory exposure by statute, material risk assessment, vendor due diligence action items, and enforcement precedent. Available on Professional.
Start Professional free trialMonitoring
Revolut has updated this document before.
Watcher includes same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
Professional Governance Intelligence
Need provision-level monitoring and regulatory mapping?
Professional includes governance timelines, compliance memos, audit-ready analysis, and full provision tracking.
Start Professional free trialCross-platform context
See how other platforms handle Automated Decision-Making and Credit Eligibility and similar clauses.
Compare across platforms →Governance Monitoring
Structured alerts for policy changes, governance events, and provision updates across 318+ platforms.