Effective July 30, 2024
What is this Privacy Policy and what does it cover?
Facebook Payments International Limited is part of the Meta Companies. We work with our affiliates (and third parties) to provide you with our services under the Community Payments Terms.
In this Privacy Policy we explain how we collect, share, use, retain and transfer information. It is important to us that you know how to control your privacy, so we also show you where you can manage your information.
What kinds of information do we collect?
The Information we collect and process about you depends on how you use our services. Here’s the information we collect:
- Payment credentials. Information related to your payment credentials, such as your name, and card numbers and expiry date. This includes a credit card, debit card, bank account number, and other payment methods that enable electronic funds transfers, including debits and credits.
- Transaction information. The date, time, amount and recipient of your transactions, and transaction history.
- Identification information. Information about you to verify your identity, where required by applicable laws, rules, sanctions, regulations and/or to combat financial crime and money laundering, including your name, address, date of birth, copies of government-issued identification documents, and personal identification numbers.
- Compliance information. Information, where required, to fulfil legal obligations to combat financial crime and perform other compliance activities, such as about the source of your funds and income, including occupation. We sometimes obtain some of your information directly from Meta Platforms Ireland Limited, including, for example, your name and date of birth for anti-money laundering purposes.
- Device information. Information about your device that helps us provide our services in a secure manner, including by preventing fraud and complying with local laws, such as your device’s operating system, hardware and software versions, device language, and location-related information.
- Contact information. Information such as your address and mobile phone number, to assist in the provision of certain payment services and the performance of compliance processes.
- Information about you. Information about you from either publicly available sources or unaffiliated third parties with whom we’ve entered into service relationships, including companies we retain to provide identity verification and fraud prevention services.
How do we use this information?
We use your information to help you make or receive payments on Meta Products in a manner consistent with our legal obligations including, where applicable, anti-money laundering, sanctions, counter terrorism, fraud prevention and monitoring and other regulatory purposes.
We also process your information for the purpose of preventing fraud and other criminal acts and to keep our services safe and secure, and to respond to you or official bodies in connection with claims or complaints we receive.
How is this information shared?
We share information with other Meta Companies and third party service providers who support us to provide our services, including for the following reasons:
- to process your payment
- to provide customer support
- to detect, prevent or otherwise address anti-money laundering, fraud, security or technical issues, or to protect ourselves, you and others
- if it's a regulatory or legal requirement, such as in response to a subpoena or a regulatory audit
We don't sell any of your information to anyone and we never will. We also require third parties to follow rules about how they can and cannot use and disclose the information that we provide.
Here's more detail about who we share information with:
- payment service providers to help process your payment
- third party service providers supporting us to provide you with the services and fulfil our compliance obligations, for example to detect, prevent or otherwise address anti-money laundering, fraud, security or technical issues, or to protect ourselves, you and others, or to provide customer support
- In line with legal and regulatory obligations and legal requests, for example in response to a subpoena or a regulatory audit
How do we transfer information
We share information globally, both internally within the Meta Companies and externally with our partners. Information controlled by Facebook Payments International will be transferred or transmitted to, or stored and processed in, the United States or other countries outside of where you live for the purposes as described in this policy. We utilise standard contractual clauses approved by the European Commission or another relevant authority (as applicable) or rely on the European Commission's or another relevant authority's adequacy decisions about certain countries, as applicable, or we use equivalent mechanisms provided under applicable data protection law.
Meta Platforms, Inc. has certified its participation in the EU-U.S. Data Privacy Framework. We rely on the EU-U.S. Data Privacy Framework, and the European Commission’s related adequacy decision, for transfers of information to Meta Platforms, Inc. and its subsidiary Meta Payments, Inc. in the U.S. For more information, please review Meta Platforms, Inc.’s Data Privacy Framework Disclosure.
What is our legal basis for processing data?
We process your information in the ways described above:
- when you’ve given us your consent to do so
- as necessary to fulfil our contracts with you, including to provide the services described in the Community Payments Terms
- as necessary to comply with our legal obligations
- as necessary in the public interest
- as necessary for our (or others') legitimate interests, including our interests in providing an innovative, personalised, safe, and profitable service to our users and partners
How do we respond to legal requests or prevent harm?
We access, preserve and share your information with regulators or law enforcement in response to a legal request, if we have a good-faith belief that the law requires us to do so or if we believe that disclosure would assist in a lawful investigation. We can also respond to legal requests when we have a good-faith belief that the response is required by law in that jurisdiction, affects users in that jurisdiction, and is consistent with internationally recognised standards.
Information we receive about you (including financial transaction data related to payments made with Facebook Payments International Limited) can be accessed and preserved for an extended period when it is the subject of a legal request or obligation, governmental investigation, or investigations of possible violations of our terms or policies, or otherwise to prevent harm.
How can you manage or delete information and exercise rights provided under the GDPR and other relevant applicable data protection laws?
Managing Your Information:
You can view and update payment information (such as deleting payment information) including by going to the “Meta Pay” page in your Account Center. You can also access your payment history and other payment methods in-app by going to the Facebook or Instagram "Orders and Payments" page in your settings menu.
Exercising your rights under the GDPR and other relevant applicable data protection law:
Subject to applicable data protection laws such as the GDPR , you have the right to access, rectify, port and erase your data. Additionally, where we rely on consent as a legal basis to process your data, you can withdraw your consent at any time. This does not affect the lawfulness of data processing based on your consent prior to the withdrawal.
You also have the right to object to and restrict certain processing of your data, where we are performing a task in the public interest or pursuing our legitimate interests or those of a third party, subject to applicable law. You can contact us to exercise these rights.
Deleting Information:
If you delete your accounts which you used to make certain payments or store payment credentials , we delete your information unless we have an obligation or legitimate interest as described in this policy to retain your information. If you used different accounts to make payments, or have allowed the use of your payment credentials across multiple accounts, only information that is exclusively connected to the account you deleted will be deleted. You can contact us using the contact details below if you wish to access this information once your account has been deleted.
How We Keep Your information Secure
We take appropriate security measures to protect against unauthorised access and unauthorised changes, sharing, or destruction of your information. These security measures include internal reviews of our data collection, storage and processing practices, and security measures, as well as physical and technical security measures to guard against unauthorised access to systems where we store personal data. Facebook Payments International uses encryption to protect your information. For example, your credit card number will be stored in an encrypted form.
The security of your account also depends on keeping your account password confidential. You should not share your account name or password with anyone. If you give your password to someone else (like a significant other, your boss, or a website), they will have access to your account and your information.
How long do we keep your information?
We store your information until it is no longer necessary to provide our services or as long as is required to comply with our legal, regulatory and auditing obligations. Where subject to applicable regulatory requirements, this typically means we will keep your information, for a minimum period of five years from deletion of your account or after termination of our agreement with you, or longer, where required to comply with our legal obligations, such as under applicable anti-money laundering rules.
Information we receive about you may be accessed, processed and retained for an extended period of time when it is the subject of litigation, a regulatory or legal request or obligation, governmental investigation, or investigations concerning possible violations of our terms or policies, or otherwise to prevent harm.
How will you know the policy has changed?
We will notify you before we make material changes to this policy.
How to contact Facebook Payments International
The data controller responsible for your information is Facebook Payments International Limited, which you can contact here.
Facebook Payments International Limited,
Merrion Road,
Dublin 4, Ireland
D04 X2K5,
You have the right to lodge a complaint with Facebook Payments International’s lead supervisory authority, the Irish Data Protection Commission, or if you live in a country outside the European Union you have the right to complain to the competent data protection supervisory authority of that country.
Facebook Payments International Limited is regulated as an electronic money institution by the Central Bank of Ireland (the “CBI”) under registration number C148215. For further information, please see the CBI register at http://registers.centralbank.ie/ or contact the CBI using the following details:
Address: Central Bank of Ireland, PO Box 559, Dublin 1 Ireland
Tel: +353 1 224 6000
Email: enquiries@centralbank.ie
