Legal
Privacy policy
Version 1.0 · last updated 23 September 2026
1. Introduction
OvaroPay is committed to protecting your privacy and safeguarding your personal data. This notice explains what we collect when you use this website, how we use it, who we share it with, and what rights you have over it. It is given in accordance with the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018.
OvaroPay is an introducer. The regulated payment services, and the account you would hold, are provided by CoBanq Ltd, who is authorised and regulated by the Financial Conduct Authority under the Payment Services Regulations 2017 (firm reference number 508565). CoBanq's own privacy notice applies to everything that happens after we introduce you, and you should read it alongside this one.
If you have a question about anything in this notice, email hello@ovaropay.com or call 020 0000 0000.
2. Who controls your data
OvaroPay is the data controller for the enquiry you send through this website and for the correspondence that follows it.
CoBanq Ltd is the data controller for your account application and for the account itself, including the identity checks, the anti-money-laundering screening and the transaction records. Its registered office is Level39, One Canada Square, Canary Wharf, London, England, E14 5AB, its ICO registration number is Z3153690, and its data protection officer can be reached at dpo@cobanq.com.
In plain terms: what you type into the form on this site is ours to look after. What you send to CoBanq when you apply is CoBanq's.
3. What we collect
From the enquiry form, when you choose to send one:
- Contact data: your name, your company's name, your email address and your telephone number.
- Business data: what the business does, roughly what comes in each month, the currencies you pay out in, who you bank with today and what they charge you.
- Anything else you choose to put in the message box.
4. What we collect automatically
When you visit this website our hosting provider records the standard technical data any web server receives in order to serve you a page: your IP address, your browser type and the pages you requested.
This website sets no cookies. There is no analytics tag, no advertising pixel and no tracking of you across other sites. If that ever changes, this notice will be updated and you will be asked before any non-essential cookie is set.
We do not ask for identity documents, bank statements or any other application paperwork through this website, and we would rather you did not send them here. When an application needs them, you will be told how to send them securely.
5. How we use it, and on what basis
We process what you send us for the following purposes, on the following lawful bases:
- To answer your enquiry and work out whether the account fits what you do — taking steps at your request before entering into a contract, and our legitimate interest in replying to someone who asked us to get in touch.
- To introduce you to CoBanq Ltd where you ask us to take it forward — steps taken at your request.
- To keep a record of the enquiry and our correspondence about it — our legitimate interest in knowing who we have spoken to and what was said.
- To meet any legal or regulatory obligation that applies to us — legal obligation.
6. Who we share it with
We share your personal data with:
- CoBanq Ltd, where you ask us to introduce you, so that your application can be considered.
- Our email and hosting providers, which carry the message from this website to our inbox and store it there.
- Professional advisers bound by confidentiality, where we need advice about an enquiry.
- Anyone we are legally required to disclose it to.
7. What we do not do
- We do not sell your personal data, to anyone, for any purpose.
- We do not add you to a marketing list because you sent an enquiry.
- We do not make automated decisions about you. Whether an account is opened is decided by the compliance function of the firm providing it, after checks it carries out under its own notice — not by anything on this website.
8. How long we keep it
- Enquiries that do not lead to an application: up to two years, in case you come back to us, and then deleted.
- Enquiries that lead to an introduction: for as long as the introduction is live, and then for six years, which is the period we may need to evidence what we did and when.
- Records held by CoBanq Ltd in connection with an account follow its own retention periods, which are longer because anti-money-laundering law requires it.
9. Where your data is held
Your enquiry is held on servers in the United Kingdom or the European Economic Area.
Where personal data is transferred outside the UK, it is protected by the safeguards UK data protection law requires — either a finding of adequacy for the destination country, or the UK's International Data Transfer Agreement or Addendum to the Standard Contractual Clauses.
10. How we protect it
Enquiries reach us over an encrypted connection and are held in mailboxes protected by multi-factor authentication, and access is limited to the people who deal with new enquiries.
No system is completely secure, and anyone who tells you otherwise is selling something. If a breach ever affected your data and posed a risk to you, we would tell you and the Information Commissioner's Office.
11. Your rights
Under UK GDPR you have the right to:
- Access — ask for a copy of the personal data we hold about you.
- Rectification — ask us to correct anything inaccurate or incomplete.
- Erasure — ask us to delete your data, where we have no overriding reason to keep it.
- Restriction — ask us to limit what we do with it while a question about it is resolved.
- Portability — receive the data you gave us in a structured, machine-readable format.
- Object — object to processing we carry out on the basis of legitimate interests.
12. How to exercise them, and how to complain
Email hello@ovaropay.com and say what you want. We will respond within one calendar month. If a request is complex, or you have made several, we may extend that by up to two further months and will tell you if we do.
For data held in connection with an account rather than an enquiry, contact CoBanq's data protection officer at dpo@cobanq.com, or privacy@cobanq.com.
If you are not satisfied with how we have handled your personal data, you can complain to the Information Commissioner's Office at ico.org.uk, or on 0303 123 1113. We would rather you came to us first, but you do not have to.
13. Changes to this notice
We update this notice when what we do with personal data changes, or when the law does. The date below is the date of the current version, and material changes will be flagged on this page.