PostTag Goodwill Payment Privacy Notice

Last updated: 10 Nov 2026

This Goodwill Payment Privacy Notice ("Notice") applies to you if PostTag has offered you a Goodwill Payment, for example following a service issue, a complaint or a matter relating to our Fuel Card Services. It explains what additional Personal Data we process to make that payment, why we process it and who we share it with.

This Notice is an addendum to our Privacy Policy. Our Privacy Policy continues to apply to all other processing of your Personal Data.

1. Who we are

PostTag Group Limited (referred to as "PostTag", "we", "us", or "our" in this Notice) is the data controller of the Personal Data described in this Notice. Our full details are:

• Company name: PostTag Group Limited
• Companies House number: 08649785
• Registered address: C/O Rpgcc, 40 Gracechurch Street, London, EC3V 0BT, United Kingdom
• VAT number: 193981851
• ICO registration number: ZB335726
• Data Protection Officer: Stephen Kenny
• Email: privacy@posttag.com

2. Definitions

In this Notice:

• “Amazon” means Amazon EU S.à r.l., a Luxembourg company that issues Amazon.co.uk Gift Cards.
• “Gift Card” means an Amazon.co.uk Gift Card sent to you by email.
• “Goodwill Payment” means a payment PostTag chooses to make to you as a gesture of goodwill, made either by bank transfer or as a Gift Card.
• “Personal Data” means any information about an individual from which that person can be identified.
• “Privacy Policy” means our main privacy policy at posttag.com/legal/privacy-policy.
• “Stripe” means Stripe Payments Europe, Limited and Stripe Payments UK, Ltd., which we use to make Goodwill Payments by bank transfer.
• “UK GDPR” means the UK General Data Protection Regulation, together with the Data Protection Act 2018.

3. Types of Personal Data

We will make your Goodwill Payment in one of two ways. The Personal Data we process depends on which option is used:

• Bank transfer (via Stripe):
  • Identity Data: first name, last name and company name (if applicable)
  • Contact Data: email address and address or business address
  • Financial Data: bank sort code and account number
• Gift Card (via Amazon):
  • Contact Data: email address

We also keep a record that the Goodwill Payment was made, including its amount, date and status.

You do not have to provide this information. However, if you choose not to, we will not be able to make the Goodwill Payment.

4. Collection of Personal Data

We collect and share your Personal Data as follows:

• Bank transfer: We provide your email address to Stripe from our records, so that Stripe can contact you directly. You then enter your name, company name (if applicable), address or business address, sort code and account number directly into Stripe's secure system.
• Gift Card: We provide your email address to Amazon from our records, so that the Gift Card can be sent to you by email. We do not ask you for any other information.

For bank transfers, we can see your name, email address, company name (if provided), the status of your payment and the last four digits of your account number in our Stripe account. Where the payment is made to a business account, we can also see your business address. We cannot see your sort code or full account number. These are held by Stripe.

5. Use and processing of Personal Data

We use your Personal Data only to make the Goodwill Payment and keep a record that it was made. The table below sets out how we use it and our lawful basis for doing so.

We have considered your interests and rights and believe this use is limited, expected and necessary to make the Goodwill Payment. We will not use this Personal Data for marketing or for any other purpose.

Automated decision making and profiling

We do not carry out automated decision making or profiling using the Personal Data described in this Notice.

6. Disclosure of your Personal Data

We share your Personal Data with the following third parties, depending on how your Goodwill Payment is made:

• Stripe (bank transfer): Stripe Payments Europe, Limited (Ireland) and Stripe Payments UK, Ltd. (United Kingdom) process your Personal Data on our behalf and under our instructions to contact you, collect your payment details securely and send the Goodwill Payment to your bank account. As a regulated payment provider, Stripe may also use some of your Personal Data as an independent controller for its own legal obligations, such as fraud prevention and anti money laundering checks. See the Stripe Privacy Policy.
• Amazon (Gift Card): Amazon EU S.à r.l. receives your email address so that it can send the Gift Card to you. Amazon's use of your Personal Data, including when you redeem the Gift Card, is covered by the Amazon.co.uk Privacy Notice.

We do not sell your Personal Data, and we do not allow Stripe to use it for its own marketing purposes.

7. International Transfers

Your Personal Data may be processed outside the UK:

• Stripe: Stripe may process your Personal Data in Ireland and the United States. The UK recognises Ireland and the rest of the EEA as providing an adequate level of data protection. Stripe protects transfers to the United States using the UK Extension to the EU US Data Privacy Framework and the UK International Data Transfer Addendum to the European Commission's Standard Contractual Clauses.
• Amazon: Amazon EU S.à r.l. is based in Luxembourg, which the UK recognises as providing an adequate level of data protection. Any further transfers by Amazon are described in the Amazon.co.uk Privacy Notice.

8. Your rights under UK GDPR

Under the UK GDPR, you have the following rights:

• Right of access (commonly known as a “subject access request”): you can request a copy of the Personal Data we hold about you.
• Right to rectification: you can ask us to correct inaccurate or incomplete data, although please note that we may need to verify the accuracy of the new data you provide to us.
• Right to erasure (right to be forgotten): you can ask us to delete your Personal Data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your Personal Data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your Personal Data to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.
• Right to restriction of processing: you can ask us to pause or suspend processing of your data in the following circumstances:
  • if you want to establish the accuracy of the data;
  • where our use of the Personal Data is unlawful but you do not want us to erase it;
  • where you need us to hold the data even if we no longer require it as you need to it establish, exercise or defend legal claims; or
  • you have objected to our use of your Personal Data but we need to verify whether we have overriding legitimate grounds to use it.
• Right to data portability/request of transfer: you can request your data to be transferred to you or a third party and it will be provided in a structured, commonly used, machine-readable format. Please note that this only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.
• Right to object: you can object to processing based on our legitimate interests but please note that in some cases, we may demonstrate that we have compelling legitimate grounds to process your information which overrides your right to object. You also have the right to object at any time to the processing of your Personal Data for direct marketing purposes.
• Rights related to automated decision-making: you have the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects. We do not currently carry out such processing.
• Right to withdraw consent: you can withdraw consent at any time where we are relying on consent to process your Personal Data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not able to provide certain Services to you but we shall advise you of that when you withdraw your consent.

To exercise any of these rights, contact us at privacy@posttag.com.

Please note that if you object to, or ask us to erase, your Personal Data before the Goodwill Payment is made, we may not be able to make the payment.

9. Right to complain

If you are unhappy with how we process your Personal Data, please contact us in the first instance using the details below. Under the UK GDPR, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO), which is the UK regulator for data protection issues:

• Website: ico.org.uk
• Telephone: 0303 123 1113
• Address: Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

We would appreciate the opportunity to address your concerns before you contact the ICO, and the ICO will expect you to have contacted us first, so please contact us in the first instance if you have a complaint or if there is something you do not understand and you would like clarification. We can be contacted at privacy@posttag.com or via the complaints form on our website: https://posttag.com/complaints/.

10. Contact

If you have any questions about this privacy policy or our use of your Personal Data, please contact us in the following ways:

• Website Contact Form: https://posttag.com/contact/
• Postal address: PostTag Group Ltd, C/O Rpgcc, 40 Gracechurch Street, London, EC3V 0BT, United Kingdom
• Email address: privacy@posttag.com