---
title: "Privacy and data protection - NexPay"
description: "How NexPay protects your data under Australian Privacy law and GDPR — what's collected, why, how it's protected, and your rights."
lastModified: "2026-06-02"
lang: "en"
url: https://nexpay.com.au/training/trust-and-compliance/privacy-and-data-protection
---
## Site navigation

- For businesses
  - [For ed. agents](/for-education-agents.md)
  - [For schools & colleges](/for-schools.md)
  - [For universities](/for-universities.md)
  - [For accommodation](/for-accommodation.md)
  - [Why NexPay?](/about.md)
  - [Pricing](/pricing.md)
  - [AI automation](/payments-ai-automation.md)
- [For students & parents](/for-students-and-parents.md)
- Help & resources
  - [Training](/training.md)
  - [Blog](/blog.md)
  - [Events](/events.md)
  - [Zapier integration](/zapier.md)
  - [Claude & ChatGPT](/mcp.md) — Claude & ChatGPT integration
- [Contact](/contact-us.md)
- [Login](https://portal.nexpay.com.au/login)

# Privacy and data protection - NexPay

## At a glance

- **Intended for:** All users
- **Reading time:** 5 minutes
- **Last updated:** 1st June 2026

**TL;DR:** NexPay treats your data with the same care as your money — it's protected by law, used only for verification and payment processing, and never sold. As a regulated provider, it must collect identity and payment information to meet AML/CTF and licensing obligations. Australian Privacy law applies to everyone; UK and EU users also have GDPR rights (access, correction, erasure, and more). Privacy requests go to support@nexpay.com.au.

{/* Body content preserved from the prior privacy article — internal links updated to the new IA */}

When you send money internationally, you share personal information — your name, your address, a copy of your ID. It's natural to wonder where that data goes and who can see it. The short answer: NexPay treats your personal information with the same care it gives your money. It's protected by law, handled only for specific purposes, and never sold.

This article explains what data NexPay collects, why, how it's protected, and what rights you have over it.

> **For UK and EU users:** NexPay complies with GDPR (Regulation 2016/679), which gives you specific rights over your personal data — covered in the section on your rights. **For all users:** Australian Privacy law applies to everyone using the platform, regardless of location.

## Why NexPay collects personal data

NexPay (ABN 56 153 910 984, AFSL No. 560782) is a regulated financial services provider. That means it's legally required to collect certain information about every person and business involved in a payment. This isn't data collection for marketing or profiling — it's the minimum needed to:

- **Verify your identity** as required by Anti-Money Laundering (AML) and Counter-Terrorism Financing (CTF) laws
- **Process your payment** accurately and securely
- **Meet regulatory obligations** under the Australian Financial Services Licence
- **Protect you** against fraud and unauthorised transactions

If NexPay didn't collect this information, it wouldn't be legally permitted to process international payments.

## What data is collected

Depending on your role and payment type, NexPay may collect:

**Personal details** — full name, date of birth, residential address, email, phone number

**Identification documents** — passport or national ID (front and back), to verify your identity

**Financial information** — bank account details, transaction amounts, payment purpose

**Business information** — company name, ABN or registration number, registered address (for company payers)

**Supporting documents** — letters of offer, invoices, enrolment confirmations, visas

**Tax information** — tax file number or equivalent, where required by law

Each piece is collected for a specific compliance or operational reason. NexPay doesn't ask for data it doesn't need.

> **Quick tip:** The information you provide during payment creation maps directly to the four verification checks in [identity verification and AML](/training/trust-and-compliance/identity-verification-and-aml.md). Everything has a purpose.

## How your data is protected

NexPay complies with the Australian Privacy Act 1988, which sets out how financial services providers must handle personal information. For users in the UK and EU, NexPay also complies with the General Data Protection Regulation (GDPR, Regulation 2016/679).

In practice:

- Your personal information is never sold to third parties
- Data is shared only with parties directly involved in processing your payment (such as banking partners), and only the minimum needed
- Your information is never shared with third-party providers without your consent
- Access within NexPay is restricted to authorised personnel who need it for compliance or processing
- Data is retained only as long as necessary for legitimate business purposes or legal compliance

> **Important:** NexPay will never contact you asking for your password, PIN, or full bank account details by email or phone. If you receive a message like this, it isn't from NexPay — contact the support team to report it.

## Your rights over your data

Wherever you're located, you can request to see what personal data NexPay holds about you and ask for corrections if anything is inaccurate.

If you're in the UK or EU, GDPR gives you additional rights:

- **Access** — request a copy of the personal data NexPay holds about you
- **Rectification** — ask for inaccurate data to be corrected
- **Erasure** — request deletion where there's no legal obligation to retain it
- **Restrict processing** — ask NexPay to limit how your data is used
- **Object** — object to processing for certain purposes
- **Data portability** — receive your data in a structured, common format to transfer elsewhere
- **Protection from automated decision-making** — the right not to be subject to decisions made solely by automated processing

Some rights have exceptions — for instance, NexPay can't delete data it's legally required to retain for AML compliance. The team will always explain what can and can't be done when you make a request.

> **To exercise any of these rights:** Email support@nexpay.com.au with the subject "Privacy request" and a description of what you're asking for. The team will respond and guide you through it.

## Cookies and analytics

NexPay uses cookies to keep the platform working — keeping you logged in, remembering preferences — and some for third-party analytics to understand how the platform is used. A few things to know:

- Cookies don't contain personally identifiable information
- You can configure your browser to reject cookies, but this may limit some functionality (such as staying logged in)
- Analytics data is aggregated and anonymised — it tracks usage patterns, not individual behaviour

## How long data is retained

NexPay retains personal data only as long as needed for legitimate business purposes or legal compliance. Financial records and identity documents are subject to minimum retention periods set by Australian law — typically several years after the last transaction. Once that period expires and there's no further legal reason to keep it, the data is securely deleted.

## Getting help with privacy questions

NexPay has offices in Sydney, London, Vancouver, Bogotá, São Paulo, Santiago, and Mexico City, with multilingual support staff across these locations. For privacy-related questions or requests:

- **Email:** support@nexpay.com.au
- **Phone:** +61 2 9078 7967

You can also reach your account manager directly from the dashboard.

> **Worth knowing:** Privacy requests are handled by a dedicated team and typically receive an initial response within a few business days. For straightforward requests like data access, the process is usually quick.

## Your next step

- **Want to understand why specific documents are required?** Read [identity verification and AML](/training/trust-and-compliance/identity-verification-and-aml.md).
- **Need to know which documents to prepare?** See [document requirements](/training/trust-and-compliance/document-requirements.md).
- **New to the platform?** The [dashboard tour](/training/getting-started/platform-overview.md) helps you get oriented, including where to find your account manager.
- **Comparing NexPay to other options?** Read [why NexPay](/training/trust-and-compliance/why-nexpay.md).

## Checkpoint

After reading this, you should be able to:

- Explain why NexPay collects personal data (a legal requirement, not marketing)
- Name the main types of data collected and the reason for each
- Know that your data is never sold and is shared only for payment processing
- Describe your rights under GDPR if you're in the UK or EU
- Know how to submit a privacy request to the support team

## Frequently asked questions

### Who accesses my personal information?

Your personal information is shared only with parties directly involved in processing your payment, and only the minimum needed for that purpose. It's never sold, and never shared with third parties without your consent.

### What personal data does NexPay collect?

Name, address, contact details, financial information, transaction purpose, identification documents, tax file numbers, and bank account details — as needed for payment processing and compliance. NexPay doesn't ask for data it doesn't need.

### What are my rights under GDPR?

If you're in the UK or EU, you have the right to access, rectify, and erase your data, restrict or object to processing, port your data, and be protected from solely automated decision-making. Some rights have exceptions where data must be retained by law.

### How long does NexPay keep my data?

Only as long as necessary for legitimate business purposes or legal compliance. Financial records and identity documents have minimum retention periods set by Australian law — typically several years after the last transaction — after which data is securely deleted.

### Does NexPay use cookies?

Yes — for functionality (like keeping you logged in) and for third-party analytics. Cookies don't contain personally identifiable information, and analytics data is aggregated and anonymised. You can reject cookies in your browser, but it may limit some functionality.

### How do I make a privacy request?

Email support@nexpay.com.au with the subject "Privacy request" and a description of what you're asking for. A dedicated team handles these and typically responds within a few business days.

## More on NexPay

**Platform**

- [For students & parents](/for-students-and-parents.md)
- [For ed. agents](/for-education-agents.md)
- [For universities](/for-universities.md)
- [For schools](/for-schools.md)
- [For accommodation](/for-accommodation.md)
- [AI automation](/payments-ai-automation.md)
- [Pricing](/pricing.md)

**Help & resources**

- [Training](/training.md)
- [Contact](/contact-us.md)
- [Developers](/api.md)
- [Zapier integration](/zapier.md)
- [Claude & ChatGPT](/mcp.md) — Claude & ChatGPT integration

**Company**

- [About](/about.md) — About NexPay
- [Jobs](/about.md#jobs)
- [Blog](/blog.md)
- [Media](/media.md)
- [Events](/events.md)

**Trust & locations**

- [Trust & Regulatory](/trust.md)
- [Our offices](/locations.md)

**Legal**

- [Terms and Conditions](/terms-and-conditions/)
- [Privacy policy](/privacy-policy/)
- [Cookie Policy](/cookie-policy/)
- [Complaints Policy](/complaints-policy/)
- [Financial Services Guide](/financial-services-guide/)
- [Product Disclosure Statement](/product-disclosure-statement/)
- [AML Policy](/aml-policy/)
- [Target Market Determination](/target-market-determination/)
- [Group Regulatory Disclosure](/group-regulatory-disclosure/)
- [Fees & FX Schedule](/fees-and-fx/)
- [Developer & API Terms](/developer-terms/)

## NexPay

NexPay Pty Ltd (ABN 56 153 910 984) holds Australian Financial Services Licence No. 560782 and is authorised to provide non-cash payment services to retail and wholesale clients in Australia.

- **Address:** Level 12, 64 York St, Sydney NSW 2000, Australia
- **Support:** [support@nexpay.com.au](mailto:support@nexpay.com.au)
- **Status:** [https://nexpay1.statuspage.io/](https://nexpay1.statuspage.io/)

**Follow NexPay**

- [LinkedIn](https://au.linkedin.com/company/nexpay)
- [Instagram](https://www.instagram.com/nexpayau/)
- [Facebook](https://www.facebook.com/NexPayAU)

© NexPay Pty Ltd