Privacy Policy

Last updated: 26 September 2026

business extender LTD (trading as Social Wallet) is the data controller for the personal data described here. Registered address: Flat 3 Eve Court, 64 Graham Road, Mitcham, CR4 2HA, United Kingdom. Contact: support@social-wallet.live.

1. What we collect

CategoryExamples
IdentityPhone number, first and last name, date of birth
AddressResidential address (collected only where required for a physical card or identity verification)
ContactEmail address (optional)
FinancialWallet balance and transaction history; we never see or store your full card number - that's handled directly by our payment processor
Identity verificationOnly if you cross a top-up threshold or we need to check for fraud: a photo ID and a selfie, processed by our payment processor's identity verification service, not stored by us in raw form
Device & riskDevice model/hardware identifiers, IP address, and app install identifier - used only to detect the same device or network being used for an unusual number of accounts (fraud prevention), not to track you for advertising
UsageApp interactions needed to operate the service (e.g. which screens error out), push-notification token if you allow notifications

2. Legal basis and your rights, by region

Data protection law differs depending on where you live. Pick your region below, or we'll guess it from your connection.

Your region

πŸ‡ͺπŸ‡Ί EU
πŸ‡¬πŸ‡§ UK
πŸ‡ΊπŸ‡Έ USA

Swipe or tap a flag to change region

Legal basis for processing (EU)

Under the EU General Data Protection Regulation (GDPR), we only process your personal data when we have one of these legal bases:

  • Contract: holding your balance, moving money, issuing a card, showing your transaction history.
  • Legal obligation: identity verification and record-keeping above certain thresholds, to meet anti-money-laundering law.
  • Legitimate interest: fraud and abuse prevention (device/IP signals, restricting a payment method after a suspicious pattern) - kept to the minimum needed, and never used to block someone just for having several honest accounts in one household.
  • Consent: push notifications, and on-device biometric unlock (we never receive your fingerprint or face data - it's verified on your device itself).

Your rights under GDPR

If you're in the European Economic Area, you have the right to:

  • Ask what personal data we hold about you, and get a copy of it (right of access).
  • Ask us to correct inaccurate data (rectification).
  • Ask us to delete data we no longer have a legal reason to keep (erasure).
  • Ask us to limit how we use your data in some circumstances (restriction).
  • Receive your data in a portable format (data portability).
  • Object to processing based on our legitimate interest.
  • Lodge a complaint with your national data protection authority - see the European Data Protection Board's member list.

To exercise any of these, email support@social-wallet.live. We may need to verify it's really you before acting on the request.

Legal basis for processing (UK)

Under the UK GDPR and the Data Protection Act 2018, we rely on the same legal bases as under the EU GDPR:

  • Contract: holding your balance, moving money, issuing a card, showing your transaction history.
  • Legal obligation: identity verification and record-keeping above certain thresholds, to meet anti-money-laundering law.
  • Legitimate interest: fraud and abuse prevention, kept to the minimum needed, and never used to block someone just for having several honest accounts in one household.
  • Consent: push notifications, and on-device biometric unlock (verified on your device itself - we never receive your fingerprint or face data).

Your rights under UK data protection law

If you're in the United Kingdom, you have the right to:

  • Ask what personal data we hold about you, and get a copy of it.
  • Ask us to correct inaccurate data.
  • Ask us to delete data we no longer have a legal reason to keep.
  • Ask us to limit how we use your data in some circumstances.
  • Receive your data in a portable format.
  • Object to processing based on our legitimate interest.
  • Complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, if you think we've got it wrong.

To exercise any of these, email support@social-wallet.live. We may need to verify it's really you before acting on the request.

US privacy rights

Several US states - including California, Virginia, Colorado, Connecticut, and others - give their residents specific rights over their personal information. We apply the same practices below to every US user, regardless of which state you're in.

Categories of personal information

The table above ("What we collect") lists every category of personal information we collect, and we only use it for the purposes described in this policy: running the wallet, verifying your identity where the law requires it, and preventing fraud.

We do not sell or share your data

We do not sell personal information, and we do not "share" it for cross-context behavioral advertising as those terms are defined under the CCPA/CPRA. We have no advertising business, so there's nothing to opt out of today - but the right below still applies.

Your rights

  • Right to know: what personal information we've collected, used, or disclosed about you.
  • Right to delete: ask us to delete personal information we hold about you, subject to legal retention requirements (e.g. anti-money-laundering records).
  • Right to correct: ask us to fix inaccurate personal information.
  • Right to opt out of sale or sharing: not applicable today since we don't sell or share your data, but we'll always honor this request.
  • Right to non-discrimination: we won't charge you more or give you worse service for exercising any of these rights.

To exercise any of these, email support@social-wallet.live with "Privacy request" in the subject. We may need to verify it's really you before acting on the request, and we'll respond within the time your state's law requires (typically 45 days).

3. Who we share it with

We share what's necessary with:

We do not sell your personal data, and we do not share it with advertisers.

4. Where your data is processed

Our servers run in the EU/US depending on the service. If you're in the UK or EEA, we rely on adequacy decisions or standard contractual clauses whenever data leaves those regions. If you're in the US, your data may be processed here or transferred to our EU-based processors under those same safeguards.

5. How long we keep it

We keep account and transaction records for as long as the law requires us to for anti-money-laundering purposes (typically five years after your last transaction), and device/fraud signals for as long as they remain useful for detecting a repeat pattern, after which they're deleted or anonymised.

6. Children

Social Wallet is not for anyone under 18. We don't knowingly collect data from children.

7. Changes to this policy

We'll update this page as the product changes, and show a notice in the app for material changes.

8. Contact

Questions about this policy: support@social-wallet.live or see our contact page.