Privacy Policy

Ryan Knight Payments Ltd respects your privacy and takes the protection of personal information seriously. This Privacy Policy explains how we collect, use, store and share personal information when you:

• visit ryanknightpayments.co.uk;
• contact us;
• request a card-payment review;
• book an appointment;
• request our brochure;
• use our payment-cost or savings calculator;
• upload a merchant statement;
• ask us to review a statement or payment arrangement;
• communicate with us about our services; or
• otherwise interact with Ryan Knight Payments Ltd.

This policy also explains your rights under applicable UK data-protection law.

Ryan Knight Payments Ltd is the controller of personal information covered by this Privacy Policy unless we explain otherwise.

Ryan Knight Payments Ltd
Company number: 17067234
Registered office: 36a Bulkington Road, Shilton, Coventry, England, CV7 9JT
Email: ryan.knight@dojo.co.uk
Telephone: 07479 861836
Website: https://ryanknightpayments.co.uk/

Depending on how you interact with us, we may collect:

Identity and contact information — your name, business name, job title or role, business address, postcode, telephone number and email address.

Business and payment information — current card-payment provider, approximate or actual card turnover, transaction volumes, card mix, average transaction value, existing payment rates, authorisation or transaction charges, terminal charges, PCI or service fees, settlement information, contract information and other details relevant to assessing a payment setup.

Merchant statement information — if you upload or send a statement it may contain business details, merchant information, transaction summaries, payment volumes and charges, pricing, settlement information, account references, bank or payment details, contact information and other information the provider includes on its statement. We only need information relevant to the payment review or calculation and, where practical, we avoid retaining information that is not necessary for that purpose.

Calculator information — figures entered manually, information extracted from an uploaded statement, current provider, estimated current costs, illustrative comparison figures, the assumptions used and the calculator results.

Website and technical information — depending on your privacy choices and the technologies in use, this may include IP address, browser and device information, pages viewed, referring website, approximate location derived from IP address, interaction information and cookie or similar technology identifiers.

Marketing information — whether you have asked to receive marketing, your preferences, the date, wording and method of consent, and unsubscribe or objection records.

Communications — relevant emails, enquiry-form submissions and notes relating to your enquiry.

Directly from you — when you complete a form, book a review, telephone or email us, request a brochure, upload a statement, use the calculator or ask for a quote or review.

Automatically — some technical information may be collected when you use our website through cookies and similar technologies, subject to applicable law and your privacy choices.

From business or public sources — for legitimate business-to-business activities we may obtain limited professional contact information from company websites, public business directories, Companies House, professional networking sites and other legitimate public business sources. We do not treat the fact that information is publicly available as unrestricted permission to use it.

From service providers or business partners — we may receive information through services used to operate our business, for example booking, CRM or referral/application systems.

We use personal information only where we have an appropriate legal basis.

• Responding to enquiries and providing requested information — legitimate interests and, where appropriate, steps taken at your request before entering into a contract. Our legitimate interest is operating our business and responding to prospective customers.
• Providing payment reviews — legitimate interests and/or taking steps at your request before entering into a contract.
• Processing merchant statements — taking steps at your request and/or our legitimate interests in providing the requested review service.
• Using the savings/cost calculator — legitimate interests in providing website functionality and responding to your request.
• Brochure requests — taking steps at your request and/or legitimate interests. Requesting a brochure does not, by itself, mean you have consented to unrelated electronic marketing.
• Booking appointments — taking steps at your request and our legitimate interests in managing enquiries and appointments.
• Customer and business administration — legitimate interests, contractual necessity where applicable, and legal obligations.
• Security and fraud prevention — legitimate interests and, where applicable, legal obligations.
• Website analytics and improvement — consent where required, or another lawful basis/exception only where applicable under current law.
• Legal and regulatory requirements — legal obligation and/or legitimate interests.

Direct marketing. We may contact business contacts about relevant Ryan Knight Payments Ltd services where permitted by law, relying on your consent or on legitimate interests where business-to-business marketing law permits it. Where consent is required, we will seek it. You can object to or unsubscribe from direct marketing at any time.

Ryan Knight Payments Ltd provides an independent consultancy and introduction/review service. If you decide to proceed with a Dojo product or service, information necessary to progress an enquiry or application may be provided to or entered into systems operated by Paymentsense Limited / Dojo.

Paymentsense Limited is responsible for its own processing where it acts as an independent controller. You should review Dojo's current legal and privacy information and contractual terms before entering into a Dojo service agreement. Ryan Knight Payments Ltd does not control the underwriting, eligibility, acceptance, pricing or final commercial decisions of Paymentsense Limited.

Merchant statements can contain commercially sensitive and personal information, so we take additional care with these documents.

If you upload a statement solely to use the website calculator:

• it is used for the calculation and document-analysis process;
• the extracted figures are shown to you for verification;
• we do not treat the upload as permission for unrelated marketing;
• the file is processed in memory by our secure backend and is not written to our storage at all. If a copy is ever created to resolve a processing or security problem, it is deleted within approximately 24 hours.

If you expressly choose "Send my statement to Ryan for a full review": the document is stored in private, access-controlled storage that is never publicly accessible, and retained only for as long as reasonably required — ordinarily no later than 90 days after the relevant review or enquiry has concluded, unless there is a legitimate reason or legal obligation to keep it longer.

We do not intentionally use merchant statements for advertising profiling.

Our statement-analysis functionality uses artificial-intelligence-assisted document processing (Google Gemini, accessed through the Lovable AI Gateway) to help extract the relevant figures from your statement.

Automated extraction can make mistakes. For that reason, extracted information is presented to you for verification before it is used to produce a comparison. The calculator does not make legally binding decisions about you, and final pricing, product eligibility or acceptance by a payment provider is never determined solely by our automated calculator.

Where necessary, we share information with trusted providers that help us operate our website and business. The services actually used today are:

• Lovable (hosting) and Lovable Cloud / Supabase (database and private file storage) (Processor) — Hosting the website, running secure backend functions, storing enquiry and calculator records and holding uploaded merchant statements in private, access-controlled storage.
• Google (Gemini via the Lovable AI Gateway) (Processor) — Automated reading of an uploaded merchant statement to extract the payment figures used by the calculator. Extracted figures are shown to you for confirmation.
• Google Analytics 4 (Google Ireland Limited) (Processor) — Measuring how the website is used — pages viewed and general usage patterns — only where you have allowed analytics technologies. Only the page path is sent; form content, email addresses, statement information and query parameters are never sent. Google advertising and remarketing signals remain switched off.
• Calendly (Independent controller for its own booking service) — Appointment scheduling when you choose to book a review.
• Paymentsense Limited (Dojo) (Independent controller) — Where you ask us to progress or discuss a Dojo product, relevant information may be provided to Paymentsense Limited, which applies its own privacy information and terms.

We may also share information with professional advisers, IT and security providers, and regulators, law-enforcement bodies or other authorities where required by law. Service providers acting on our behalf process personal information only for appropriate purposes and under suitable contractual and security arrangements.

We do not sell your personal information.

Some technology providers may process or store information outside the United Kingdom. Where personal information is transferred internationally, we take reasonable steps to ensure an appropriate legal transfer mechanism and level of protection are in place, such as an applicable UK adequacy regulation or recognised contractual safeguards and associated transfer assessments where required. The precise safeguards depend on the provider and destination.

We do not keep personal information longer than reasonably necessary, taking account of legal, accounting, operational and dispute-resolution requirements. Our general approach is:

• General prospect / enquiry data — ordinarily up to 24 months after the last meaningful interaction.
• Brochure-only requests — ordinarily up to 12 months for enquiry administration, unless you enter an ongoing business relationship or separately opt into continuing marketing.
• Marketing records — until consent is withdrawn, an objection is received or the information is no longer reasonably required. We may retain minimal suppression information for longer so we can honour an unsubscribe or objection.
• Calculator-only statements — not stored; processed in memory and discarded. Any temporary copy created to resolve an error is deleted within approximately 24 hours.
• Statements sent to Ryan for human review — deleted 90 days after the review or enquiry has been concluded, by an automated deletion process that runs every night. Retention can only be extended by an authorised person where there is a legitimate reason, and that reason is recorded.
• Calculator results — calculations you run without submitting anything are not retained centrally. Where you ask us to save, email or discuss a calculation, the relevant figures form part of our enquiry record.
• Customer and financial records — certain business, contractual, accounting and tax records may need to be retained for up to six years or another period required by law.
• Security logs — retained only for a proportionate period necessary for website security and investigation.

We use reasonable technical and organisational measures designed to protect personal information from unauthorised access, loss, misuse, alteration, disclosure and destruction. Sensitive files such as merchant statements are held in private, access-controlled storage and are not publicly accessible. Document analysis and CRM integrations run in secure backend functions, never in your browser.

No internet transmission or storage system can be guaranteed to be completely secure, but we take security seriously and review our arrangements as our systems develop.

Depending on the circumstances, you may have the right:

• to be informed about how your information is used;
• to access personal information we hold about you;
• to ask us to correct inaccurate information;
• to ask us to erase information in certain circumstances;
• to restrict processing in certain circumstances;
• to data portability in applicable circumstances;
• to object to certain processing;
• an absolute right to object to your personal information being used for direct marketing;
• to withdraw consent where processing relies on consent;
• to rights relating to certain automated decision-making.

These rights are not all absolute. To exercise a right, contact ryan.knight@dojo.co.uk. We may need to verify your identity before responding.

You can stop receiving marketing at any time using an unsubscribe method provided in the communication, or by contacting ryan.knight@dojo.co.uk. Opting out of marketing will not prevent us from sending necessary communications relating to an enquiry, appointment, service or existing business relationship.

We use cookies and similar technologies as explained in our Cookie Policy. You can manage optional technologies at any time using Cookie Settings, also available in the website footer.

Our website may contain links to third-party websites, including Dojo and appointment-booking or social-media services. We do not control the privacy practices of independent third-party websites — please read their own privacy information when leaving our website.

Our services are intended for businesses and business representatives and are not directed at children. We do not knowingly seek to collect personal information from children through this website.

If you have concerns about how Ryan Knight Payments Ltd uses your personal information, please contact us first at ryan.knight@dojo.co.uk. You also have the right to complain to the UK Information Commissioner's Office — ico.org.uk.

We may update this Privacy Policy when our services, technology, legal requirements or processing activities change. The latest version will always be published on this page with an updated revision date.