Terms of Service & Privacy notice

Last updated: 5 June 2025

Consumer Terms of Service

Welcome to TrueLayer!

Thank you for using TrueLayer's services ("Services")!

The Services are delivered by TrueLayer Limited ("TrueLayer", "we", "us"), a company registered in England and Wales (company number 10278251) with our registered office at at Part Ground Floor (East), Floors 6 and 7, The Gilbert, 40 Finsbury Square, London, EC2A 1PX.

These Terms of Service ("Terms") apply to you ("you") each time you use our Services through Amazon’s app or websites. When you use the Services, you need to agree to the Terms in force at that time, so please be sure to read them carefully each time you use the Services. If you do not agree to these Terms, you cannot use any of our Services.

Our Privacy Notice and Cookie Policy can be found in these Terms below.

These Terms are available for you to download or you may request a copy of these Terms by creating a support ticket.

Who we are

TrueLayer is authorised and regulated by the Financial Conduct Authority (“FCA”) under the Payment Services Regulations 2017 and the Electronic Money Regulations 2011 (Firm Reference Number: 901096).

Our VAT registration number is: 251953204.

The FCA's contact details are as follows:

Financial Conduct Authority

12 Endeavour Square

London, E20 1JN

Contact Centre: 0300 500 0597

Consumer Helpline: 0800 111 6768

We are not authorised to give you any financial or investment advice. Our Services do not amount to financial or investment advice.

Restrictions on our Services

We are providing the Services to you only and you should not share your access to the Services with anyone else.

By using the Services, you represent and confirm that:

  • you will not use our Services for any fraudulent, unlawful or abusive purpose

  • the bank login credentials you use are your own and you are duly authorised to use them to connect your Payment Account(s) to our Services

  • you are at least 18 years of age and resident in the EEA.

If we consider that the conditions set out in these Terms are not satisfied, or if it would be unlawful to provide you with a Service, we may refuse to do so. If this is the case, we will notify you through the app or website, unless the law prevents this.


Authentication

Once you select your bank and Payment Account, we will redirect you to your bank (either on a web browser, or your banking mobile app) where you will need to log in using your credentials (e.g. a password and biometric credential such as a fingerprint).

Neither TrueLayer nor Amazon will be able to see or access your bank login credentials at any time.

Payment Services

Payment Initiation Services
What this is

Our PIS enables you to initiate a payment, or payments, from your Payment Account to Amazon. We will instruct your bank to make the payment.

How this works

You will be directed to a page on Amazon’s app or website where you can:

  • provide explicit consent to TrueLayer

  • select the bank and Payment Account you want to make your payment from

  • instruct TrueLayer to initiate a payment of your chosen amount to Amazon

You will then be required to authenticate with your bank (see Authentication). Once authenticated the bank will make your payment.

The money will leave your account right away, or at the very latest, within two hours. We'll send you a confirmation (or Amazon will) with a unique code and the payment amount for your records.

If you choose to make a single payment, our service is over once we have instructed your bank to initiate the payment.

If you want to set up your bank account so you can make future payments to Amazon without being redirected to your bank each time, you can establish a ‘mandate’. This mandate works by setting the limits within which your payment can be made (e.g. how often, how much). A payment can then be initiated on your behalf automatically when you buy something from Amazon and choose this payment method.

For any payment the amount or mandate will be clearly displayed to you before we instruct your bank.

Just so you know, your bank handles the actual payment, not us (TrueLayer). We don't charge you anything for our service, but your bank might have their own fees. Check their terms and conditions for details.

Direct Debits
What this is

We can help you to securely establish a Direct Debit Mandate with Amazon so that future payments can be taken without the need to reauthenticate yourself with your bank.

How this works

When you pay on Amazon, you'll see an option to use Direct Debit for future orders. If you choose this, we'll start by initiating your initial payment to Amazon from your bank account via PIS. We'll then use your bank details (name, account number, sort code) from that payment to create a Direct Debit mandate for Amazon. If you approve it, Amazon can then take payments directly from your account for future purchases.

Other relevant terms and conditions

Remember, your use of Amazon and your bank account is covered by their own terms and conditions.

We don't charge you to use our service, but Amazon might have fees for using their app. Amazon pays us for providing our service to them. Any issues with Amazon's products or services are handled by them, not us.

Intellectual Property

We own everything related to our services, website, and technology. If you give us feedback or ideas, we can use them to improve things without any restrictions.

Disclaimers

We provide our services as they are, when they're available. While we work hard to provide a great service, we can't guarantee that everything will always work perfectly for you. This doesn't change your legal rights as a consumer.

As much as the law allows, we can't offer additional warranties beyond what we've stated in these terms.

If you break these terms and it causes us losses, you'll be responsible for those costs.

Who is responsible if things go wrong?

We're only responsible for problems we could reasonably predict. If we breach these Terms and it causes you loss or damage, we'll take responsibility for that. We're not responsible for unexpected or business-related losses.

We're not responsible for your loss or damages if you breach these Terms or for things out of our control like power outages, pandemics, or natural disasters. We'll always follow the law.

If you see any suspicious activity on your bank account after using our service, contact your bank immediately. They'll investigate and handle refunds. Check their complaint policy.

We're not responsible if your account is hacked or accessed without our control. If you think someone is using your bank details to access our service, email us right away at [email protected].

About these Terms

Every time you use our services, you agree to the latest terms. Sometimes, another company in our group might provide some of our services. If that happens, these terms still apply until you have a separate agreement with them.

These terms apply as long as you use our services.

We can end our agreement or stop you from using our services if you break these rules or if the law tells us to. You can also end the agreement by contacting our Client Care team.

We can change these terms at any time. We'll post the changes on this page. If you don't like the changes, you can end the agreement for free. You can't use our services if you don't agree to the latest terms.

You can download these terms or ask our Client Care team for a copy.

Complaints

We want to make things right if you're not happy. If you have a complaint, the quickest way to get help is to contact our Client Care team.

You can also email us at [email address removed] or write to us at: TrueLayer, Client Care, Part Ground Floor (East), Floors 6 and 7, The Gilbert, 40 Finsbury Square, London, EC2A 1PX.

We'll get back to you within 3 working days and aim to resolve your issue within 15 days. We might need to contact Amazon or your bank to help, and we might need your help too. We'll send you updates by email.

Governing Law and Jurisdiction

These terms are covered by English law. You can take legal action in English courts. If you live in Scotland or Northern Ireland, you can also take legal action in your local courts. All disputes are handled under English law.

If you're a consumer, you have the legal rights that your home country gives you, even if they're different from English law. These terms don't take away those rights.

You can also use the European Commission's online dispute resolution platform to help settle any problems from online transactions, including those related to our services.

Entire Agreement

These Terms are the entire agreement between you and us in relation to the Services.

Transfer of Your Rights

You can’t transfer your rights under these Terms to any third party without our written

consent.

Modification and Severance

If any part of these terms isn't valid, we'll either change it to make it valid or remove it. This won't affect the rest of the terms.

Waiver of Rights

If either of us doesn't use a right or solution we have under these terms or the law right away, it doesn't mean we lose that right. We can still use it later. And if we do agree to give up a right, it only counts if it’s in writing.

Translation and Language

We might provide translations of our terms, but only the English version is legally valid. We might communicate in other languages for your convenience, but we can always choose to communicate in English.

Contact Us

If you have any questions about our security you can contact us at [email protected]

Any other questions? Contact us here [email protected]


Consumer Privacy Notice

Overview

You can use our services to make payments to Amazon as set out in the Terms. This Privacy Notice explains how we collect, store, process and protect your personal data when doing so.

Please read this Privacy Notice carefully before using our website, console or other web applications (collectively the "Site") or any of our Services.

Any questions? Email us at [email protected].

TrueLayer Limited (TrueLayer), with company number 10278251, is based at Part Ground Floor (East), Floors 6 and 7, The Gilbert, 40 Finsbury Square, London, EC2A 1PX and is registered as a data controller with the Information Commissioner's Office ("ICO") under number ZA797592.

In this Privacy Notice, TrueLayer will be referred to as "we", "us", or "our".

Depending on the context, “you” means a visitor to our Site, a representative of one of our Merchants, or a consumer using of one of our Services.

What personal data do we collect?

The table below sets out the personal data that we collect, process and in some instances store when you use our Services.

The personal data we collect about you and how we use itWhat type of personal data are we using?Purpose of ProcessingWhat is our lawful basis for this processing?
When you use any of our servicesYour name, email address, postal address, account number and sort-code To provide and improve our services, and to identify you for customer support and compliance purposesTo comply with our legal obligations (including regulatory requirements), and where it is necessary for our legitimate interest in ensuring we can provide you and your Merchant with the Services and to continuously improve our Services
When you make a payment to AmazonAny personal data that you give to us, for example your name, email address, username, login data and any payment reference that you supply.To provide and improve our servicesIt is necessary for our legitimate interest in ensuring that we can facilitate your payment to Amazon and allow us to improve our services
The name, account number and sort-code for the account you used to make the paymentTo improve your returning user experience and to populate your Direct Debit mandate if requestedPerformance of a contract with you
If you receive a payment from Amazon (e.g. a refund)Your name, account details (account number, sort code and/or IBAN), date of birth and postal addressTo provide and improve our servicesIt is necessary for our legitimate interest in ensuring that we can facilitate Amazon’s payment to you and allow us to improve our Services
When you visit to our SiteYour name, email address and any other personal data you supply to us (such as any feedback)To provide you with updates on our activities, Services and products; to record your marketing preferences and any feedback or responses for the purposes of improving our Services.With your consent
Any personal data we collect as part of your Cookies setting, namely online identifiers (such as your cookie identifier, IP address, browser type and version, time zone settings and location)To allow us to run the operation of our Site and ensure that our provision of Services through our website runs as smoothly as possibleWith your consent

We respect your privacy. Before using your information, we always make sure it's truly necessary and that it doesn't negatively impact your rights. We only use your information for the reasons we collected it (which we've explained). If we need to use it for something different, we'll let you know why and what legal reasons allow us to do so.

How do we collect your personal data?

Everyone

We will collect personal data about you:

  • Through email when you communicate with us.

  • When you visit our Site through cookies or other similar tracking technologies

  • For more information see the “Cookies” section below

  • When you provide us with your consent, your marketing preferences.

If you are a consumer

We will collect personal data about you:

  • From Amazon

    • Basic identity information (name, email address). We need this to facilitate your payment(s).

  • From you

    • If you share your personal data with us, we will process it as agreed at the time.

  • From your bank

    • We collect information from your bank to enable your payment(s)

  • From our bank

    • We provide Amazon with an account which you can make a payment to. We will use information about your paying account to process any refunds Amazon makes to you.

  • From Identity Providers

    • We will sometimes use third party identity providers to obtain further information about you to provide our services.

ServiceWhat DataFrom Who
PIS and/or Direct DebitYour bankYour bank
Personal data identifying youAmazon
Personal data included in a payment referenceYou
PayOutsPersonal data to identify your bank accountAmazon Our bank account
Consumer Portal RegistrationPersonal data to identify youYou

How long we keep your personal data

We don't keep your information forever. We only hold onto it for as long as it's needed for the reasons we collected it. We decide how long based on:

  • Our contract with you (the Terms)

  • Legal requirements to keep or delete data

  • Your consent: if you gave us permission to use your data, but revoke it

  • Our business needs (legitimate interests)

  • Fraud risk

  • Potential disputes and following data protection rules

Sharing of your personal data

We will share your personal data with Amazon. You can refer to your their privacy notice to understand how they use and manage your personal data.

We may also have to share your personal data:

  • to comply with and fulfil any legal obligation

  • to enforce or apply our Terms

  • to protect the rights, property, or safety of TrueLayer, Amazon or others

  • with our professional advisors such as lawyers, auditors, consultants or insurers

  • with partners or suppliers who process personal data on our behalf (but they can only use it as we instruct them to)

  • with third parties if we sell, transfer or merge parts of our business or assets with them

  • to another company in our group.

Details on our key data processors can be found below.

ProcessorService DescriptionLocation of ProcessingWhich Services?
AWSCloud infrastructure MerchantUnited Kingdom & IrelandAll Services
ZendeskZendesk provides our ticketing and chat system used to communicate with youIrelandAll Services
PonticaPontica is used to triage incoming consumer questions and complaintsIrelandAll Services
Auth0Auth0 provides user authentication and authorisation ServicesUnited KingdomAll Services
Salv Technologies OÜProviding transaction monitoring ServicesGermanyAll Payments Products
MoodysProviding transaction monitoring ServicesBelgiumAll Payments Products
ClearBankClearBank is our partner bank and provides TrueLayer the ability to facilitate Faster Payments, CHAPS, and BACS payment schemes covering the UKUnited KingdomUK PayIns and Payouts
GB Group PlcProviding transaction monitoring ServicesUnited KingdomAll Payments Products

International transfers of your personal data

We primarily store your data within Europe (the EEA) and the UK. We'll always take steps to keep it secure and in line with this privacy policy.

If we need to transfer your data outside Europe or the UK, we'll only do so under strict conditions:

With your explicit written consent

Using approved transfer mechanisms like standard contracts approved by the European Commission, which ensure your data remains protected.

Please contact us if you'd like to learn more about how we protect your data when it's transferred internationally.

Cookies

When you browse our website or use our services, we automatically receive your computer's IP address. This is a unique number that identifies your computer on the internet.

We also use cookies (small text files on your computer) to collect information about how you interact with our site. This helps us understand what's popular and improve your experience.

We use cookies to recognize you and remember your preferences. They also help us track how you use our website.

This allows us to:

  • Continuously improve our services.

  • Enhance your experience on our site.

  • Understand how users interact with our site.

  • Provide insights to sellers on our platform.

  • Improve your overall Amazon experience.

Cookies collect anonymous identifiers, not your personal information. They track things like your device, browser, and how you use our site. We never use cookies to store your banking details.

Cookies can be "first party" which are cookies set by us, or "third-party" which are cookies that are placed on your computer/device by a third party when you visit our Site or use our services.

We will only deploy non-necessary Cookies on your computer/device when we have obtained your prior consent to do so. If you choose to consent to our use of non-necessary Cookies, you may withdraw your consent to these Cookies at any time.

We use the following types of cookies:

  • Essential Cookies (Always On): These make our site work. You can block them in your browser, but the Site might not work right. They don't collect personal info.

  • Functional Cookies (Personalisation): These make your experience better (remember settings, etc.). Some features might not work without them.

  • Ad Cookies (Targeted Ads): These show you ads based on your interests. They don't store personal info, just your browser/device info.

  • Performance Cookies (Site Improvement): These help us see how people use our site so we can make it better. They collect anonymous data.

Managing cookies

We use essential cookies to run the site. You choose if we use other cookies to enhance your experience. You can change your preferences anytime in the cookie settings. Note that blocking all cookies might limit site functionality.

Your Rights

Here's what you can do with your personal information:

  • Find out if we have your data and get a copy.

  • Ask us to stop using your data, especially for direct marketing.

  • Request that we limit how we use your data in certain situations.

  • Correct or update any information that's wrong or out-of-date.

  • Ask us to delete your data if we don't have a valid reason to keep it.

  • Withdraw your consent if you've given us permission to use your data.

  • Ask us to transfer your data to another company, if technically possible.

To do any of the above, please email us at [email protected] to make a subject access request detailing:

  • your name;

  • your address; and

  • the period of data you would like access to.

Changes to this Privacy Notice

Any changes we make to our Privacy Notice in the future will be posted on this page and, where appropriate, notified to you by email. Please check back frequently to see any updates or changes to our Privacy Notice.

Questions and Contact Information

If you would like to access, correct, amend or delete any personal information we have about you, or simply want more information about how we process your personal data, you can contact us at [email protected]

Making a complaint to a supervisory authority

Should you be dissatisfied with the service we provide, you have the right to register a complaint with us at [email protected] and/or file a to file a formal complaint to the Information Commissioner's Office at www.ico.org.uk, or to the relevant data protection supervisory authority in your country of residence.