At Jazari, we are committed to protecting and respecting your privacy. This policy explains how we collect, use, share, and protect your personal data when you use our products and services.

1. About Us

For data protection purposes, Alif Financial Ltd is the data controller for your personal data related to Jazari services. PayrNet Ltd acts as a joint controller for data associated with your electronic money account and card.

Jazari and Jazari Money is a trading name of Alif Financial Ltd UK, a company registered with Companies House under number 13467148. Alif Financial Ltd is authorised by the Financial Conduct Authority (FCA) as an agent under the Electronic Money Regulations 2011 (Firm Reference Number: 903134). Its registered address is: 4th Floor 58-59 Great Marlborough Street, London, England, W1F 7JY.

Alif Financial Ltd (trading as Jazari Money) operates as an agent of PayrNet Limited, a company registered in England and Wales under company number 09883437. PayrNet Limited is authorised by the FCA under the Electronic Money Regulations 2011 (FCA reference: 900594) to issue electronic money and provide payment services.

The Financial Services Compensation Scheme does not cover electronic money accounts. This means there is no compensation scheme in place to protect you from losses in the event of insolvency. However, your funds are held in one or more segregated accounts with regulated third-party credit institutions, in accordance with the safeguarding requirements of the Electronic Money Regulations 2011. While these measures aim to protect your funds, there is a small risk that, in the unlikely event of the insolvency of the credit institution holding your safeguarded funds, your money may be at risk.

The Jazari Card and Jazari Account are issued by PayrNet Limited, which is authorised by the FCA under the Electronic Money Regulations 2011 (FCA reference: 900594) to issue electronic money and provide payment services.

If you have any questions or requests regarding your personal data, you can contact us at: privacy@jazari.money

2. What Data We Collect

We may collect and use the following types of personal data:

Information you provide directly:

• Name, date of birth, address

• Contact information (email, phone number)

• Identification documents (e.g., passport, utility bill)

• Bank account and card details

• Employment and income details (if applying for RNPL)

• Any data you enter into our apps, forms, or communications

Information we collect automatically:

• IP address, device details, and browser type

• Usage data (clicks, page views, time spent)

• Transactional data (payment amount, recipient details, time, location)

Information from others:

• Open Banking data from your linked accounts (via Bud)

• Credit scoring and financial wellness data (via SteadyPay)

• Identity verification data (via Onfido)

• Cross-border remittance data (via Terrapay)

We do not collect biometric data.

3. Legal Basis for Processing

We use your personal data under the following legal grounds:

• Contractual necessity: To deliver services and fulfill our agreement with you

• Legal obligation: To comply with financial regulations and anti-money laundering laws

• Legitimate interest: To improve our services, prevent fraud, and understand our users

• Consent: Where required (e.g., certain marketing or data sharing preferences)

4. How We Use Your Data

5. Automated Decision-Making

We use automated decision-making for our Remit Now, Pay Later (RNPL) eligibility checks. These use financial data (via SteadyPay and Bud) to assess your suitability. If you disagree with a decision, you may request a human review by contacting support.

6. Who We Share Your Data With

We only share your data with trusted partners when necessary:

All partners are required to meet strict data security and privacy obligations in line with GDPR and industry standards.

7. International Data Transfers

We may transfer your data outside the UK/EEA when required for international payments or outsourced services. These transfers are protected using Terrapay’s secure systems and standard contractual safeguards to ensure an equivalent level of protection.

8. Data Retention

We retain personal data for up to 7 years after your relationship with us ends, in line with UK financial and legal requirements.

9. Your rights (GDPR)

You have the right to:

• Access the personal data we hold about you

• Request correction or deletion of your data

• Object to or restrict certain types of processing

• Request data portability

• Withdraw consent at any time (where applicable)

• Request human review of automated decisions

To exercise these rights, contact us at privacy@jazari.money.

10. Updates

We may occasionally update this policy. If we do, we will notify you via the app, email, or our website.

11. Cookies

We use cookies and similar technologies on our website to improve functionality and measure usage.

12. Fraud Prevention and Fraud Prevention Agencies Fair Processing Notice

We are required by law and regulation to protect our customers and the financial system against fraud and financial crime. To do this, we share personal data with fraud prevention agencies, including fraud prevention agencies.

As part of the processing of your personal data, decisions may be made by automated means. This means we may automatically decide that you pose a fraud or money laundering risk if our processing reveals your behaviour to be consistent with money laundering or known fraudulent conduct, or is inconsistent with your previous submissions, or you appear to have deliberately hidden your true identity. You have rights in relation to automated decision making: if you want to know more please contact us using the details above.

Fair Processing Notice (FPN)

When you apply for, or use, our products or services, we will carry out checks to help prevent fraud, money laundering, and to verify your identity. These checks require us to process your personal data and share it with fraud prevention agencies.

What this means:

• We and fraud prevention agencies may keep and use your data to prevent fraud and money laundering, and to verify your identity.

• If we, or fraud prevention agencies, determine that you pose a fraud or money laundering risk, we may refuse to provide the services you applied for, or we may stop providing existing services.

• Fraud prevention agencies members may also access this information when you apply for financial products elsewhere, to help prevent fraud.

• Records of fraud or money laundering risk may be retained by fraud prevention agencies for up to six years, and may affect your ability to obtain services, financing or employment.

You can find more information about how fraud prevention agencies processes your data by reading the fraud prevention agencies Fair Processing Notice at: https://www.cifas.org.uk/fpn

Legal Basis

Processing personal data for fraud prevention purposes is necessary to comply with our legal obligations (Article 6(1)(c) UK GDPR) and is in our legitimate interests (Article 6(1)(f)) to protect our business and customers against financial crime.

Last updated: October 2025.

If you have any concerns about how your data is used, please contact privacy@jazari.money.

Contacting Us

If you have any questions, concerns, or complaints regarding this Policy, the information we hold about you, or if you wish to exercise your rights, we encourage you to contact us using the details below:

privacy@jazari.money

We will attempt to resolve complaints and disputes and make every reasonable effort to honor your wish to exercise your rights as quickly as possible and in any event, within the timescales provided by applicable data protection laws.

Thank you for trusting Jazari with your data.