TERMS AND CONDITIONS

Qashio’s Privacy Policy

Ireland, European Economic Area “EEA” and United Kingdom

Effective Date: 08/04/2026
Last Updated: 07/042026

Qashio is committed to protecting your personal data and being clear about how we use it.

This Privacy Policy explains how we collect, use, share, and protect personal data when you use our website, platform, products, and related services in Ireland, the EEA, and the UK.

‍

1. Who we are

In this Privacy Policy, “Qashio”, “we”, “us”, and “our” means Qashio Finance House Ltd registered at 93 Upper Georges St, Dun Laoghaire, Co. Dublin

Privacy email: privacy@qashio.com

Where required, we may also identify our EU Representative, UK Representative, and Data Protection Officer or Privacy Lead.

‍

2. Who this notice applies to

This Privacy Policy applies to:

• Website visitors;
• Prospective customers;
• Customer representatives;
• Authorised users;
• Cardholders;
• Referral contacts; and
• Other individuals who interact with Qashio in connection with our services.

Note: This notice is intended for customer and product-related use. It does not cover recruitment or job applicant processing.

‍

3. What information we collect

Depending on how you interact with us, we may collect:

• Contact details: such as name, email, phone number, company, and job title.
• Account and onboarding information.
• Company and business profile information.
• Financial data: transaction, card, billing, and payment-related data.
• Expense data: receipts and expense reports.
• Communications: support records and correspondence.
• Technical data: website usage, device information, and technical logs.
• Location data: approximate location based on IP address or similar signals.
• Referral information.
• Third-party data: information from integrations, partners, public sources, and verification providers.

We may also record calls or keep support interaction records where permitted by law.

‍

4. How we use your information

We use personal data to:

• Provide and manage our website, platform, and products.
• Create and manage accounts.
• Process payments, transactions, receipts, and rewards.
• Communicate with you and provide customer support.
• Verify identity and business information.
• Carry out fraud prevention, risk, sanctions, and compliance checks.
• Monitor security and prevent misuse.
• Improve our services and user experience.
• Send marketing communications where permitted.
• Comply with legal and regulatory obligations.
• ‍

5. Why we use your information

Where GDPR or UK GDPR applies, we use personal data only where we have a valid legal basis, including:

• Performance of a contract: To deliver our services to you.
• Compliance with legal obligations: To meet regulatory and statutory requirements.
• Legitimate interests: To run and improve our business, keep our services secure, prevent fraud, and manage customer relationships.
• Consent: Where required by law (which you can withdraw at any time).

If we rely on legitimate interests, these may include running and improving our business, keeping our services secure, preventing fraud, and managing customer relationships.

6. When we share your information

We may share personal data with:

• Service providers and vendors.
• Qashio group companies.
• Relevant business customers and their administrators.
• Card issuers, payment processors, and financial partners.
• Identity, fraud, risk, and compliance providers.
• Third-party integration providers.
• Marketing, referral, and rewards partners.
• Professional advisers (e.g., lawyers, accountants).
• Regulators, authorities, courts, or law enforcement where legally required.

‍

7. International transfers

We may transfer personal data outside Ireland, the EEA, and the UK. Where we do so, we use appropriate safeguards as required by law, such as:

• Adequacy decisions.
• The European Commission’s Standard Contractual Clauses (SCCs).
• The UK International Data Transfer Agreement (IDTA) or the UK Addendum, as applicable.

‍

8. How long we keep data

We keep personal data for as long as necessary for the purposes described in this Privacy Policy, including to provide services, comply with legal and regulatory requirements, resolve disputes, prevent fraud, and protect our rights.

Retention periods depend on the type of data and the reason we hold it.

‍

9. Cookies and similar technologies

We use cookies and similar technologies for security, functionality, analytics, and, where permitted, marketing or campaign measurement.

Where required by law, we ask for consent before using non-essential cookies.

Please see our separate Cookie Notice for more information. 

10. Your choices

You can:

• Unsubscribe from marketing emails;
• Opt out of SMS or similar messaging where offered;
• Manage cookie preferences through our consent tools; and
• Object to direct marketing where applicable.

Please note that we may still send service-related or account-related communications where necessary.

‍

11. Your rights

If the EU GDPR or UK GDPR applies, you may have the right to:

• Access your personal data.
• Correct inaccurate data.
• Request deletion of your data.
• Restrict processing.
• Object to certain processing.
• Request data portability.
• Withdraw consent.
• Complain to a supervisory authority.

If we process your data on behalf of a business customer, that customer may be the correct first contact for your request.

‍

12. Security

We use appropriate technical and organisational measures to help protect personal data, including access controls, authentication measures, encryption where appropriate, monitoring, and incident management processes. However, no system is completely secure, and we cannot guarantee absolute security.

‍

13. Updates to this Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will post the updated version and, where required, provide additional notice.

14. Contact us

If you have questions about this Privacy Policy or want to exercise your rights, please contact us at:

Privacy email: privacy@qashio.com
Address: 93 Upper Georges St, Dun Laoghaire, Co. Dublin
Privacy Lead / DPO: 

‍

15. Complaints

If you have concerns about how we process your personal data, we encourage you to contact us first.

You also have the right to lodge a complaint with the relevant supervisory authority, including:

• the Data Protection Commission (DPC) in Ireland;
• the supervisory authority in your EEA country; or
• the Information Commissioner’s Office (ICO) in the UK.
  
  
  

Annex 1: Cookie Notice and Consent 

Cookie Notice

Ireland, EEA and United Kingdom

Effective Date: 08/04/2026
Last Updated: 07/042026

This Cookie Notice explains how Qashio uses cookies and similar technologies when you visit our website, use our platform, or interact with our digital services in Ireland, the European Economic Area (“EEA”), and the United Kingdom (“UK”).

‍

What are cookies?

Cookies are small text files placed on your device when you visit a website. They help websites function, remember your preferences, improve performance, and provide insights into how users interact with online services.

We may also use similar technologies, including:

• pixels and web beacons;
• local storage;
• tags and scripts;
• software development kits (SDKs); and
• other similar tracking technologies.

In this notice, we refer to all of these as cookies.

‍

Why we use cookies

We use cookies to:

• make our website and platform work properly;
• keep our services secure;
• remember your preferences;
• understand how our website and platform are used;
• improve performance and user experience; and
• support analytics and marketing activities, where permitted.

‍

Types of cookies we use

‍

Strictly necessary cookies

These cookies are essential for the website or platform to function properly. They may be used for core features such as page navigation, secure login, fraud prevention, session management, and service stability.

Because these cookies are necessary to provide the service you request, they do not require consent.

‍

Functional cookies

These cookies allow us to remember choices you make, such as your language, region, or other settings, so we can provide a more personalised experience.

Where required by law, we will ask for your consent before using these cookies.

‍

Analytics cookies

These cookies help us understand how visitors use our website and platform, including which pages are viewed, how users move through the site, and whether any issues arise. This helps us improve performance, usability, and content.

Where required by law, we will ask for your consent before using analytics cookies.

‍

Advertising and targeting cookies

These cookies may be used to deliver more relevant advertising, measure campaign performance, manage how often ads are shown, and understand how users engage with our marketing across websites or devices.

Where required by law, we will ask for your consent before using advertising or targeting cookies.

‍

Social media and integration technologies

If our website includes embedded content, social media features, or third-party integrations, those providers may use cookies or similar technologies.

Where required by law, we will ask for your consent before using these technologies unless they are strictly necessary.

‍

Your cookie choices

When you first visit our website, you may see a cookie banner that gives you the option to:

• accept all cookies;
• reject non-essential cookies; or
• manage your preferences.

‍

You can change your preferences at any time through the Cookie Settings link available on our website.

Most browsers also allow you to block or delete cookies. Please note that disabling some cookies may affect the functionality or performance of the website or platform.

‍

Third-party cookies

Some cookies may be set by third parties, such as analytics providers, advertising partners, social media platforms, or embedded service providers.

Where third-party cookies are used, those third parties may process information collected through their technologies in accordance with their own privacy and cookie notices.

‍

How long cookies stay on your device

Some cookies are deleted when you close your browser. These are known as session cookies.

Others remain on your device until they expire or are deleted. These are known as persistent cookies.

How long a cookie stays on your device depends on its purpose and the settings applied by the relevant provider.

‍

International transfers

Information collected through cookies may be processed outside Ireland, the EEA, or the UK, including in countries where our service providers or partners operate.

Where required, we will ensure that appropriate safeguards are in place for those transfers in accordance with applicable data protection law.

‍

Changes to this Cookie Notice

We may update this Cookie Notice from time to time to reflect changes in law, technology, guidance, or our use of cookies.

When we do, we will update the date at the top of this page and take any additional steps required by law.

‍

Contact us

If you have any questions about this Cookie Notice or how we use cookies, please contact us at:

Privacy email: privacy@qashio.com
Address: Qashio Finance House Ltd registered at 93 Upper Georges St, Dun Laoghaire, Co. Dublin

Preference centre introduction

You can manage your cookie preferences below. Strictly necessary cookies are always active because they are required for the website and platform to function properly. You can choose whether to allow functional, analytics, advertising, and similar technologies. You can update your choices at any time.

‍

Cookie categories

• Strictly Necessary
  Required for the website or platform to function securely and properly. These cookies cannot be switched off.
• Functional
  Help remember your preferences and improve your experience.
• Analytics
  Help us understand how visitors use our website and platform so we can improve performance and usability.
• Advertising and Targeting
  Used to measure campaigns, personalise advertising, and understand engagement with promotions.
• Social Media and Integrations
  Used where social media features, embedded content, or external integrations are available.

‍