---
title: Trust Centre | Data Protection & Security | SideUp UK
description: "How SideUp protects your data and your money: UK GDPR, secure payments with Stripe Payments UK, platform security and how to report a concern."
---
[Skip to main content](https://sideup.com/en-us/en-gb/trust#main-content)
[](https://sideup.com/?hsLang=en-us)
- Solutions
Pre-tax Benefits
IRS-compliant, pre-tax benefits for core needs.
- [Student Loan & Tuition Smarter education funding](https://sideup.com/student-loan-repayment-benefits?hsLang=en-us)
- [Commuter Pre-tax transit & parking](https://sideup.com/commuting?hsLang=en-us)
- [HRA Health Reimbursement Arrangement](https://sideup.com/hra?hsLang=en-us)
- [Family Care Real support for caregivers](https://sideup.com/family-care?hsLang=en-us)
Lifestyle Spending Accounts
Flexible, post-tax benefits for modern life.
- [Wellness & Fitness Gym, mental health & wellbeing](https://sideup.com/wellness-fitness?hsLang=en-us)
- [Work From Home Home office & remote setup](https://sideup.com/work-from-home?hsLang=en-us)
- [Food Meals, groceries & nutrition](https://sideup.com/food?hsLang=en-us)
- [Utilities & Essential Bills Internet, phone & household bills](https://sideup.com/utilities-essentials-bills?hsLang=en-us)
- Platform
For Employers
- [Manage Benefits Streamline your benefits administration](https://sideup.com/how-to-manage-benefits?hsLang=en-us)
- [Integrations Connect with your favourite tools](https://sideup.com/integrations?hsLang=en-us)
- [Trust Security, Privacy and Compliance](https://sideup.com/trust?hsLang=en-us)
For Employees
- [How to spend benefits Discover how to use your SideUp card](https://hi.sideup.com/how-to-spend-your-benefits)
- [Stayconomics](https://sideup.com/stayconomics?hsLang=en-us)
Learn with Stayconomics
Explore the ideas, research, and strategies behind workplaces people choose to stay in.
[Blog Data-backed, no-fluff articles on retention, benefits, and the future of work.](https://hi.sideup.com/stayconomics) [Podcast On Youtube and Spotify with the leaders who are actually figuring it out.](https://hi.sideup.com/stayconomics/podcast) [Newsletter The best of what's happening in HR and employee retention, curated, concise, and worth your Monday morning.](https://hi.sideup.com/stayconomics/tag/newsletter) [Events & Webinars Real experts, real questions, real takeaways you can use before the week is over.](https://hi.sideup.com/stayconomics/events-webinars) [Explore by Topics Retention, benefits, HR tech, financial wellness, and more, organized by what you need.](https://hi.sideup.com/stayconomics/topics-1)
- Company
Know more about us
Who we are, who we work with and how to reach us.
[Partnership Grow with us, as a partner, reseller or local business](https://sideup.com/partnership?hsLang=en-us) About us The story and the people behind SideUp Brandbook Our logo, colours and voice, ready to use [Contact us Questions, ideas or a demo? Say hello](https://sideup.com/contact-us?hsLang=en-us)
- Log in
- [Employee](https://app.sideup.com)
- [Business Platform](https://admin.sideup.com)
[Book a demo](https://meetings-eu1.hubspot.com/lana-leles/demo)
- Solutions
- Pre-tax Benefits
- [Student Loan & Tuition](https://sideup.com/student-loan-repayment-benefits?hsLang=en-us)
- [Commuter](https://sideup.com/commuting?hsLang=en-us)
- [HRA](https://sideup.com/hra?hsLang=en-us)
- [Family Care](https://sideup.com/family-care?hsLang=en-us)
- Lifestyle Spending Accounts
- [Wellness & Fitness](https://sideup.com/wellness-fitness?hsLang=en-us)
- [Work From Home](https://sideup.com/work-from-home?hsLang=en-us)
- [Food](https://sideup.com/food?hsLang=en-us)
- [Utilities & Essential Bills](https://sideup.com/utilities-essentials-bills?hsLang=en-us)
- Platform
- For Employers
- [Manage Benefits](https://sideup.com/how-to-manage-benefits?hsLang=en-us)
- [Integrations](https://sideup.com/integrations?hsLang=en-us)
- [Trust](https://sideup.com/trust?hsLang=en-us)
- For Employees
- [How to spend benefits](https://hi.sideup.com/how-to-spend-your-benefits)
- [Stayconomics](https://sideup.com/stayconomics?hsLang=en-us)
- Learn with Stayconomics
- [Blog](https://hi.sideup.com/stayconomics)
- [Podcast](https://hi.sideup.com/stayconomics/podcast)
- [Newsletter](https://hi.sideup.com/stayconomics/tag/newsletter)
- [Events & Webinars](https://hi.sideup.com/stayconomics/events-webinars)
- [Explore by Topics](https://hi.sideup.com/stayconomics/topics-1)
- Company
- Know more about us
- [Partnership](https://sideup.com/partnership?hsLang=en-us)
- About us
- Brandbook
- [Contact us](https://sideup.com/contact-us?hsLang=en-us)
- Log in
- [Employee](https://app.sideup.com)
- [Business Platform](https://admin.sideup.com)
- [Book a demo](https://meetings-eu1.hubspot.com/lana-leles/demo)
Trust Centre
# Your data and your money, protected
SideUp looks after information about your people and the money they spend on their benefits. Here's how we protect both, in plain English.
[Data protection](https://sideup.com/en-us/en-gb/trust#data-protection)[Secure payments](https://sideup.com/en-us/en-gb/trust#payments)[Platform security](https://sideup.com/en-us/en-gb/trust#security)[Report a concern](https://sideup.com/en-us/en-gb/trust#report)
## [UK GDPR Data protection We handle personal data in line with UK GDPR and the Data Protection Act 2018, and only collect what we need to run your benefits. How we protect data →](https://sideup.com/en-us/en-gb/trust#data-protection)
## [FCA-authorised partner Secure payments SideUp cards are issued by an authorised payments partner, regulated by the Financial Conduct Authority. How payments work →](https://sideup.com/en-us/en-gb/trust#payments)
## [Built in Platform security Access controls, encryption and careful handling of card details keep your company's account and your team's information safe. How we secure SideUp →](https://sideup.com/en-us/en-gb/trust#security)
Data protection
## Built around UK GDPR
We process personal data in line with UK GDPR and the Data Protection Act 2018. That means being clear about what we use, why we use it and how long we keep it.
Only what we need
We collect the information needed to run your benefits, pay providers and keep the right records, and nothing more.
Used for a clear purpose
Data is used to deliver the SideUp service, support your team and meet our legal obligations. We never sell personal data.
Kept only as long as needed
We keep personal data for as long as we need it for these purposes or the law requires, then delete or anonymise it.
YOUR RIGHTS
### You're in control of your data
AccessCorrectionErasureRestrictionPortabilityObjection
To exercise any of these rights, email our Privacy & Data Protection Lead, Emma Oliveira. You also have the right to complain to the Information Commissioner's Office (ICO).
[privacy@sideup.com](mailto:privacy@sideup.com)
Secure payments
## Regulated card payments you can rely on
Every SideUp card is issued by an authorised payments partner, so your benefits budgets are handled within the UK's regulated payments framework.
✓
Issued by an electronic money institution authorised by the Financial Conduct Authority
✓
Customer funds safeguarded under FCA rules
✓
Spending limited to the budgets and categories your company sets
Protected
Issued by Stripe Payments UK Limited
SideUp Visa® cards are issued by Stripe Payments UK Limited, an electronic money institution authorised by the Financial Conduct Authority (firm reference number 900461) for the issuing of electronic money and the provision of payment services. Cards are issued under the Visa card scheme pursuant to a licence from Visa Europe Limited.
Platform security
## Security built into everyday use
Good security isn't one big feature. It's lots of small, sensible protections working together.
01
### Encrypted connections
Data travelling between your browser, our app and our systems is encrypted.
02
### The right access for the right people
Admins only see what they need, and employees only see their own budgets and spending.
03
### Card details stay with our issuer
Full card numbers are handled by our authorised card issuer, rather than stored on SideUp's own systems.
04
### Trusted suppliers
We work with established providers and expect them to protect data to the same standard we do.
Security controls
## The controls behind the promise
A full view of the safeguards we have in place, grouped by where they protect you.
5 areas54 controls✓ In place
### Infrastructure security
14 controls
✓Unique production database authentication
✓Encryption key access restricted
✓Unique account authentication enforced
✓Production application access restricted
✓Production operating system access restricted
✓Production network access restricted
✓Intrusion detection in use
✓Log management in use
✓Infrastructure performance monitored
✓Network segmentation in place
✓Network firewalls in use
✓Network firewalls regularly reviewed
✓Network and system hardening standards
✓Service infrastructure maintained
### Internal security procedures
14 controls
✓Business continuity and disaster recovery plans
✓Configuration management system
✓Change management procedures enforced
✓Production deployment access restricted
✓Defined development lifecycle
✓Customer support channels available
✓Security commitments shared with customers
✓Incident response plan in place
✓Risk management programme
✓Regular risk assessments
✓Supplier management programme
✓Cyber security insurance maintained
✓Security policies set and reviewed
✓Clear security roles and responsibilities
### Organisational security
12 controls
✓Asset disposal procedures
✓Production inventory maintained
✓Portable media encrypted
✓Anti-malware technology in use
✓Acceptable use policy acknowledged
✓Security awareness training
✓Confidentiality agreements for employees
✓Confidentiality agreements for contractors
✓Regular performance reviews
✓Code of conduct acknowledged and enforced
✓Background checks
✓Password policy enforced
### Product security
7 controls
✓Data encryption in use
✓Control self-assessments
✓Vulnerabilities scanned and fixed
✓Role-based access for admins and employees
✓Card details held by our authorised issuer
✓Secure sign-in to the app
✓Logging of key admin actions
### Data & privacy
7 controls
✓Data retention procedures
✓Customer data deleted when they leave
✓Data classification policy
✓Published privacy policy
✓Named Privacy & Data Protection Lead
✓Process for data subject requests
✓Personal data never sold
We review our controls regularly and are working towards formal security certification.
Report a concern
## Something doesn't look right?
Tell us straight away. The sooner we know, the sooner we can help.
Card or account
### Lost card or a payment you don't recognise
Contact our Customer Success team and we'll help you secure your card and look into the payment.
[help@sideup.com](mailto:help@sideup.com)
Personal data
### A question or concern about your data
Contact our Privacy & Data Protection Lead about how your data is used, or to exercise your rights.
[privacy@sideup.com](mailto:privacy@sideup.com)
Security
### A possible security issue
Found something that could affect the security of SideUp? Let us know, with as much detail as you can, and we'll investigate.
[Report an issue](mailto:privacy@sideup.com?subject=Security%20concern)
FAQ
## Frequently Asked Questions
Common questions about data protection and security at SideUp.
Is SideUp GDPR compliant?
We process personal data in line with UK GDPR and the Data Protection Act 2018. We collect only what we need to run your benefits, use it for clear purposes and keep it only as long as we need to.
Does SideUp sell personal data?
No. We never sell personal data.
Who issues the SideUp card?
SideUp cards are issued by an authorised payments partner, an electronic money institution regulated by the Financial Conduct Authority. You'll find the full details in the Secure payments section above.
Does SideUp store full card numbers?
No. Full card details are handled by our authorised card issuer, rather than stored on SideUp's own systems.
Does SideUp hold security certifications?
We're working towards formal security certifications. In the meantime, our security controls are listed on this page, and we're happy to answer your questions as part of your procurement process.
How do I make a data protection request?
Email privacy@sideup.com. You also have the right to complain to the Information Commissioner's Office (ICO).
What should I do if my card is lost or stolen?
Contact help@sideup.com straight away, and our Customer Success team will help you secure your card.
[](https://sideup.com?hsLang=en-us)
Benefits that work for everyone.
### Products
- [Student Loan & Tuition](https://sideup.com/student-loan-repayment-benefits?hsLang=en-us)
- [Wellness & Fitness](https://sideup.com/wellness-fitness?hsLang=en-us)
- [Work from Home](https://sideup.com/work-from-home?hsLang=en-us)
- [Family Care](https://sideup.com/family-care?hsLang=en-us)
- [Food](https://sideup.com/food?hsLang=en-us)
- [Utilities & Essential Bills](https://sideup.com/utilities-essentials-bills?hsLang=en-us)
- [HRA](https://sideup.com/hra?hsLang=en-us)
- [Recognition](https://sideup.com/recognition?hsLang=en-us)
### Platform
- [Manage Benefits](https://sideup.com/how-to-manage-benefits?hsLang=en-us)
- [Integrations](https://sideup.com/integrations?hsLang=en-us)
- [Trust](https://sideup.com/trust?hsLang=en-us)
- [Ways to spend benefits](https://sideup.com/how-to-spend-your-benefits?hsLang=en-us)
### Privacy
- [Privacy Policy](https://sideup.com/privacy-policy?hsLang=en-us)
- [Terms & Conditions](https://sideup.com/terms-conditions?hsLang=en-us)
### Log in
- [Business Platform](https://admin.sideup.com)
- [Employee Portal](https://app.sideup.com)
[Contact us](https://sideup.com/contact-us?hsLang=en-us)
SideUp Visa® Commercial cards are powered by Stripe and issued by Celtic Bank. Stripe Issuing balances are provided in the US by Stripe Payments Company, licensed money transmitter, with funds held at Stripe’s bank partners, Members FDIC. 919 North Market Street, suite 950 – Wilmington – DE - 19801
© 2026 SideUp. All rights reserved.
Book a demo
```json
{
"@context" : "https://schema.org",
"@type" : "FAQPage",
"mainEntity" : [ {
"@type" : "Question",
"acceptedAnswer" : {
"@type" : "Answer",
"text" : "We process personal data in line with UK GDPR and the Data Protection Act 2018. We collect only what we need to run your benefits, use it for clear purposes and keep it only as long as we need to."
},
"name" : "Is SideUp GDPR compliant?"
}, {
"@type" : "Question",
"acceptedAnswer" : {
"@type" : "Answer",
"text" : "No. We never sell personal data."
},
"name" : "Does SideUp sell personal data?"
}, {
"@type" : "Question",
"acceptedAnswer" : {
"@type" : "Answer",
"text" : "SideUp cards are issued by an authorised payments partner, an electronic money institution regulated by the Financial Conduct Authority. You'll find the full details in the Secure payments section above."
},
"name" : "Who issues the SideUp card?"
}, {
"@type" : "Question",
"acceptedAnswer" : {
"@type" : "Answer",
"text" : "No. Full card details are handled by our authorised card issuer, rather than stored on SideUp's own systems."
},
"name" : "Does SideUp store full card numbers?"
}, {
"@type" : "Question",
"acceptedAnswer" : {
"@type" : "Answer",
"text" : "We're working towards formal security certifications. In the meantime, our security controls are listed on this page, and we're happy to answer your questions as part of your procurement process."
},
"name" : "Does SideUp hold security certifications?"
}, {
"@type" : "Question",
"acceptedAnswer" : {
"@type" : "Answer",
"text" : "Email privacy@sideup.com. You also have the right to complain to the Information Commissioner's Office (ICO)."
},
"name" : "How do I make a data protection request?"
}, {
"@type" : "Question",
"acceptedAnswer" : {
"@type" : "Answer",
"text" : "Contact help@sideup.com straight away, and our Customer Success team will help you secure your card."
},
"name" : "What should I do if my card is lost or stolen?"
} ]
}
```