Last updated: 01-10-2026
This Privacy Policy explains what personal information we collect, how we use it, who we share it with, how long we keep it and your rights. Please read it together with our Terms and Conditions and Cookie Policy.
STB Remit is a trading name of Kanson Services Limited ("we", "us", "our"), a company registered in England and Wales (company number 05275139). Our registered office is TBXH @ Sunley, Sunley House, Bedford Park, Croydon, London, CR0 2AP.
We are the controller of the personal information described in this Privacy Policy. This means we decide how and why it is used, and we are responsible for looking after it under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We are registered with the Information Commissioner's Office (ICO) under registration number Z2392177.
If you have any questions about this Privacy Policy or how we use your information, contact our data protection lead at privacy@stbremit.com, by phone on +44 7517 878358 (09:00–17:00, Monday to Friday), or by post to Data Protection, Kanson Services Limited, TBXH @ Sunley, Sunley House, Bedford Park, Croydon, London, CR0 2AP.
This Privacy Policy explains how we use personal information about:
It does not cover information about our employees, or the websites of other organisations that we link to.
Information you give us:
Information we collect automatically: when you use our website or app we collect technical information such as your IP address, device type, operating system, browser, app version, the pages you visit and the date and time of your visit, and information about how you log in. Some of this is collected through cookies (see section 14).
Information we receive from others:
If someone sends you money through STB Remit, we receive information about you from the Sender: your name, phone number, country, and your bank account or mobile wallet details. For cash pickup, our payout partner will check your identity document before paying you and may record its details and your signature. We may also hold your relationship to the Sender and the answer to any test question.
We use this information to deliver the money to you, to check it is paid to the right person, to meet our legal obligations to prevent fraud, money laundering and terrorist financing (including sanctions screening), and to deal with any queries or complaints. We share it with the payout partner and any bank or mobile wallet provider in your country that is involved in paying you. The rest of this Privacy Policy, including your rights in section 12, applies to you too.
Data protection law says we must have a legal reason (a "lawful basis") for each way we use personal information. The table below sets out what we do and why.
| What we use your information for | Lawful basis |
| Creating and running your account, and carrying out the transfers you ask for, including passing details to payout partners and sending you receipts and service messages | Contract — we need it to provide the Service you have asked for |
| Checking your identity, screening against sanctions and PEP lists, monitoring transactions, asking about the source of funds and reporting suspicious activity | Legal obligation — the Money Laundering Regulations 2017, sanctions laws and the Proceeds of Crime Act 2002 |
| Keeping records of customers and transactions | Legal obligation — the Money Laundering Regulations 2017 and the Payment Services Regulations 2017 |
| Responding to regulators, law enforcement and courts | Legal obligation |
| Detecting and preventing fraud and scams, and keeping our systems and your account secure | Legal obligation and legitimate interests — protecting you, our customers and our business from fraud |
| Handling your questions and complaints | Legal obligation (FCA complaints rules) and legitimate interests — resolving problems |
| Improving our website, app and service, including analytics | Legitimate interests — understanding how our service is used; consent for non-essential cookies |
| Sending you marketing about our own services | Consent, or where the law allows, legitimate interests for existing customers (see section 7) |
| Recovering money, we are owed, and establishing or defending legal claims | Legitimate interests |
| Selling or restructuring our business, where information about our customers is part of what is transferred | Legitimate interests |
Where we rely on legitimate interests, we have weighed our interests against your rights. You can ask us for more information about this assessment, and you have the right to object (see section 12).
Criminal offence information. Our sanctions, PEP and adverse media checks, and our fraud checks, may reveal information about alleged or actual criminal offences. We use this information only where the law allows, to meet our legal obligations and to prevent fraud and financial crime, under the conditions in Schedule 1 of the Data Protection Act 2018.
Biometric information. If you complete a selfie or video check, our identity verification provider compares your face with the photo in your ID document. This involves biometric data. We use it only to confirm your identity and prevent fraud, with your explicit consent / under the legal condition confirmed by our adviser.
Automated checks. Some of our identity, fraud and screening checks are automated. If an automated check means we cannot open your account or send a transfer, a member of our team will review the decision. You can ask us to explain it, give us your point of view, and ask for a person to reconsider it by contacting us (section 1).
We will only send you marketing emails, texts or app notifications about STB Remit services if you have agreed to receive them, or if you are an existing customer and we are telling you about similar services of our own and you have not told us to stop.
We do not sell your personal information, and we do not share it with other companies for their own marketing.
You can stop marketing at any time by using the unsubscribe link in any email, replying STOP to a text, changing your settings in the app, or contacting us. We will keep a record that you have opted out, so we do not contact you again.
We share personal information only where we need to, and only the information needed for the purpose:
To deliver your money, we must send your details and the Receiver's details to the country where the money is paid out: currently The Gambia, Senegal, Nigeria and Somalia. Some of our service providers may also process information in other countries, e.g. the European Economic Area or the USA].
Where a country does not have UK "adequacy regulations" (a finding that its data protection laws give equivalent protection), we protect your information by using the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses with the recipient, or we rely on the transfer being necessary to perform the transfer you have asked us to make. You can ask us for more information about the safeguards we use.
We keep personal information only for as long as we need it. The main periods are:
| Information | How long we keep it |
| Identity documents, verification results, and customer and transaction records | 5 years after our business relationship with you ends, or 5 years after an individual transfer if you do not have an account, as required by the Money Laundering Regulations 2017. We may keep them longer if the law, a regulator or a court requires it. |
| Complaints and correspondence | 6 years after the matter is closed. |
| Call recordings | 5 years. |
| Marketing preferences and opt-outs | For as long as you are a customer, and a suppression record for as long as needed to respect your opt-out |
| Website and app technical data and cookies | As set out in our Cookie Policy |
| Information about unsuccessful applications | 5 years |
When information is no longer needed, we securely delete it or anonymise it.
We use technical and organisational measures to protect personal information, including encryption, access controls that limit access to staff and providers who need it, secure hosting, monitoring for suspicious activity, and staff training.
We will never ask for your password or security codes by phone, email or text. If someone contacts you claiming to be from STB Remit and asks for these, do not share them and contact us straight away. See our Fraud Awareness page for more advice.
You have the following rights over your personal information. They do not all apply in every situation, and some are limited where we must keep information to meet our legal obligations:
To use any of these rights, contact us (section 1). We may need to confirm your identity first. We will respond within one month or tell you within that month if we need up to two more months because your request is complex. We do not normally charge a fee.
In some cases, the law does not allow us to tell you that we have shared information with the authorities, for example about a suspicious activity report.
The law requires us to verify your identity and, in some cases, to ask about the source of your funds and the purpose of a transfer. We also need your payment details and your Receiver's details to carry out a transfer. If you do not provide this information, we will not be able to open your account or send your money.
We use cookies and similar technologies on our website and app. Essential cookies are needed for the site to work and to keep your account secure. We only use analytics and other non-essential cookies if you agree, through our cookie banner. You can change your choice at any time through "Cookie settings". Our Cookie Policy [link] lists the cookies we use, what they do and how long they last.
Our Service is only for people aged 18 or over. We do not knowingly collect information about children, except where a child is the Receiver of a transfer, in which case we use only the information needed to deliver it.
If you are unhappy with how we have used your personal information, please contact us first (section 1) so we can try to put it right.
You also have the right to complain to the Information Commissioner's Office, the UK data protection regulator:
We will update this Privacy Policy when we change how we use personal information or when the law changes. We will show the date of the latest version at the top. If we make an important change, we will tell you by email or in the app before it takes effect.