Last updated on 30 September 2025
Last updated on 30 September 2025
PayPal Pte. Ltd, a Singapore private limited company whose address is 5 Temasek Boulevard #09-01, Suntec Tower Five, Singapore 038985 (we, our, us, PayPal) has developed this Privacy Statement to explain how we, as a Data Controller, may collect, retain, process, share and transfer your Personal Data when you visit our Sites or use your PayPal account, Xoom account, visit our websites, apply for or use our Services (collectively, the Services). This Privacy Statement does not apply to Other Services, such as Hyperwallet.
This Privacy Statement applies to your Personal Data when you visit Sites or use Services, and does not apply to online websites or services that we do not own or control, including websites or services of other PayPal Users.
This Privacy Statement is designed to help you obtain information about our privacy practices and to help you understand your privacy choices when you use our Sites and Services. Please note that our Service offerings may vary by region.
We have defined some terms that we use throughout the Privacy Statement. You can find the meaning of a capitalised term in the Definitions section below.
Please contact us if you have questions about our privacy practices that are not addressed in this Privacy Statement.
We collect Personal Data about you when you visit our Sites or use our Services, including the following:
If you use our Services without creating or logging into an account, we’ll still collect personal data, which may include your payment information, device information, and location. When you use our Services without creating or logging into an account, such as when you use our Pay Without a PayPal account, use Unbranded Payment Services (e.g. Braintree), use PayPal Groups, or use a Fastlane Profile, we will use this information to process transactions, prevent fraud and comply with the law. We may connect this information with your account, if you have one or if you create an account at a later date.
With a Fastlane profile, individuals can store their payment methods and other Personal Data with PayPal so that they can complete the checkout process faster, create a store or loyalty account, or facilitate other transactions at participating Partners and Merchants with payment card, contact information, shipping data or other data they save in their Fastlane profile as relevant to the specific interaction, participating Partner or Merchant, all without having to manually input payment method details and other Personal Data each time they check out (“Fastlane”).
When you create a Fastlane profile, PayPal will store your Personal Data, including your name, email, phone number, address information, billing information and payment method details, and other data that will be relevant to specific Partner or Merchant interactions, and pre-populate that information in the checkout flows or other interactive features of participating Partners and Merchants so that you can enjoy a faster Partner and Merchant experience by not having to manually input your payment or other information. We will also collect transaction and other Partner or Merchant data related to your purchases and other Partner and Merchant interactions when you use Fastlane. If you have a Fastlane profile, we may recognize you as a Fastlane user when you shop on the participating Partners and Merchants sites and we may prompt you to engage in participating Partner or Merchant interactions, such as register for a store or loyalty account using your Fastlane profile information. If you choose to interact with participating Partners or Merchants through Fastlane, you agree to let PayPal disclose your Fastlane profile information to the Participating Partners and Merchants and their service providers, and to facilitate your transaction and shopping experience on the participating Partners and Merchants sites.
When you shop on Partner and Merchant sites, the Partner and Merchant may disclose Personal Data with PayPal that we will use in accordance with this Privacy Statement and the relevant PayPal user agreement.
We retain Personal Data to fulfill our legal or regulatory obligations and for our business purposes. We may retain Personal Data for longer periods than required by law if it is in our legitimate business interests and not prohibited by law. If your account or profile is closed, we may take steps to mask Personal Data and other information, but we reserve our ability to retain and access the data for so long as required to comply with applicable laws. We will continue to use and disclose such Personal Data in accordance with this Privacy Statement.
We may process your Personal Data for a variety of reasons that are permitted under applicable data protection laws and in accordance with the lawful bases below:
We collect the following Personal Data we consider necessary to fulfil our pre-contractual and contractual obligations to you and without which you will not be able to use the Services.
Necessary categories of Personal Data include:
These activities include:
We have a legitimate interest in ensuring that PayPal remains a secure financial service and continuing to offer services that are innovative and of interest to you. We do this where our legitimate interests are not outweighed by your right not to have your data processed for this purpose.
These activities include:
We have a legal obligation under laws to conduct certain processing activities. We do this where it is necessary to comply with applicable laws.
These activities include:
We rely on your explicit and voluntary consent to process your Personal Data to participate in certain features that while not necessary for use of the Services may be of interest to you, such as syncing your contact list to your account, providing biometric data, targeted advertising, linking your email account for package tracking or connecting to a third-party platform. You may change your mind about use of these features at any time through your account settings. Note that withdrawing your consent will not affect the lawfulness of any processing we have conducted prior to your withdrawal. Please refer to Section 10 (“What Are Your Rights”) for more information on your right to withdraw your consent.
We may share your Personal Data or other information about you with others in a variety of ways as described in this section of the Privacy Statement. We may share your Personal Data or other information for the following reasons:
With other members of the PayPal corporate family: We may share your Personal Data with members of the PayPal family of entities to, among other things, provide the Services you have requested or authorised; to manage risk; to help detect and prevent potentially illegal and fraudulent acts and other violations of our policies and agreements and to help us manage the availability and connectivity of PayPal products, Services, and communications.
With other companies that provide services to us: We share Personal Data with third-party service providers that perform services and functions at our direction and on our behalf. These third-party service providers may, for example, provide you with Services, verify your identity, assist in processing transactions, send you advertisements for our products and services, or provide customer support.
With other financial institutions: We share Personal Data with other financial institutions that we have partnered with to jointly offer a product. These financial institutions may only use this information to market and offer PayPal-related products, unless you have given consent for other uses. We may also share Personal Data to process transactions, provide you with benefits associated with your eligible cards, and keep your financial information up to date. For payment transactions with Fastlane, your Personal Data will be shared with the provider of the payment services for the participating Partner and Merchant to enable the processing of the payment transaction. The payment provider for the Partner and Merchant may be PayPal or a third party payment provider.
With the other parties to transactions when you use the Services, such as other Users, Partners and Merchants, and their service providers: We may share information about you and your account or profile with the other parties involved in processing your transactions. For example, we may do this when you use the Services to initiate online purchases, save your payment information with Fastlane, pay other Users, use the Services or return goods. The other parties with whom we may share such information include other Users you are sending or receiving funds from or to, parties involved in processing your transactions, Partners and Merchants, and their service providers. The information might include:
We may also disclose Personal Data to Partners and Merchants to enable their use of our Services to facilitate your transactions. For example, when you visit a participating Merchant site or app, the Merchant can check whether you are a user of PayPal services and present a recommended payment method to you to simplify your checkout process. If you choose to interact with participating Partners and Merchants through Fastlane, we will disclose your Fastlane profile information with the participating Partners and Merchants and their services providers, and facilitate your transaction, shopping experience or other interaction on participating Partners and Merchants sites.
Please note that Personal Data shared with Partners and Merchants (or their service providers) involved in a transaction is subject to the Partners and Merchants’ own privacy policies and procedures. We are not responsible for the privacy or security practices of Partners and Merchants.
With other third parties for our business purposes or as permitted or required by law: We may share information about you with other parties for PayPal’s business purposes or as permitted or required by law, including:
With your consent: We also will share your Personal Data and other information with your consent or direction, including if you authorise an account connection with a third-party account or platform.
In addition, PayPal may provide aggregated statistical data to third-parties, including other businesses and members of the public, about how, when, and why Users visit our Sites and use our Services. This data will not personally identify you or provide information about your use of the Sites or Services. We do not share your Personal Data with third parties for their marketing purposes without your consent.
A significant benefit and innovation of PayPal’s Services is that you can connect your account with a third-party account or platform. For the purposes of this Privacy Statement, an “account connection” with such a third-party is a connection you authorise or enable between your account and a non-PayPal account, payment instrument, or platform that you lawfully control or own. When you authorise such a connection, PayPal and the third-party will exchange your Personal Data and other information directly. Examples of account connections include:
If you choose to create an account connection, we may receive information from the third-party about you and your use of the third-party’s service. For example, if you connect your account to a social media account, we will receive Personal Data from the social media provider via the account connection. If you connect your account to other financial accounts, directly or through a third-party service provider, we may have access to your account balance and transactional information, such as purchases and funds transfers. We will use all such information that we receive from a third-party via an account connection in a manner consistent with this Privacy Statement.
Information that we share with a third-party based on an account connection will be used and disclosed in accordance with the third-party’s privacy practices. Before authorising an account connection, you should review the privacy notice of any third-party that you authorised to have an account connection that will gain access to your Personal Data as part of the account connection. For example, Personal Data that PayPal shares with a third-party account or platform such as a social media account may in turn be shared with certain other parties, including the general public, depending on the account’s or platform’s privacy practices.
When you visit our Sites, use our Services, or visit a third-party website for which we provide online services, we and our business partners and vendors may use cookies and other tracking technologies (collectively, “Cookies”) to recognise you as a User and to customise your online experiences, the Services you use, and other online content and advertising; measure the effectiveness of promotions and perform analytics; and to mitigate risk, prevent potential fraud, and promote trust and safety across our Sites and Services. Certain aspects and features of our Services and Sites are only available through the use of Cookies, so if you choose to disable or decline Cookies, your use of the Sites and Services may be limited or not possible.
Do Not Track (DNT) is an optional browser setting that allows you to express your preferences regarding tracking by advertisers and other third-parties. We do not respond to DNT signals.
Please review our Statement on Cookies and Tracking Technologies to learn more about how we use Cookies.
You have choices when it comes to the privacy practices and communications described in this Privacy Statement. Many of your choices may be explained at the time you sign up for or use a Service or in the context of your use of a Site. You may be provided with instructions and prompts within the experiences as you navigate the Services.
Please Contact us if you require more information on automated-decision making.
We maintain technical, physical, and administrative security measures designed to provide reasonable protection for your Personal Data against loss, misuse, unauthorised access, disclosure, and alteration. The security measures include firewalls, data encryption, physical access controls to our data centres, and information access authorisation controls. While we are dedicated to securing our systems and Services, you are responsible for securing and maintaining the privacy of your password(s) and account/profile registration information and verifying that the Personal Data we maintain about you is accurate and current. We are not responsible for protecting any Personal Data that we share with a third-party based on an account connection that you have authorised.
The Sites and Services are not directed to children under the age of 16. We do not knowingly collect information, including Personal Data, from children or other individuals who are not legally able to use our Sites and Services. If we obtain actual knowledge that we have collected Personal Data from a child under the age of 16, we will promptly delete it, unless we are legally obligated to retain such data. Contact us if you believe that we have mistakenly or unintentionally collected information from a child under the age of 16.
Changes to this Privacy Statement.
We may revise this Privacy Statement from time to time to reflect changes to our business, the Sites or Services, or applicable laws. The revised Privacy Statement will be effective as of the published effective date. If you are a new User or are receiving this Privacy Statement for the first time and there is an upcoming change described on the Policy Updates or Privacy Statement page at the time you receive this Privacy Statement, such upcoming change will apply to you on the indicated effective date.
If the revised version includes a substantial change, we will provide you with 30 days prior notice by posting notice of the change on the “Policy Update” page of our website. We also may notify Users of the change using email or other means.
You may contact us if you have general questions or concerns about this Privacy Statement and supplemental notices or the way in which we handle your Personal Data.
We want to make sure your questions go to the right place:
If you are not satisfied by the way in which we address your concerns, you have the right to lodge a complaint with the Supervisory Authority for data protection in your country.
You may contact PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal L-2449, Luxembourg’s Data Protection Officer which acts as a representative of PayPal.
The information provided in this section may be specific to customers depending on your region or how you use the Services. This information is provided to PayPal from third parties whom you may interact when using the Services.
Google ReCaptcha
PayPal uses ReCaptcha on the Sites and Services. Your use of ReCaptcha is subject to the Google Privacy Policy and Terms of Use.
ReCaptcha is only used to fight spam and abuse.