Privacy policy

Last updated: 25 September 2026

This policy explains how we collect and use personal information through the MemberPay website (the “site”), including when you register your interest in MemberPay. It covers this site only.

Who we are

The site is run jointly by two sister companies in the OnePay Group:

• OPG Services Limited, which provides MemberPay, registered in England and Wales with company number 16313634; and
• Modus UK Limited, trading as OnePay, registered in England and Wales with company number 05934955.

Both companies have their registered office at Mayfield House, Lower Railway Road, Ilkley, LS29 8FL. In this policy, “we”, “us” and “our” means both companies.

We are joint controllers of the personal information collected through this site. This means we decide together how and why it is used. We have agreed that OPG Services Limited is your main point of contact and will deal with any request about your information, but you can contact either company.

We are registered with the Information Commissioner’s Office (ICO): OPG Services Limited under number ZC110066 and Modus UK Limited under number Z995329X.

MemberPay accounts are provided by Griffin, which gives account holders its own privacy notice. This policy does not cover the MemberPay service itself or those accounts.

What information we collect

When you register your interest, we collect:

• your first and last name
• the name of your credit union
• your job title
• your work email address
• your confirmation that you have read this policy, and the date and time you submitted the form.

If you reached the site through a link in one of our campaigns, the form may also record the campaign details in that link (for example, where the link was shared and the campaign name). This helps us see which campaigns are working.

When you contact us, we keep a record of your messages and our replies.

When you visit the site, our hosting provider and font provider automatically receive technical information needed to show you the site, such as your IP address, browser type and the pages you request. We do not use this to identify you.

The site is for people who work for or with credit unions. We do not ask for any sensitive information, and please do not include any in the form.

How we use your information

We use your information to:

• respond to your registration and keep you updated about MemberPay, including product updates, demonstrations and help getting your credit union set up
• understand which credit unions are interested, so we can plan onboarding
• measure which of our campaigns bring people to the site, using combined figures
• run the site and keep it secure
• keep appropriate business records and meet our legal obligations.

We will only contact you about MemberPay and related OnePay Group services for credit unions. Every email we send will include an easy way to unsubscribe. We do not sell your information, and we do not make decisions about you using only automated means.

Our lawful basis

UK data protection law says we must have a lawful basis for using your information. We rely on legitimate interests: our interest in responding to people who have asked to hear about MemberPay, in developing relationships with credit unions, and in running a secure website.

We have considered whether this is fair to you. You gave us your work details so that we could contact you about MemberPay, we only use them for that purpose, and you can tell us to stop at any time. You can ask us for more information about this assessment.

Where we must keep information to meet a legal or regulatory requirement, we rely on legal obligation.

When you submit the form, we ask you to confirm that you have read this policy. That confirmation is not the basis we rely on to use your information.

Who we share it with

OPG Services Limited and Modus UK Limited share the information with each other as joint controllers. We also use service providers who handle information for us, only on our instructions and under contracts that protect it:

• Jotform Inc., which provides the registration form, stores form submissions and sends us notification emails. Submissions are stored in the EU
• Vercel Inc., which hosts the site
• Google, which provides the fonts used on the site. Your browser connects to Google’s servers to load them, so Google receives your IP address
• Microsoft (Microsoft 365), which provides our email and business systems, and Salesforce, which we use to manage our contacts with credit unions.

We may also share information with our professional advisers, with regulators, law enforcement or courts where the law requires it, and with any company that takes over all or part of our business, including as part of a reorganisation of the OnePay Group.

We do not share your information with anyone for their own marketing.

International transfers

Jotform, Vercel, Google, Microsoft and Salesforce are based in the United States. Although Jotform stores form submissions in the EU, these providers may process your information in the United States. Where this happens, it is protected by the UK Extension to the EU–US Data Privacy Framework (the “UK–US data bridge”), under which these providers are certified, or by other safeguards approved under UK law, such as the ICO’s International Data Transfer Agreement. Contact us if you would like more information.

How long we keep it

• Registration details and emails: 24 months from our last contact with you, and then we delete them. If your credit union becomes a MemberPay customer, we will keep your details for as long as we need them to provide the service, as explained in our customer terms.
• If you ask us to stop contacting you: we keep your name and email address on a do-not-contact list so that we do not contact you again by mistake.
• Technical information: our hosting and font providers keep this for short periods under their own retention policies.

Your rights

Under UK data protection law you have the right to:

• ask for a copy of the information we hold about you
• ask us to correct information that is wrong or incomplete
• ask us to delete your information
• ask us to limit how we use your information
• object to us using your information, including an absolute right to stop us contacting you about MemberPay
• in some situations, ask us to send your information to another organisation.

To use any of these rights, contact us using the details below. You can also unsubscribe using the link in any email we send. We will normally respond within one month, and we do not usually charge. We may need to check your identity before we act on a request.

Cookies and analytics

This site does not use analytics, advertising or tracking cookies.

The registration form is provided by Jotform and loads only when you select “Register interest”. Jotform may set cookies that the form needs to work and to protect it from spam. See Jotform’s privacy policy for details.

If we add analytics or other non-essential cookies in future, we will update this policy and ask for your permission before setting them.

Other websites

This site links to the OnePay Group website at onepay.co.uk, which has its own privacy policy. We are not responsible for how other websites handle your information.

Changes to this policy

We may update this policy from time to time. We will post any changes on this page and update the date at the top.

Contact us and complaints

For any question about this policy or your information, or to use your rights, contact:

• Email: team@memberpay.co.uk
• Post: Data Protection, OPG Services Limited, Mayfield House, Lower Railway Road, Ilkley, LS29 8FL.

If you are unhappy with how we have handled your information, please tell us first. We will acknowledge your complaint within 30 days and try to resolve it.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113.