We take data security and protecting our users very seriously. As a general rule we try to minimise the information that we have to record but for regulatory (and other) reasons some data is recorded. 

For example if you want to send payment requests to others, and therefore connect your bank account with BOPP, we securely store your name, account number and sort code in an encrypted form. 

If you only pay using BOPP and never send a payments, you don’t need to connect your bank account. Thus we will know very little about you. We will know the bank used (but not the account), we will have a Consent ID that is given to us by the bank, but other than that only publicly accessible information when you browse the internet (e.g. IP address).