Robinhood Europe, U.A.B. Privacy Policy (EU)
Effective: October 27, 2025
This Privacy Notice sets out how Robinhood collects, transfers, stores, or otherwise uses information relating to you (your “personal data”) in relation to our services and interactions you have with us (including when you are a prospective customer, customer or former customer).
If your country of residence is within the European Economic Area (“EEA”), your data controller (i.e. the company that determines why and how your personal data is processed) is Robinhood Europe, UAB.
If your country of residence is the United Kingdom, your primary data controller is Robinhood U.K. Ltd. Robinhood Securities, LLC also acts as a data controller for the processing of your personal data for brokerage services.
If you are a customer residing in the United States (US), refer instead to our Robinhood Financial Entities US Online Privacy Statement. This Privacy Statement also describes your data protection rights, and how you can exercise them.
We may provide you with additional information when we collect personal data where we feel it would be helpful to provide relevant and timely information.
You may contact us at any time using the information set out in Section 9.
We process personal data about you when you use our website, apps, and when you interact with us in relation to our services, This includes:
- Information you provide to us and information relating to your communication, such as information you submit via forms on our websites and apps and in surveys and focus groups and information you provide us if you contact us and information relating to our handling of your communication.
Information you provide to us and information relating to your communication, such as information you submit via forms on our websites and apps and in surveys and focus groups and information you provide us if you contact us and information relating to our handling of your communication.
- Usage and tracking information. We automatically collect certain types of usage and device information when you use our services or interact with our emails. This includes device identifiers (like IP address or mobile device identifiers), browser type, Internet service provider, platform type, device type, operating system, pages or features you use, time and date of access, unique device or account ID, usage information and other similar information. We collect this information using cookies and other technologies as described in our Cookie Policy.
Usage and tracking information. We automatically collect certain types of usage and device information when you use our services or interact with our emails. This includes device identifiers (like IP address or mobile device identifiers), browser type, Internet service provider, platform type, device type, operating system, pages or features you use, time and date of access, unique device or account ID, usage information and other similar information. We collect this information using cookies and other technologies as described in our Cookie Policy.
Information about other sources of personal data is set out in the next Section.
We process the following categories of personal data in connection with our Customers and our services:
- Identity and contact data, such as your name, date of birth, National Insurance number, email address, mailing address, telephone number, marital status, other data from government-issued identification documents, and facial images for verification and authentication purposes.
Identity and contact data, such as your name, date of birth, National Insurance number, email address, mailing address, telephone number, marital status, other data from government-issued identification documents, and facial images for verification and authentication purposes.
- Financial data, such as your bank account and payment card details, and information about your income, account balances, securities holdings, financial transaction history, credit history, and tax information.
Financial data, such as your bank account and payment card details, and information about your income, account balances, securities holdings, financial transaction history, credit history, and tax information.
- Profile data, such as your username and password, your knowledge assessment results, and your interests and preferences.
Profile data, such as your username and password, your knowledge assessment results, and your interests and preferences.
- Marketing and advertising data, such as participation in focus groups, survey responses, contests/sweepstakes, your marketing choices, information regarding your preferences or attributes based on your use of our services, customer profiles and segments based on characteristics and combinations of characteristics, such as financial transaction history and holdings, and your interactions with advertising and marketing communications.
Marketing and advertising data, such as participation in focus groups, survey responses, contests/sweepstakes, your marketing choices, information regarding your preferences or attributes based on your use of our services, customer profiles and segments based on characteristics and combinations of characteristics, such as financial transaction history and holdings, and your interactions with advertising and marketing communications.
- Customer support and communication data, such as your feedback and interactions with our customer support teams and other communications you have with us.
Customer support and communication data, such as your feedback and interactions with our customer support teams and other communications you have with us.
- Service and transactional information. When you receive, submit, or complete a transaction via the services, we collect information about the transaction, such as transaction amount, type and nature of the transaction, and time and date of the transaction.
Service and transactional information. When you receive, submit, or complete a transaction via the services, we collect information about the transaction, such as transaction amount, type and nature of the transaction, and time and date of the transaction.
We collect information you directly provide when you use our services. For example, data is collected through application and sign ups, obtained from your use of our service, from forms completed by you, and from correspondence with you. Information about other sources of personal data is set out in the next Section.
Where we collect personal data to administer our contract with you or to comply with our legal obligations, this is mandatory and we will not be able to provide our services without this information. In other cases, provision of the requested personal data is optional, but this may affect your ability to procure or access certain functionalities or services where the information is needed for those purposes.
Where you are a website or app user, we collect information from advertising partners in connection with our ad campaigns that have surfaced on other platforms, such as the ads you clicked on and other interactions with our ads.
When you participate in research, we obtain information that you provide our service providers and partners that are assisting us with market research from those service providers and partners as well as their analysis in relation to research contributions. When you participate in offers, competitions, contests, sweepstakes or similar that we offer, we collect participation data from service providers and partners that we work with in relation to the offer or competition.
When you communicate or interact with us, our pages or brand on social media websites, we collect information about your communication or interaction from social media companies and service providers we engage in order to provide us analytics in relation to our social media pages and presence.
In relation to our Customers and services, we also obtain information about you from third party sources as described below.
- Vendors and business partners. We collect contact and account information from technical, currency, payment and delivery service providers, fraud risk ratings, sanctions status, and related information from anti-fraud, anti-money laundering and sanctions reporting service providers, results of verification checks from providers of identity verification and related services, and attributes and interactions with different digital properties and advertisements from analytics and advertising service providers. We also use Google autofill features to help complete addresses during onboarding.
Vendors and business partners. We collect contact and account information from technical, currency, payment and delivery service providers, fraud risk ratings, sanctions status, and related information from anti-fraud, anti-money laundering and sanctions reporting service providers, results of verification checks from providers of identity verification and related services, and attributes and interactions with different digital properties and advertisements from analytics and advertising service providers. We also use Google autofill features to help complete addresses during onboarding.
- Financial account linking. We support account linking and aggregation services through a third-party provider. We may receive details about your relationship and accounts with your linked financial institution.
Financial account linking. We support account linking and aggregation services through a third-party provider. We may receive details about your relationship and accounts with your linked financial institution.
- Connected services. If you link, connect, or log in to your Robinhood account with a third-party service, the third-party service may send us information, such as your profile information from that service. This information varies and is controlled by that service or as authorised by you via your privacy settings at that service. We may also collect location data through these services if this feature is enabled.
Connected services. If you link, connect, or log in to your Robinhood account with a third-party service, the third-party service may send us information, such as your profile information from that service. This information varies and is controlled by that service or as authorised by you via your privacy settings at that service. We may also collect location data through these services if this feature is enabled.
- Publicly available data, such as contact information, social media content made public, sanctions lists and similar information.
Publicly available data, such as contact information, social media content made public, sanctions lists and similar information.
We have to have a legal basis to process your personal data. We explain these legal bases below alongside the purposes for which we process your data.
- Consent: In certain limited cases, we ask for your consent to process your personal data.
Consent: In certain limited cases, we ask for your consent to process your personal data.
- Contractual performance: We have obligations under our contract with you, depending on the nature of the contract. To fulfil these obligations we have to process your personal data.
Contractual performance: We have obligations under our contract with you, depending on the nature of the contract. To fulfil these obligations we have to process your personal data.
- Legitimate interests: We can process your personal data when this is necessary for us to achieve a business purpose, or where this is necessary for someone else to achieve their purpose. We explain below what interests we, or others, are trying to achieve when we process your data. Where we process personal data on the basis of a legitimate interest, then—as required by data protection law—we have carried out a balancing test to determine whether our interests, to consider what the impact of the processing will be on individuals and to determine whether individuals’ interests outweigh our interests in the processing taking place. You can obtain more information about this balancing test by using the contact details at the end of the notice.
Legitimate interests: We can process your personal data when this is necessary for us to achieve a business purpose, or where this is necessary for someone else to achieve their purpose. We explain below what interests we, or others, are trying to achieve when we process your data. Where we process personal data on the basis of a legitimate interest, then—as required by data protection law—we have carried out a balancing test to determine whether our interests, to consider what the impact of the processing will be on individuals and to determine whether individuals’ interests outweigh our interests in the processing taking place. You can obtain more information about this balancing test by using the contact details at the end of the notice.
- Legal obligation: As an organisation we have obligations to comply with legal, regulatory, and other requirements under EU/EU Member State or UK laws (as applicable). In certain cases, we will have to use your personal data to meet these obligations.
Legal obligation: As an organisation we have obligations to comply with legal, regulatory, and other requirements under EU/EU Member State or UK laws (as applicable). In certain cases, we will have to use your personal data to meet these obligations.
Our purposes for processing your personal data, and legal bases, are explained in the following table.
Artificial Intelligence
We may develop AI or leverage AI, including machine learning, to improve and optimise our processes, products, and services for the purposes outlined in the previous table. We provide notice and obtain consent where required under applicable data protection law.
We are committed to maintaining your trust, and we want you to understand when and with whom we share information about you. We share your personal data to the recipients and for the reasons set out below.
We retain most personal data for the duration of your relationship with us and a period of up to seven years after that. However, different personal data will be subject to different retention periods depending on the circumstances or applicable law.
You have the right to ask us for a copy of your personal data; to correct, delete or restrict processing of your personal data; and to port your data, which involves us giving you the personal data you provided or transferring the personal data you gave us to another party in a structured, machine-readable format. In addition, you can object to the processing of your personal data in some circumstances (in particular, where we are using the data for direct marketing purposes). Where we have asked for your consent, you may withdraw consent at any time. If you ask to withdraw your consent to Robinhood processing your data, this will not affect any processing which has already taken place at that time.
These rights may be limited, for example if fulfilling your request would reveal personal data about another person, or if you ask us to delete information which we are required by law or have compelling legitimate interests to keep. If you have unresolved concerns, you have the right to complain to your local data protection authority in the EEA or in the UK.
You can exercise your rights by contacting us using the information in Section 9. You can also use our self-service tools by logging into the Robinhood app and navigating to Security and Privacy. If you’d like to fully close your Robinhood account, navigate to Deactivate Your Account in Settings.
You can opt-out of direct marketing at any time by contacting us using the information in Section 9 or by using the “unsubscribe” option in any direct marketing communication.
Note that much of your personal data is available for you to view, and in some cases manage, directly within the Robinhood app. This includes information such as your transaction history, investor profile, contact details, tax documents and account statements, as well as your user preferences and settings.
As a US headquartered company, most of our IT systems are hosted in the United States (including on third party systems). We also share personal data with our group companies in the US. As a result, we will transfer your personal data to this jurisdiction, including to our staff members who are located there. We transfer your personal data on the basis of the EU and UK standard contractual clauses, EU or UK adequacy decisions, or as otherwise permitted by law.
To the extent required or permitted by data protection law, we may rely on other applicable legal mechanisms, such as an appropriate Data Privacy Framework Certification, a vendor’s binding corporate rules and/or a derogation under EU/UK data protection laws. More information can be obtained by using the contact details below.
When we update this Privacy Notice, we will revise the "Last Updated" entry above and post the new Privacy Notice on our website and app. We will notify you of material or substantial changes.
If you have any questions about this Privacy Notice, wish to exercise your rights or wish to contact us for any other reason in relation to our personal data processing, contact Robinhood at:
Robinhood has appointed Bird & Bird DPO Services SRL as a Data Protection Officer (“DPO”). If you would like to contact the DPO, you can do so by using the following contact details:
- Email: dataprotection@robinhood.com
- Address: Bird & Bird DPO Services SRL, Avenue Louise 235 b 1, 1050 Brussels, Belgium
Was this article helpful?
Reference No. 4931698
