Cookie Policy of Pay.com Group of companies
This document informs Users about the technologies that help this Website to achieve the purposes described below. Such technologies allow the Owner to access and store information (for example by using a Cookie) or use resources (for example by running a script) on a User’s device as they interact with this Website.
For simplicity, all such technologies are defined as "Trackers" within this document – unless there is a reason to differentiate.
For example, while Cookies can be used on both web and mobile browsers, it would be inaccurate to talk about Cookies in the context of mobile apps as they are a browser-based Tracker. For this reason, within this document, the term Cookies is only used where it is specifically meant to indicate that particular type of Tracker.
Some of the purposes for which Trackers are used may also require the User's consent. Whenever consent is given, it can be freely withdrawn at any time following the instructions provided in this document.
This Website uses Trackers managed directly by the Owner (so-called “first-party” Trackers) and Trackers that enable services provided by a third-party (so-called “third-party” Trackers). Unless otherwise specified within this document, third-party providers may access the Trackers managed by them.
The validity and expiration periods of Cookies and other similar Trackers may vary depending on the lifetime set by the Owner or the relevant provider. Some of them expire upon termination of the User’s browsing session.
In addition to what’s specified in the descriptions within each of the categories below, Users may find more precise and updated information regarding lifetime specification as well as any other relevant information — such as the presence of other Trackers — in the linked privacy policies of the respective third-party providers or by contacting the Owner.
How this Website uses Trackers
Necessary
This Website uses so-called “technical” Cookies and other similar Trackers to carry out activities that are strictly necessary for the operation or delivery of the Service.
Trackers managed by third parties
-
Webflow (Webflow, Inc.)
Webflow is a platform provided by Webflow, Inc. that allows the Owner to build, run and host this Website. Webflow is highly customizable and can host websites from simple blogs to complex e-commerce platforms.
Personal Data processed: Tracker, Usage Data and various types of Data as specified in the privacy policy of the service.
Place of processing: United States – Privacy Policy – Opt out.
-
Google Tag Manager (Google Ireland Limited)
Google Tag Manager is a tag management service provided by Google Ireland Limited.
Personal Data processed: Tracker and Usage Data.
Place of processing: Ireland – Privacy Policy.
-
WorldPay (WorldPay Limited)
WorldPay is a payment service provided by WorldPay Limited.
Personal Data processed: billing address, device information, email address, first name, last name, payment info, phone number, physical address, purchase history and Trackers.
Place of processing: United Kingdom – Privacy Policy.
-
Apple Pay (Apple Inc.)
Apple Pay is a payment service provided by Apple Inc., which allows Users to make payments using their mobile phones.
Personal Data processed: billing address, email address, first name, last name, payment info, phone number, purchase history, shipping address, Trackers, Usage Data and various types of Data as specified in the privacy policy of the service.
Place of processing: United States – Privacy Policy.
-
Google Pay (Google Ireland Limited)
Google Pay is a payment service provided by Google Ireland Limited, which allows users to make online payments using their Google credentials.
Personal Data processed: billing address, email address, first name, last name, payment info, phone number, purchase history, shipping address, Trackers, Usage Data and various types of Data as specified in the privacy policy of the service.
Place of processing: Ireland – Privacy Policy.
-
PayPal (PayPal Inc.)
PayPal is a payment service provided by PayPal Inc., which allows Users to make online payments.
Personal Data processed: billing address, device information, email address, first name, last name, payment info, phone number, purchase history, Trackers, Usage Data, username and various types of Data as specified in the privacy policy of the service.
Place of processing: See the PayPal privacy policy – Privacy Policy.
Trackers duration:
- LANG: 8 hours
- __paypal_storage__: indefinite
- akavpau_ppsd: duration of the session
- enforce_policy: duration of the session
- l7_az: duration of the session
- nsid: duration of the session
- ts: duration of the session
- tsrce: duration of the session
- x-cdn: duration of the session
- x-pp-s: duration of the session
-
PayPal Carrier Payments (PayPal Inc.)
PayPal Carrier Payments is a payment service provided by PayPal, Inc., which allows Users to make online payments using their mobile phone operator.
Personal Data processed: billing address, device information, email address, first name, last name, payment info, phone number, purchase history, Trackers, Usage Data and various types of Data as specified in the privacy policy of the service.
Place of processing: See the PayPal privacy policy – Privacy Policy.
Trackers duration:
- LANG: 8 hours
- akavpau_ppsd: duration of the session
- ts: duration of the session
-
PayPal Payments Hub (PayPal Inc.)
PayPal Payments Hub is a payment service provided by PayPal Inc.
Personal Data processed: billing address, device information, email address, first name, last name, password, payment info, phone number, purchase history, Trackers, Usage Data, username and various types of Data as specified in the privacy policy of the service.
Place of processing: See the PayPal privacy policy – Privacy Policy.
Trackers duration:
- LANG: 8 hours
- akavpau_ppsd: duration of the session
- ts: duration of the session
-
Cloudflare (Cloudflare Inc.)
Cloudflare is a traffic optimization and distribution service provided by Cloudflare Inc.
The way Cloudflare is integrated means that it filters all the traffic through this Website, i.e., communication between this Website and the User's browser, while also allowing analytical data from this Website to be collected.
Personal Data processed: Trackers and various types of Data as specified in the privacy policy of the service.
Place of processing: United States – Privacy Policy.
Trackers duration:
- _cfuvid: indefinite
- cf_clearance: 30 minutes
Functionality
This Website uses Trackers to enable basic interactions and functionalities, allowing Users to access selected features of the Service and facilitating the User's communication with the Owner.
Trackers managed by third parties
-
Zendesk Chat (Zendesk, Inc.)
Zendesk Chat is a service for interacting with the Zendesk live chat platform provided by Zendesk, Inc.
Personal Data processed: company name, country, Data communicated while using the service, email address, first name, last name, phone number, physical address, Trackers and Usage Data.
Place of processing: United States – Privacy Policy.
Trackers duration:
- __zlcmid: 1 year
- __zlcstore: indefinite
-
Zendesk Widget (Zendesk, Inc.)
The Zendesk Widget is a service for interacting with the Zendesk support and feedback platform provided by Zendesk Inc.
Personal Data processed: company name, country, date of birth, email address, first name, gender, last name, phone number, physical address, Trackers, Usage Data and username.
Place of processing: United States – Privacy Policy.
Trackers duration:
- *.conversationStartedAt: duration of the session
- ZD-bannerDismissed: duration of the session
- ZD-campaigns: duration of the session
- ZD-store: indefinite
- ZD-suid: 20 minutes
- lastReadMessageId_*: duration of the session
Experience
This Website uses Trackers to improve the quality of the user experience and enable interactions with external content, networks and platforms.
Trackers managed by third parties
-
Mailchimp widget (The Rocket Science Group LLC)
The Mailchimp widget is a service for interacting with the Mailchimp email address management and message sending service provided by The Rocket Science Group LLC.
Personal Data processed: email address, first name, last name, phone number, Tracker and Usage Data.
Place of processing: United States – Privacy Policy.
Trackers duration:
- cookies.js: duration of the session
-
PayPal button and widgets (PayPal Inc.)
The PayPal button and widgets are services allowing interaction with the PayPal platform provided by PayPal Inc.
Personal Data processed: Trackers and Usage Data.
Place of processing: See the PayPal privacy policy – Privacy Policy.
Trackers duration:
- LANG: 8 hours
- akavpau_ppsd: duration of the session
- ts: duration of the session
Measurement
This Website uses Trackers to measure traffic and analyze User behavior to improve the Service.
Trackers managed by third parties
-
Hotjar Heat Maps & Recordings (Hotjar Ltd.)
Hotjar is a session recording and heat mapping service provided by Hotjar Ltd.
Hotjar honors generic „Do Not Track” headers. This means the browser can tell its script not to collect any of the User's data. This is a setting that is available in all major browsers. Find Hotjar’s opt-out information here.
Personal Data processed: Tracker, Usage Data and various types of Data as specified in the privacy policy of the service.
Place of processing: Malta – Privacy Policy – Opt Out.
Trackers duration:
- _hjAbsoluteSessionInProgress: 30 minutes
- _hjCachedUserAttributes: duration of the session
- _hjClosedSurveyInvites: 1 year
- _hjDonePolls: 1 year
- _hjFirstSeen: duration of the session
- _hjIncludedInSessionSample: 30 minutes
- _hjLocalStorageTest: duration of the session
- _hjLocalStorageTest: duration of the session
- _hjMinimizedPolls: 1 year
- _hjSession*: 30 minutes
- _hjSessionRejected: duration of the session
- _hjSessionResumed: duration of the session
- _hjSessionStorageTest: indefinite
- _hjSessionTooLarge: 1 hour
- _hjSessionUser*: 1 year
- _hjSessionUser_*: 2 years
- _hjShownFeedbackMessage: 1 year
- _hjTLDTest: duration of the session
- _hjUserAttributesHash: duration of the session
- _hjViewportId: duration of the session
- _hjid: 1 year
-
Google Analytics (Universal Analytics) (Google Ireland Limited)
Google Analytics (Universal Analytics) is a web analysis service provided by Google Ireland Limited (“Google”). Google utilizes the Data collected to track and examine the use of this Website, to prepare reports on its activities and share them with other Google services.
Google may use the Data collected to contextualize and personalize the ads of its own advertising network.
In order to understand Google's use of Data, consult Google's partner policy.
Personal Data processed: Tracker and Usage Data.
Place of processing: Ireland – Privacy Policy – Opt Out.
Trackers duration:
- AMP_TOKEN: 1 hour
- _ga: 2 years
- _gac*: 3 months
- _gat: 1 minute
- _gid: 1 day
-
Salesforce Analytics Cloud (Salesforce.com, inc.)
Salesforce Analytics Cloud is an analytics service provided by salesforce.com, inc.
Personal Data processed: Trackers and Usage Data.
Place of processing: United States – Privacy Policy.
-
HubSpot Analytics (HubSpot, Inc.)
HubSpot Analytics is an analytics service provided by HubSpot, Inc.
Personal Data processed: Trackers and Usage Data.
Place of processing: United States – Privacy Policy – Opt Out .
Trackers duration:
- __hmpl: duration of the session
- __hs_gpc_banner_dismiss: 6 months
- __hssc: 30 minutes
- __hssrc: duration of the session
- __hstc: 2 years
- hublytics_events_53: duration of the session
- hubspotutk: 2 years
- messagesUtk: 2 years
-
FullStory (FullStory, Inc.)
FullStory is an analytics and heat mapping service provided by FullStory, Inc.
FullStory maps how frequently Users interact with the different areas of this Website, allowing the Owner to draw conclusions about their interests and preferences. FullStory further allows for the recording of mapping sessions making them available for later visual playback.
Personal Data processed: Trackers and Usage Data.
Place of processing: United States – Privacy Policy – Opt out.
-
Google Analytics 4 (Google Ireland Limited)
Google Analytics 4 is a web analysis service provided by Google Ireland Limited (“Google”). Google utilizes the Data collected to track and examine the use of this Website, to prepare reports on its activities and share them with other Google services.
Google may use the Data collected to contextualize and personalize the ads of its own advertising network.
In Google Analytics 4, IP addresses are used at collection time and then discarded before Data is logged in any data center or server. Users can learn more by consulting Google’s official documentation.
In order to understand Google's use of Data, consult Google's partner policy.
Personal Data processed: browser information, city, device information, latitude (of city), longitude (of city), number of Users, session statistics, Trackers and Usage Data.
Place of processing: Ireland – Privacy Policy – Opt Out.
Trackers duration:
- _ga: 2 years
- _ga_*: 2 years
Marketing
This Website uses Trackers to deliver personalized ads or marketing content, and to measure their performance.
Some of the advertising services used by the Owner adhere to the IAB Transparency and Consent Framework, an initiative that facilitates responsible privacy practices across the digital advertising industry - providing Users with enhanced transparency and control over how their data are used for advertising tracking purposes. Users can customize their advertising preferences at any time by accessing the advertising preferences panel from within the cookie notice or via the relevant link on this Website.
This Website participates in the IAB Europe Transparency & Consent Framework and complies with its Specifications and Policies. This Website uses iubenda (identification number 123) as a Consent Management Platform.
Trackers managed by third parties
-
Hotjar Form Analysis & Conversion Funnels (Hotjar Ltd.)
Hotjar is an analytics service provided by Hotjar Ltd.
Hotjar honors generic Do Not Track headers. This means your browser can tell its script not to collect any of your data. This is a setting that is available in all major browsers. Find Hotjar’s opt-out information here.
Personal Data processed: Trackers and Usage Data.
Place of processing: Malta – Privacy Policy – Opt Out.
Trackers duration:
- _hjAbsoluteSessionInProgress: 30 minutes
- _hjCachedUserAttributes: duration of the session
- _hjClosedSurveyInvites: 1 year
- _hjDonePolls: 1 year
- _hjFirstSeen: duration of the session
- _hjIncludedInSessionSample: 30 minutes
- _hjLocalStorageTest: duration of the session
- _hjMinimizedPolls: 1 year
- _hjSession*: 30 minutes
- _hjSessionRejected: duration of the session
- _hjSessionResumed: duration of the session
- _hjSessionStorageTest: indefinite
- _hjSessionTooLarge: 1 hour
- _hjSessionUser*: 1 year
- _hjSessionUser_*: 2 years
- _hjShownFeedbackMessage: 1 year
- _hjTLDTest: duration of the session
- _hjUserAttributesHash: duration of the session
- _hjViewportId: duration of the session
- _hjid: 1 year
-
Meta ads conversion tracking (Meta pixel) (Meta Platforms, Inc.)
Meta ads conversion tracking (Meta pixel) is an analytics service provided by Meta Platforms, Inc. or by Meta Platforms Ireland Limited, depending on how the Owner manages the Data processing, that connects data from the Meta Audience Network with actions performed on this Website. The Meta pixel tracks conversions that can be attributed to ads on Facebook, Instagram and Meta Audience Network.
Personal Data processed: Trackers and Usage Data.
Place of processing: United States – Privacy Policy – Opt out; Ireland – Privacy Policy – Opt out.
Trackers duration:
- _fbc: 3 months
- _fbp: 3 months
- fr: 3 months
- lastExternalReferrer: duration of the session
- lastExternalReferrerTime: duration of the session
-
Google Ad Manager (Google Ireland Limited)
Google Ad Manager is an advertising service provided by Google Ireland Limited that allows the Owner to run advertising campaigns in conjunction with external advertising networks that the Owner, unless otherwise specified in this document, has no direct relationship with.
In order to opt out from being tracked by various advertising networks, Users may make use of Youronlinechoices. In order to understand Google's use of data, consult Google's partner policy.
This service uses the “DoubleClick” Cookie, which tracks use of this Website and User behavior concerning ads, products and services offered.
Users may decide to disable all the DoubleClick Cookies by going to: Google Ad Settings.
Personal Data processed: Tracker and Usage Data.
Place of processing: Ireland – Privacy Policy.
Trackers duration:
- Conversion: 3 months
- DSID: 14 days
- FCNEC: 1 year
- FLC: 10 seconds
- FPAU: 3 months
- FPGCLAW: 3 months
- FPGCLDC: 3 months
- FPGCLGB: 3 months
- GCL_AW_P: 3 months
- GED_PLAYLIST_ACTIVITY: duration of the session
- IDE: 2 years
- NID: 6 months
- RUL: 1 year
- __gads: 2 years
- __gpi: 2 years
- __gpi_optout: 2 years
- __gsas: 2 years
- _gac_: 3 months
- _gac_gb_: 3 months
- _gcl_ag: 3 months
- _gcl_au: 3 months
- _gcl_aw: 3 months
- _gcl_dc: 3 months
- _gcl_gb: 3 months
- _gcl_gf: 3 months
- _gcl_gs: 3 months
- _gcl_ha: 3 months
- ar_debug: 3 months
- id: 2 years
- receive-cookie-deprecation: 6 months
- test_cookie: 15 minutes
-
Salesforce (Salesforce.com, inc.)
Salesforce is an advertising service provided by Salesforce.com, inc.
Personal Data processed: Trackers and Usage Data.
Place of processing: United States – Privacy Policy – Opt Out.
-
Salesforce Audience Studio (Salesforce.com, inc.)
Salesforce Audience Studio is a remarketing and behavioral targeting service provided by Salesforce.com, inc.
Salesforce Audience Studio makes use of tracking technologies to monitor User behavior. This Data is then used to personalize the User's experience and to provide targeted advertising. Salesforce Audience Studio may also connect the collected Data with other networks, including advertising networks, and enable these parties to track and target the User. The Owner, unless otherwise specified in this document, has no direct relationship with the third parties that Salesforce Audience Studio may be including.
Personal Data processed: Trackers and Usage Data.
Place of processing: United States – Privacy Policy – Opt Out.
-
HubSpot CRM (HubSpot, Inc.)
HubSpot CRM is a User database management service provided by HubSpot, Inc.
Personal Data processed: company name, country, Current City, email address, first name, gender, last name, phone number, physical address, profession, purchase history, Trackers, Usage Data, username and various types of Data as specified in the privacy policy of the service.
Place of processing: United States – Privacy Policy.
Trackers duration:
- __hmpl: duration of the session
- __hs_gpc_banner_dismiss: 6 months
- __hssc: 30 minutes
- __hssrc: duration of the session
- __hstc: 2 months
- hublytics_events_53: duration of the session
- hubspotutk: 2 months
- messagesUtk: 2 months
-
HubSpot Lead Management (HubSpot, Inc.)
HubSpot Lead Management is a User database management service provided by HubSpot, Inc.
Personal Data processed: city, company name, country, date of birth, email address, first name, gender, last name, phone number, physical address, profession, purchase history, Trackers, Usage Data, username and various types of Data as specified in the privacy policy of the service.
Place of processing: United States – Privacy Policy.
Trackers duration:
- __hmpl: duration of the session
- __hs_gpc_banner_dismiss: 6 months
- __hssc: 30 minutes
- __hssrc: duration of the session
- __hstc: 2 months
- hublytics_events_53: duration of the session
- hubspotutk: 2 months
- messagesUtk: 2 months
How to manage preferences and provide or withdraw consent on this Website
Whenever the use of Trackers is based on consent, users can provide or withdraw such consent by setting or updating their preferences via the relevant privacy choices panel available on this Website.
With regard to any third-party Trackers, Users can manage their preferences via the related opt-out link (where provided), by using the means indicated in the third party's privacy policy, or by contacting the third party.
How to control or delete Cookies and similar technologies via your device settings
Users may use their own browser settings to:
- See what Cookies or other similar technologies have been set on the device;
- Block Cookies or similar technologies;
- Clear Cookies or similar technologies from the browser.
The browser settings, however, do not allow granular control of consent by category.
Users can, for example, find information about how to manage Cookies in the most commonly used browsers at the following addresses:
Users may also manage certain categories of Trackers used on mobile apps by opting out through relevant device settings such as the device advertising settings for mobile devices, or tracking settings in general (Users may open the device settings and look for the relevant setting).
How to opt out of interest-based advertising
Notwithstanding the above, Users may follow the instructions provided by YourOnlineChoices (EU and UK), the Network Advertising Initiative (US) and the Digital Advertising Alliance (US), DAAC (Canada), DDAI (Japan) or other similar services. Such initiatives allow Users to select their tracking preferences for most of the advertising tools. The Owner thus recommends that Users make use of these resources in addition to the information provided in this document.
The Digital Advertising Alliance offers an application called AppChoices that helps Users to control interest-based advertising on mobile apps.
Consequences of denying the use of Trackers
Users are free to decide whether or not to allow the use of Trackers. However, please note that Trackers help this Website to provide a better experience and advanced functionalities to Users (in line with the purposes outlined in this document). Therefore, if the User chooses to block the use of Trackers, the Owner may be unable to provide related features.
Owner and Data Controller
PAYCOMCY LIMITED, a limited liability company duly registered under the laws of the Republic of Cyprus, reg. no. HE 408974, with registered address at Andrea Kariolou 38, Agios Athanasios, 4102, Limassol, Cyprus
Pay.com US, Inc, a corporation registered under the laws of the State of Delaware with file number 6425328 and whose registered office is at 8 The Green, Ste R, Dover County of Kent, 19901
Pay Technologies (CY) Limited a limited liability company duly registered under the laws of the Republic of Cyprus, reg. no. HE 437492, with registered address at Andrea Kariolou 38, Agios Athanasios, 4102, Limassol, Cyprus
Data Protection Officer contact details: legal@pay.com
Owner contact email: info@pay.com
Since the use of third-party Trackers through this Website cannot be fully controlled by the Owner, any specific references to third-party Trackers are to be considered indicative. In order to obtain complete information, Users are kindly requested to consult the privacy policies of the respective third-party services listed in this document.
Given the objective complexity surrounding tracking technologies, Users are encouraged to contact the Owner should they wish to receive any further information on the use of such technologies by this Website.