PRIVACY POLICY

Privacy Policy

Last updated: 12 October 2026

1. Introduction

Gropay B.V. (“Gropay”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store and share personal data when you visit our website, contact us, request a consultation or otherwise interact with our business.

We process personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR).

2. Who We Are

Gropay B.V. is a company based in the Netherlands providing payment consultancy and related business services.

For questions about this Privacy Policy or how we handle personal data, please contact us at:

Email: privacy@gropay.com

Gropay B.V. is the data controller for the personal data described in this policy, unless we inform you otherwise.

3. Personal Data We Collect

The personal data we collect depends on how you interact with our website and services. It may include the following categories.

Information you provide to us

When you complete a contact form, request a consultation or communicate with us, we may collect your name, email address, telephone number, company name, job title and the information you include in your message or enquiry.

Live chat communications

If you contact us through the live chat facility on our website, we may collect the information you provide during the conversation, along with technical information associated with the chat service.

Technical and website usage information

When you visit our website, certain technical information may be collected, such as your IP address, browser type, device information, pages visited and information about how you interact with the website. The information collected depends on the technologies and services used.

Cookies and similar technologies

Our website may use cookies and similar technologies to support its operation, remember preferences, manage consent and, where applicable, analyse website usage. Further information is provided in Section 6.

4. How We Use Personal Data

We may use personal data for the following purposes:

To respond to enquiries and requests for information.
To arrange consultations and communicate with prospective or existing business contacts.
To provide our services and manage business relationships.
To operate, maintain and improve our website.
To monitor website performance and protect the security of our systems.
To prevent misuse, fraud or other unlawful activity.
To comply with applicable legal and regulatory obligations.
To establish, exercise or defend legal claims where necessary.

We only use personal data for purposes that are compatible with applicable data protection laws.

5. Legal Bases for Processing

Under the GDPR, we must have a lawful basis for processing personal data. Depending on the circumstances, we may rely on one or more of the following:

Legitimate interests: Where processing is necessary for our legitimate business interests, such as responding to business enquiries, maintaining our website, securing our systems and managing business relationships, provided those interests are not overridden by your rights and interests.

Pre-contractual steps or contractual necessity: Where processing is necessary to take steps at your request before entering into a contract or to perform a contract with you.

Legal obligations: Where processing is necessary to comply with applicable laws or regulatory requirements.

Consent: Where you have given consent, including where consent is required for certain cookies or similar technologies. You may withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

The applicable legal basis depends on the specific processing activity.

6. Cookies and Similar Technologies

Our website may use cookies and similar technologies to ensure that the website functions properly, remember preferences, manage cookie consent and support other website features.

Where applicable, these technologies may be provided by third-party services used on our website, including live chat or website optimisation services.

Strictly necessary cookies and similar technologies may be used where permitted by law. Where consent is legally required for non-essential cookies or similar technologies, we will seek consent before using them.

You can manage your preferences through the cookie consent options available on our website. You can also manage cookies through your browser settings, although disabling certain cookies may affect website functionality.

7. Sharing Personal Data

We do not sell your personal data.

We may share personal data with third parties where necessary for the purposes described in this policy. These may include:

Website hosting and maintenance providers.
Email and business communication providers.
Contact form and live chat service providers.
Website security, optimisation and technical support providers.
Professional advisers, such as lawyers or accountants, where necessary.
Public authorities or other parties where disclosure is required by law or necessary to protect our legal rights.

Where service providers process personal data on our behalf, we take appropriate steps to ensure that the processing is subject to suitable data protection obligations.

8. International Data Transfers

Some of the third-party service providers we use may process personal data outside the European Economic Area (EEA).

Where personal data is transferred outside the EEA, we will ensure that the transfer complies with applicable data protection requirements. Depending on the circumstances, this may involve relying on an adequacy decision, appropriate contractual safeguards or another lawful transfer mechanism.

Further information about applicable safeguards may be requested by contacting us at privacy@gropay.com.

9. How Long We Retain Personal Data

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including responding to enquiries, managing business relationships, meeting legal obligations and resolving disputes.

Retention periods depend on the nature of the information, the purpose of processing and any applicable legal requirements.

For example, we may retain correspondence relating to a business enquiry for an appropriate period after the enquiry has been resolved. Information that must be retained for legal or regulatory purposes may be kept for longer where required.

When personal data is no longer needed, we will take reasonable steps to delete it or otherwise dispose of it securely.

10. Data Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

However, no method of transmitting or storing information electronically can be guaranteed to be completely secure. While we take reasonable steps to protect personal data, we cannot guarantee absolute security.

11. Your Data Protection Rights

Under the GDPR, you may have the following rights in relation to your personal data, subject to applicable legal conditions and exceptions:

Right of access: To request a copy of the personal data we hold about you.
Right to rectification: To request correction of inaccurate or incomplete personal data.
Right to erasure: To request deletion of your personal data in certain circumstances.
Right to restriction: To request that we restrict the processing of your personal data in certain circumstances.
Right to data portability: To receive certain personal data in a structured, commonly used and machine-readable format, or request its transfer to another controller where applicable.
Right to object: To object to processing based on our legitimate interests in certain circumstances.
Right to withdraw consent: Where processing is based on consent, to withdraw that consent at any time.
Rights relating to automated decision-making: To protections against certain decisions based solely on automated processing, where applicable.

To exercise your rights, please contact us at privacy@gropay.com.

We may need to verify your identity before responding. We will respond within the time limits required by applicable data protection law.

12. Complaints

If you have concerns about how we process your personal data, we encourage you to contact us first so that we can try to address them.

You also have the right to lodge a complaint with the competent data protection supervisory authority. In the Netherlands, this is the Autoriteit Persoonsgegevens (Dutch Data Protection Authority).

You can find information about submitting a complaint on its website: https://autoriteitpersoonsgegevens.nl/

13. Information You Provide About Other People

If you provide us with personal data relating to another individual, you should ensure that you are entitled to share that information with us and that the individual has been informed where required by applicable law.

14. Automated Decision-Making

We do not intend to use personal data collected through our website to make decisions based solely on automated processing, including profiling, that produce legal effects or similarly significant effects on individuals.

If our processing practices change in this respect, we will provide any information required by applicable data protection law.

15. Third-Party Websites and Services

Our website may contain links to third-party websites or use third-party services. These websites and services may have their own privacy policies and data handling practices.

We are not responsible for the privacy practices of independent third parties. We encourage you to review their privacy policies when interacting with their websites or services.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, website, services or applicable legal requirements.

The latest version will be published on this page, together with the date on which it was last updated.

17. Contact Us

If you have questions about this Privacy Policy, our data handling practices or your data protection rights, please contact:

Gropay B.V.

Email: privacy@gropay.com

WHY CHOOSE GROPAY

Gropay differentiates itself through a creative application of our payments knowledge, experience and network. It is the combination of these factors that helps us to deliver consistent value to our clients.

CREATIVE APPLICATION

Our focus is on finding simple solutions to complex challenges. In our experience the key to doing so is creativity in problem resolution. We start with the end in mind by carefully agreeing first the measurable outcomes or benefits that need to be achieved. We take inventory of the existing assets and capabilities and plan a creative path to the benefits.

EXPERIENCE

Gropay has been successfully delivering measurable benefits to its clients since 2008. We have delivered numerous successful projects through these years. This experience is invaluable to potential clients. It helps us to understand the client’s challenges quickly and to apply best practice methodologies and processes to quick project success.

KNOWLEDGE

Gropay is a team of experts. We pride ourselves in our hands on knowledge of payments and financial technology. Our work directly with merchants gives us invaluable knowledge on the payment related challenges and goals of main merchants verticals. Our work directly with payment providers and schemes gives us knowledge on the operations and demands of payment providers.

NETWORK

Simple solutions to complex problems need a network of partnerships for success. Gropay has successfully built these partnerships since 2008 and continues to apply them to projects where necessary.