1. Introduction
This Cookie Policy explains how CONFIG MONEY LIMITED ("GiroTap", "we", "us" or "our") uses cookies and similar technologies when you interact with any of the following surfaces:
- Our public marketing website at girotap.com.
- The GiroTap merchant dashboard at merchant.girotap.com, where businesses configure products, manage payouts and view transactions.
- The embedded GiroTap checkout widget — a JavaScript component that merchants integrate into their own websites and apps so customers can authorise a SEPA Direct Debit in a single tap.
It should be read alongside our Privacy Policy, which explains the broader ways in which we process personal data. If any term used here (for example "personal data") is not defined on this page, you will find its meaning in the Privacy Policy.
2. What cookies are
A cookie is a small text file that a website stores on your device when you visit it. Cookies let a site remember things about your visit — for example, that you are signed in, which language you prefer, or that you are midway through a payment. We also use similar technologies such as localStorage, sessionStorage and pixel-sized image beacons; for simplicity we refer to all of these collectively as "cookies" throughout this policy.
Cookies can be first-party (set by the domain you are visiting) or third-party (set by a different domain, usually an embedded service). They can also be session cookies (deleted when you close your browser) or persistent cookies (kept for a defined period).
3. How we use cookies
GiroTap uses cookies sparingly and only where they help us deliver a working, safe and pleasant service. We group the cookies we set into four categories:
Strictly necessary
These cookies are required for GiroTap to operate. Without them, the merchant dashboard cannot authenticate you and the checkout widget cannot safely carry a payment from start to finish. Because they are essential, they cannot be turned off through our interfaces — disabling them at the browser level will break signing in and taking payments.
Functional
These cookies remember choices you have made — such as your preferred language, the region of your dashboard, or whether you have dismissed a one-time onboarding tip — so that you do not have to re-configure them on every visit.
Analytics
We may use a small amount of privacy-respecting, aggregated analytics to understand how the marketing site and dashboard are used. Where we do this, we configure the analytics service so that no personal identifiers, full IP addresses or cross-site tracking identifiers are shared with any third party, and data is only used to produce anonymous, aggregated reports (for example, "how many visitors read the pricing page this week"). Analytics cookies are never used for advertising or profiling.
Marketing
GiroTap does not run retargeting, advertising or behavioural tracking cookies. We do not sell, share or enrich your data for marketing purposes, and we do not embed the advertising pixels of third-party ad networks on our properties.
Cookies we set
The table below lists representative cookies that GiroTap sets across its properties. Specific names and lifetimes may change as we improve the product, but the category and purpose are stable.
4. Third-party cookies
GiroTap partners with a small number of specialist providers to deliver payments, banking and identity. When one of these services is actually invoked — for example, when a customer reaches the bank-account verification step inside the checkout widget, or when a merchant configures a payout account — that partner may set its own cookies on your device under its own domain. GiroTap does not control those cookies and they are governed by each provider's own cookie policy.
Partners whose cookies you may encounter while using GiroTap include:
- Paynovate — our card and payout rails provider, which may set cookies during merchant onboarding and payout operations.
- Lunchflow / GoCardless — providers of SEPA Direct Debit collection infrastructure, which may set cookies during mandate creation and collection.
- TrulyYou — our biometric consent and identity partner, which may set cookies during signature and identity verification steps.
Please consult each provider's own cookie and privacy documentation for details of what they set, why, and for how long. We review our partners regularly to make sure their data-handling practices are aligned with ours.
5. Your choices
Because GiroTap does not use advertising or cross-site tracking cookies, there is no "reject all" button to click — the only cookies we set are the ones needed to make the service work, remember your preferences, or produce anonymous analytics.
You remain in full control of cookies at the browser level. Every mainstream browser lets you:
- View the cookies stored for a given site.
- Delete individual cookies or clear them all.
- Block cookies by default and approve them per site.
- Automatically clear cookies each time you close the browser.
Instructions for managing cookies are available in the help centre of your browser (Chrome, Safari, Firefox, Edge, Brave and others). If you use the merchant dashboard, please note that disabling strictly necessary cookies will prevent you from signing in, and disabling them in the context of the checkout widget will prevent customers from completing a payment.
6. Do Not Track
Some browsers offer a "Do Not Track" (DNT) signal. Because there is no industry-wide agreement on what DNT should do, and because GiroTap does not engage in the kind of cross-site tracking that DNT was designed to prevent, we do not change our behaviour based on the DNT header. We behave the same for every visitor: no advertising cookies, no cross-site tracking, no sale of data.
7. Changes to this policy
We may update this Cookie Policy from time to time — for example, if we add a new feature that changes which cookies are set, or if we change a partner. When we do, we will update the "Last updated" date at the top of this page and, for material changes, notify merchant-dashboard users via an in-product message or email before the change takes effect. The version of the policy in force at any given moment is the one published on this page.
8. Contact
If you have any questions about this Cookie Policy, or about how GiroTap uses cookies in general, please get in touch:
CONFIG MONEY LIMITED (trading as GiroTap)
Company No. 16474180
124-128 City Road, London, EC1V 2NX, United Kingdom
Email: sales@girotap.com