Cookie Policy

1. What cookies are

Cookies are small text files that a website places on your device when you visit it. Similar technologies, such as pixels and items stored in your browser's local storage, work in a comparable way. They allow the website to function, to remember your choices and, where you allow it, to measure how the site is used and to deliver advertising.

Cookies can be set by us (first-party cookies) or by third parties whose services we use (third-party cookies). They can last only for the duration of your visit (session cookies) or remain on your device for a defined period (persistent cookies). The specific cookies we use, with their providers and durations, are listed in section 4.

2. How we use cookies and our consent banner

When you first visit our website, a consent banner appears. In line with the Belgian Electronic Communications Act of 13 June 2005 (article 10/2), the ePrivacy rules and Regulation (EU) 2016/679 (GDPR), no cookies or similar technologies other than those that are strictly necessary are placed on your device before you give your consent.

The banner lets you make a free and informed choice through three options:

• Accept all: all categories, including analytics and marketing, are enabled.
• Reject all: only strictly necessary cookies are used. Refusing is just as easy as accepting and is offered with equal prominence on the first layer of the banner.
• Settings by category: you can enable or disable each optional category (Analytics, Marketing) individually and then save your choice.

Nothing non-essential loads until you accept. We load analytics and advertising tags (Google Analytics 4, Google Ads conversion tracking and the Meta Pixel) through Google Tag Manager with Google Consent Mode v2, which is set to denied by default. These tags are only activated once, and only to the extent that, you give the corresponding consent. Your consent is valid for 12 months, after which you will be asked again, and you can change or withdraw it at any time (see section 6).

3. Categories of cookies we use

We group cookies into three categories:

• Strictly necessary: required for the website and its secure forms to work and to remember your cookie choice. These do not require consent and cannot be switched off through the banner.
• Analytics: help us understand how visitors use the website so that we can improve it. These are used only with your consent.
• Marketing: allow us to measure the performance of our advertising and to show relevant ads on third-party platforms. These are used only with your consent.

4. List of cookies by category

Strictly necessary

• ngp_consent (stored in your browser), provider NextGen Payment, purpose: remembers your cookie choice, duration: 12 months.
• __cf_bm, provider Cloudflare, purpose: bot protection, duration: 30 minutes.
• cf_clearance / Turnstile, provider Cloudflare, purpose: anti-spam protection on the form, duration: up to 1 year.

Analytics

• _ga, provider Google Analytics, purpose: distinguishes visitors to measure site usage, duration: 2 years.
• _ga_<ID>, provider Google Analytics, purpose: maintains session state for usage statistics, duration: 2 years.

Marketing

• _gcl_au, provider Google Ads, purpose: conversion linker, duration: 90 days.
• _gcl_aw, provider Google Ads, purpose: stores click information for conversion measurement, duration: 90 days.
• _fbp, provider Meta Pixel, purpose: advertising measurement and delivery, duration: 90 days.

5. Third parties and international transfers

Some of the cookies above are set by third-party providers who may process the related data outside the European Economic Area, in particular in the United States:

• Google (Google Ireland Ltd / Google LLC): Analytics, Ads and Tag Manager.
• Meta (Meta Platforms Ireland Ltd): the Meta Pixel, with transfers to the United States.
• Cloudflare (Cloudflare Inc.): CDN and security.

Transfers to the United States take place under the EU-US Data Privacy Framework where the recipient is certified, and otherwise under the European Commission's Standard Contractual Clauses. Further information on recipients, transfers and safeguards is set out in our Privacy Policy.

6. How to change or withdraw your consent

You can change or withdraw your consent at any time, and withdrawing it is as easy as giving it. Use the "Cookie settings" link at the bottom of every page to reopen the banner, review each category and update or revoke your choice. Withdrawing consent does not affect the lawfulness of processing carried out before you withdrew it. Once withdrawn, the relevant analytics and marketing tags stop being loaded.

7. How to delete cookies in your browser

You can also manage and delete cookies directly in your browser. Most browsers let you view the cookies stored, delete them individually or all at once, and block cookies from some or all websites. You will find these controls in the settings or preferences menu of your browser, usually under "Privacy" or "Security". Please note that blocking or deleting strictly necessary cookies may stop parts of the website, including our secure form, from working correctly.

8. Contact

This policy is published by NEXTGEN PAYMENT SRL, a Belgian société à responsabilité limitée, registered office at Rond-point Robert Schuman 2-4, box 6, 1040 Brussels, Belgium, enterprise number (CBE/KBO) 0782.389.429, VAT BE 0782.389.429.

For any question about this policy or about cookies, you can contact us at [email protected] or on +32 497 59 22 76. No Data Protection Officer has been appointed; the privacy contact is [email protected].

You also have the right to lodge a complaint with the Belgian Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit), Rue de la Presse 35, 1000 Brussels, www.dataprotectionauthority.be, [email protected].

9. Effective date

This Cookie Policy is effective as of 13 October 2026. We may update it to reflect changes in the cookies we use or in applicable law; the version published on this page is the one in force.