Privacy and Cookies

This Privacy & Cookies Policy explains how Gattera Ltd. (“Gattera”, “we”, “us”, “our”) collects, uses, stores, and protects personal data when you visit our website, contact us, or use our platform.

It also explains how we use cookies and similar technologies.

By using our website, you agree to this Policy. If you do not agree, please discontinue use.

1. Who We Are

Gattera Ltd. is a payments technology developer offering tools for payment orchestration. We do not act as a payment service provider (PSP), electronic money institution (EMI), or financial institution.

We do not process or settle merchant payments and do not handle funds.

We operate as a technology layer that connects merchant websites with third-party gateways and processors, providing tools for gateway connectivity, compliance, and payment orchestration features.

Depending on the activity, Gattera assumes the role of a “data controller” and/or “data processor”.

Data Controller:

Gattera Ltd.

Fulford House, Newbold Terrace, Leamington Spa, Warwickshire, United Kingdom, CV32 4EA

United KingdomContact: hello@gattera.io

2. Scope of This Policy

This Policy applies to:

  • Our website (gattera.io)

  • Our public pages, contact forms, and marketing channels

  • Our platform dashboard and platform-related interactions

This Policy does not replace or govern:

  • any merchant agreements

  • any Data Processing Agreements (DPA)

  • API or product usage terms

3. Personal Data We Collect

3.1 Data You Provide to Us

We collect personal data when you:

  • submit a contact form

  • request a demo

  • communicate with us

  • create an account for the platform dashboard

  • request support or send documentation

This may include:

  • Name

  • Email address

  • Phone number

  • Job title

We only collect personal data which is relevant, and limited to what is necessary for us to fulfill the purposes described in point 4 below.

3.2 Data Collected Automatically

When you visit our website or access the dashboard, we collect:

  • IP address

  • Browser type and version

  • Device information

  • Pages viewed and actions taken

  • Referrer URLs

  • Time stamps and session data

We also collect limited operational metadata within the platform, such as:

  • log data

  • integration events

  • webhook activity

  • performance logs

  • audit trails for security and debugging purposes

4. How We Use Personal Data

We use personal data for the following purposes:

  • To operate and maintain our website

  • To create and manage user accounts

  • To provide access to the platform dashboard

  • To communicate with merchants and prospects

  • To market our products and services

  • To provide support and respond to enquiries

  • To maintain security and prevent misuse

  • To analyze and improve Website performance and user experience

  • To comply with legal obligations under EU, UK, or applicable laws

We do not use personal data to approve, decline, or process transactions.

5. Legal Bases for Processing (GDPR / UK GDPR)

We process personal data based on:

  • Performance of a contract: account creation, dashboard access, support

  • Legitimate interests: analytics, security, service improvement

  • Consent: cookies, newsletter opt-ins, marketing communications

  • Legal obligations: regulatory compliance, security logging, accounting

6. How We Share Personal Data

We may share personal data with:

6.1 Service Providers

Trusted partners who support our operations, such as:

  • Hosting providers

  • Email delivery services

  • Analytics tools

  • Customer support tools

  • PCI-compliant token vault services

All service providers are subject to contractual data protection obligations.

6.2 PSPs or Acquiring Banks

Only if you wish to apply for a merchant account through us.

6.3 Legal Authorities

If required by law enforcement agencies, regulators, or court order.

6.4 Business Transfers

In case of merger, acquisition, or reorganization.

We do not sell, rent, or trade your personal data.

7. International Data Transfers

We may transfer your personal data outside the UK and the EU/EEA when this is necessary for the purposes of providing our services. When we do, we will only transfer your personal data in accordance with applicable laws and regulations and will implement appropriate safeguards such as:

  • UK International Data Transfer Agreements (IDTA) / Addendum

  • EU Standard Contractual Clauses (SCCs)

  • Standard Contractual Clauses (SCCs)

  • Processor agreements

  • Security and access controls

8. Data Retention

We retain personal data for as long as necessary to:

  • operate the Website

  • provide access to the platform

  • comply with legal requirements

  • fulfill merchant support obligations

When your Personal Data no longer needs to be retained, and depending on the exact circumstances involved, we will: (a) erase it securely from our systems; (b) anonymize it so it may no longer be used to identify you.

9. Your Rights (GDPR)

You have the right to:

  • Access your personal data

  • Correct inaccurate data

  • Request deletion (“right to be forgotten”)

  • Restrict processing

  • Object to processing

  • Request data portability

  • Withdraw consent (for cookies/marketing)

  • File a complaint with your supervisory authority

To exercise your rights, contact: hello@gattera.io

Right to Lodge a Complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local supervisory authority or with the supervisory authority in the United Kingdom or the European Union.

Information Commissioner's Office (United Kingdom)

Website: https://ico.org.uk

Email: icocasework@ico.org.uk

European Data Protection Board (European Union)

Website: https://www.edpb.europa.eu

Directory: https://www.edpb.europa.eu/about-edpb/our-members_en

10. Collection of Information by Third-Party Sites

The Site may contain links to other sites whose information practices may be different than ours. Visitors should consult the other sites' privacy policies as we have no control over personal data that is submitted to, or collected by, these third parties.

11. Cookies and Tracking Technologies

We use cookies and similar technologies to:

  • enable core Website functionality

  • analyze Website performance

  • improve user experience

  • personalize Website interactions

Cookies may include:

Essential Cookies

Required for Website operation and security.

Analytics Cookies

Used to understand Website usage and performance.

Functional Cookies

Remember preferences such as language or layout.

Marketing Cookies

Used for remarketing or advertising.

12. Managing Cookies

You can manage or disable cookies by:

  • adjusting browser settings

  • using the controls in our cookie banner

  • clearing stored cookies at any time

Disabling cookies may impact certain Website features.

13. Security

We use administrative, technical, and physical controls to protect personal data from unauthorised access and use, including:

  • encrypted transmission

  • access restrictions

  • logging and monitoring

  • secure hosting providers

No system is 100% secure, and we cannot guarantee absolute protection. If you have reason to believe that your interaction with us is no longer secure (for instance, you believe that your Gattera account's security has been compromised), please notify us immediately in accordance with the “Contact Us” section below.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated date. We encourage you to review this Policy periodically to be informed of how we use your personal data.

15. Data Rectification/ Deletion Request

To request rectification or deletion of your personal data, please contact us directly at hello@gattera.io. Your request will be reviewed and processed in accordance with applicable data protection laws.

16. Contact Us

For questions or data-related requests:

Email: hello@gattera.io

Last updated: August 1, 2026