Cookies Policy

Effective Date: May 4, 2026 | Last Revised: May 4, 2026 | Version: 1.0

1. Introduction

This Cookies Policy (“Policy”) explains how Zylo and its affiliates (“Zylo,” “we,” “us,” or “our”) use cookies and similar tracking technologies when you access or use our website at www.zylopayments.com, our web application, mobile applications, and any other digital services we provide (collectively, the “Platform”).

This Policy should be read together with our Privacy Policy and Terms of Use, which are available on our website. Together, these documents govern your use of our Platform.

By accessing and continuing to use our Platform, you acknowledge that you have read, understood, and agree to the use of cookies as described in this Policy. Where your consent is required by applicable law, we will obtain it through our cookie consent banner.

2. What Are Cookies?

Cookies are small text files placed on your device (computer, smartphone, tablet, or other internet-enabled device) when you visit a website or use an online service. They are widely used to make websites and applications work efficiently and to provide operational and reporting information.

Cookies serve several purposes:

• Recognising your device when you return to our Platform
• Storing information about your preferences and settings
• Enabling certain features and functionality
• Improving the speed and security of the Platform
• Helping us understand how visitors use our Platform

3. How We Use Cookies

We use cookies for the following purposes:

3.1 Essential / Strictly Necessary Cookies

These cookies are required for our Platform to function and cannot be switched off in our systems. They are typically set in response to actions you take, such as logging in, setting your privacy preferences, or completing a payment transaction.

These cookies do not store any personally identifiable information beyond what is strictly necessary for the service. You cannot opt out of essential cookies, as the Platform cannot operate without them.

Examples of what these cookies do:

• Authenticate you and keep you securely logged in to your session
• Maintain the security of your session and prevent unauthorised access
• Process payment instructions and remember the contents of your transaction flow
• Enable load balancing and platform stability
• Remember your cookie consent preferences
• Prevent cross-site request forgery (CSRF) attacks

3.2 Performance and Analytics Cookies

These cookies allow us to count visits, measure traffic sources, and understand how users move around our Platform. The information collected is aggregated and anonymous — it does not directly identify individual users.

We use this data to:

• Identify which pages, features, and workflows are most and least popular
• Monitor platform performance and response times
• Diagnose and troubleshoot technical issues
• Measure the effectiveness of changes and improvements we make
• Understand user journeys and drop-off points

If you do not allow these cookies, we will not know when you have visited our Platform and will be unable to monitor its performance.

3.3 Functional Cookies

These cookies enable enhanced functionality and personalisation. They may be set by us or by third-party providers whose services we have added to our pages.

Functional cookies allow us to:

• Remember your language, region, or currency preferences
• Customise your dashboard and display settings
• Retain information you have entered across pages in the same session
• Offer improved or personalised features based on your usage

If you do not allow these cookies, some or all of these features may not function correctly.

3.4 Security Cookies

Security cookies are a distinct category that specifically supports the integrity and safety of our payment platform. These cookies:

• Detect and prevent fraudulent transactions and suspicious login attempts
• Monitor for bot activity and automated abuse of our systems
• Support multi-factor authentication workflows
• Flag unusual account behaviour for review
• Maintain secure session tokens during payment processing
• Support compliance with Payment Card Industry Data Security Standards (PCI DSS) and anti-money laundering (AML) controls

Disabling security cookies may impact our ability to protect your account and transactions.

3.5 Marketing and Advertising Cookies

We may use marketing cookies to track the effectiveness of our marketing campaigns and to show you relevant content about Zylo’s services on third-party websites and platforms. These cookies track your visits across different websites and build a profile of your interests.

Where required by applicable law, we will seek your explicit consent before deploying marketing cookies.

5. Third-Party Cookies

We work with trusted third-party service providers who may set their own cookies on your device when you use our Platform. These providers are contractually bound to use your information only for the purposes we specify and in accordance with applicable data protection laws.

Our third-party cookie providers include, but may not be limited to:

• Analytics: We use analytics providers (including Google Analytics) to help us understand how our Platform is used. These providers may use cookies to collect information about your use of our Platform, including your IP address, browser type, pages visited, and time spent on pages. This information is used to compile reports and to help us improve our Platform.
• Payment Processing Partners: Where we integrate with other payment infrastructure providers, those providers may place cookies necessary for the secure processing of payments. These cookies are subject to those providers’ own privacy and cookie policies.
• Security and Fraud Prevention: We use specialist third-party security services to help detect fraud, bot traffic, and other security threats. These services may use cookies and device fingerprinting technologies.
• Customer Support Tools: We may use third-party tools to provide live chat, support ticketing, and in-app guidance. These tools may use cookies to personalise and remember your support interactions.

We are not responsible for the content of third-party privacy or cookie policies. We encourage you to review the privacy and cookie policies of any third parties whose services we use.

6. Managing and Controlling Cookies

You have a number of options for controlling how cookies are used on your device.

6.1 Cookie Consent Banner

When you first visit our Platform (or after clearing your cookies), you will be presented with a cookie consent banner that allows you to accept all cookies, reject non-essential cookies, or customise your preferences by category. You can return to and update these preferences at any time by clicking the “Cookie Settings” link in the footer of our website.

6.2 Browser Settings

Most web browsers allow you to view, manage, delete, and block cookies through the browser settings. However, the steps for doing this differ by browser. Please note that if you block all cookies, including essential cookies, you may not be able to use all or part of our Platform. Deleting cookies does not prevent them from being set again on a subsequent visit; you would need to block them through your browser or cookie settings.

6.3 Opt-Out from Analytics

To opt out of Google Analytics across all websites, you can install the Google Analytics Opt-out Browser Add-on, available at tools.google.com/dlpage/gaoptout.

7. Cookies and Sensitive Payment Data

Zylo is a payments company and handles sensitive financial information. We want to be transparent that:

• Cookies and similar technologies used in payment processing contexts are subject to additional security controls and regulatory requirements, including PCI DSS.
• We do not store full payment card numbers, CVV codes, or bank account credentials in cookies.
• Session tokens stored in cookies for authenticated users are encrypted and time-limited.
• Security cookies used for fraud detection may persist for longer periods to enable device recognition across sessions, which is a standard practice in the payments industry.

8. Retention

We retain cookie data for no longer than is necessary for the purposes set out in this Policy. Session cookies expire when you close your browser. Persistent cookies expire after the period indicated in Section 4, or when you delete them, whichever is earlier.

9. Changes to This Policy

We may update this Cookies Policy from time to time to reflect changes in the cookies we use, changes in applicable law, or changes in our business. When we make material changes, we will update the “Last Revised” date at the top of this Policy. For significant changes, we may also notify you through the Platform or by email.

We encourage you to review this Policy periodically to stay informed about how we use cookies.

10. Contact Us

If you have any questions, concerns, or requests relating to this Cookies Policy or our use of cookies, please contact us at:

Email: privacy@zylopayments.com
Website: www.zylopayments.com/contact

For data protection enquiries, you may also contact our designated Data Protection Officer at the address above, marked for the attention of the Data Protection Officer.

---

This Cookies Policy was last reviewed and updated on 4 May 2026.