Cookie Policy

Averipay

Last updated: November 10, 2026

1. General provisions

1.1. This Cookie Policy (the "Policy") explains how Avrepey OOD, EIK 208357967, operating under the trade mark Averipay (the "Company", "we"), uses cookies and similar technologies on the website averipay.com.

1.2. The Policy describes the categories of cookies used, the purposes for which they are used, their retention periods and the ways in which users can manage their settings.

1.3. Cookies are used in accordance with the applicable law of the Republic of Bulgaria and of the European Union, including Regulation (EU) 2016/679 (GDPR) where personal data is processed.

1.4. This Policy applies to all visitors to the Averipay website, whether or not they are customers of the Company.

1.5. Further information on how personal data is processed is set out in the Privacy Policy.

2. What cookies are

2.1. Cookies are small text files that are stored on a user's device when a website is visited.

2.2. They allow a website to remember certain information about a visit, to support the operation of individual features and to keep the settings a user has chosen.

2.3. Depending on their purpose, cookies may be used to:

• ensure that the website works correctly;
• maintain the user session;
• save language and other settings;
• ensure security;
• analyse how the website is used;
• assess the effectiveness of advertising materials, where such technologies are used.

2.4. In addition to cookies, the website may use other technologies for storing or accessing information on a user's device. The relevant legal requirements apply to them.

3. The categories of cookies we use

Depending on the actual configuration of the Averipay website, the following categories of cookies may be used.

3.1. Necessary cookies

Necessary cookies provide the basic operation of the website and the availability of its core features.

They may be used to:

• maintain the user session;
• secure the connection;
• protect against unauthorised actions;
• save the privacy settings you have chosen;
• ensure that forms and other technical components of the website work correctly.

Without some necessary cookies, individual features of the website may not work correctly.

For cookies that are strictly necessary to provide a service explicitly requested by the user, prior consent may not be required under the applicable law.

3.2. Functional cookies

Functional cookies make it possible to save user preferences and to provide additional features of the website.

They may be used to:

• save the chosen language;
• remember individual interface settings;
• support additional user features.

If functional cookies are not strictly necessary, they are used only with the user's consent.

3.3. Analytics cookies

Analytics cookies help to obtain information about how the website is used and to assess how well it performs.

Such technologies may be used to analyse:

• the number of visits;
• the most viewed pages;
• the sequence of navigation between sections;
• technical errors;
• general indicators of interaction with the website.

The information obtained may be used to improve the structure, content and usability of the website.

Analytics cookies that require consent are activated only after consent has been obtained.

3.4. Marketing cookies

Marketing cookies may be used to assess the effectiveness of advertising campaigns and to show more relevant advertising materials.

Depending on the services used, such cookies may make it possible to:

• measure the results of advertising campaigns;
• analyse interaction with advertising materials;
• limit how often an advertisement is shown;
• use the advertising features of third-party platforms.

Marketing cookies are set only with the user's necessary consent.

Declining marketing cookies does not restrict access to the core features of the website.

4. Cookies by duration

4.1. Depending on how long they are stored, cookies are divided into session cookies and persistent cookies.

Session cookies

These are used during a visit to the website and, as a rule, are deleted when the relevant session ends.

Persistent cookies

These remain on the device for a set period or until the user deletes them.

4.2. The specific duration depends on the purpose of the cookie and the settings of the relevant technology.

4.3. Information on the actual retention periods of the cookies used must be provided in the list of cookies on the website.

5. First-party and third-party cookies

5.1. The website may use first-party cookies set by the Averipay domain.

5.2. Where external services are connected, third-party cookies set by the relevant service providers may also be used.

5.3. Third-party technologies may be used for analytics, to support individual features of the website and for other purposes set out in this Policy.

5.4. The list of third-party providers, the technologies used and the purposes of processing depends on the actual configuration of the website.

5.5. Where third-party services process personal data, the relevant GDPR requirements apply, including those on the legal bases for processing and on international transfers of data.

6. Consent to the use of cookies

6.1. On a first visit to the website, the user is given information about the use of cookies and the opportunity to manage the categories for which consent is required.

6.2. The user may:

• accept all optional cookies;
• reject all optional cookies;
• choose individual categories of cookies in the settings.

6.3. Consent must be freely given, specific, informed and expressed by an unambiguous affirmative action.

6.4. Continuing to browse the website, inactivity or the use of pre-ticked switches do not in themselves constitute valid consent.

6.5. Cookies for which prior consent is required must not be activated before consent has been obtained.

6.6. The user has the right to change the settings or withdraw consent at any time.

6.7. Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

7. How to change your cookie settings

7.1. The user can manage the use of optional cookies through a dedicated settings interface on the website.

Cookie settings

7.2. In the settings you can review the available categories of cookies, change the preferences you chose earlier or withdraw your consent.

7.3. In addition, the user can manage cookies through the settings of their browser.

7.4. Most modern browsers allow stored cookies to be viewed, blocked and deleted.

7.5. Restricting or deleting necessary cookies may affect the correct operation of individual features of the website.

7.6. Changing browser settings does not always replace managing consent in the website interface, especially where additional data storage technologies are used.

8. List of cookies used

8.1. For the sake of transparency, the Company provides information about the cookies and similar technologies actually used.

8.2. For each cookie or technology, the following are indicated, where applicable:

• name;
• provider or domain;
• category;
• purpose;
• duration;
• conditions of use and whether consent is required.

8.3. The current list of cookies used:

NEXT_LOCALE (cookie, language choice); cookie_consent (localStorage, cookie consent choice); wl_access_token, wl_refresh_token (localStorage, cabinet sign-in session); wl_session_expired (sessionStorage, expired-session notice on the login page); averipay.cabinet.applicationDraft.* (localStorage, saved draft of an application form)

8.4. The list is updated when the technologies used change or when new services are connected.

9. Processing of personal data

9.1. Some cookies and similar technologies may involve the processing of personal data, including IP addresses, online identifiers and information about use of the website.

9.2. In such cases the Company complies with the applicable GDPR requirements.

9.3. Personal data is processed only where there is a relevant legal basis and within the defined purposes.

9.4. Users have the rights provided for by the GDPR, including the right of access, rectification, erasure and restriction of processing in the cases provided for by law.

9.5. Further information on users' rights, retention periods and how to make a request is set out in the Privacy Policy.

10. Disclosure of data to third parties

10.1. If external technical, analytics or advertising services are used to operate the website, the information collected through the relevant technologies may be disclosed to their providers.

10.2. Such disclosure takes place where there is a necessary legal basis and in compliance with data protection law.

10.3. Where personal data is transferred outside the European Economic Area, the Company ensures compliance with the applicable GDPR requirements.

10.4. Information on the actual recipients of data and the safeguards applied must correspond to the services used on the website.

11. Updates to the Policy

11.1. The Company may update this Policy from time to time because of changes in law, in the functionality of the website or in the technologies used.

11.2. The current version of the Policy is published on the official Averipay website.

11.3. The date of the last update is shown at the beginning of the document.

11.4. If changes require the user's consent to be obtained again, the Company ensures that it is obtained before the relevant technologies are used.

12. Contact information

If you have any questions about the use of cookies or the processing of personal data, you may contact Averipay.

Legal name:

Avrepey OOD

Trade name:

Averipay

EIK:

208357967

Registered address:

41 Hristofor Kolumb St., floor 2, office 226, Iskar district, 1592 Sofia, Bulgaria

Email:

payments@averipay.com

Official website:

averipay.com

Further information on how personal data is processed is set out in the Privacy Policy.

© 2026 Averipay. All rights reserved.