> Is Flip-Pay GDPR compliant? Cookies it sets, consent and legal basis, data transfers and a practical compliance checklist for European websites.
>
> Canonical: https://www.flowconsent.com/en/services/ecommerce/flip-pay

E-commerce

# Flip-Pay

Preferences · [Official website](https://www.flip-pay.com)

How Flip-Pay handles cookies and personal data, and what European websites must do to use it in a GDPR and ePrivacy compliant way.

[Block Flip-Pay until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=ecommerce) · [Scan my site](https://www.flowconsent.com/en/scan)

At a glance

- Category

  [E-commerce](https://www.flowconsent.com/en/services/ecommerce)

- Consent

  Preferences

- Prior consent

  Not required

- Documented cookies

  2

- Third-party domains

  2

- Servers

  Australia

Overview

## What does Flip-Pay do?

## **What Flip-Pay is**

Flip-Pay is a payment and checkout service. It is a payment and instalment service that lets merchants offer flexible payment terms at checkout. When it runs on a website it operates as a third party processor whose scripts, cookies and network requests are loaded into the browsers of your European visitors.

## **Data and cookies Flip-Pay collects**

In a typical deployment Flip-Pay processes transaction and order amounts, fraud prevention signals, device identifiers and account data. Most of this information qualifies as personal data under the GDPR because it can be linked to an identifiable person, directly or through online identifiers stored on the device.

## **GDPR and ePrivacy implications**

Any storage of or access to information on a visitor device is governed by Article 5(3) of the ePrivacy Directive, transposed into national law across the EU. The GDPR then governs the subsequent processing, so Flip-Pay must have a valid legal basis, a clear retention period and transparent information for the data subject.

## **Consent requirements**

The strictly necessary functions of Flip-Pay can rely on contract or legitimate interest, but any analytics, marketing or personalisation cookies layered on top still require prior consent. Keep the essential and the optional layers clearly separated so the legal basis matches each purpose.

## **International data transfers**

Flip-Pay processes payment data on infrastructure located in Australia, a third country without an adequacy decision. Transfers of personal data outside the European Economic Area need an appropriate safeguard such as an adequacy decision or Standard Contractual Clauses, together with a transfer impact assessment where required.

## **Practical compliance steps**

List Flip-Pay in your records of processing and your cookie policy, load it only through a consent management platform, document the consent you collect and review the vendor data processing agreement at least once a year. Test the site with consent refused to make sure no identifier is set before a choice is made.

Compliance

## Flip-Pay and the GDPR

- Legal basis

  Contract (Art. 6(1)(b) GDPR) for core functionality; consent (Art. 6(1)(a) GDPR) for optional cookies

- Risk level

  medium

- Applicable regulations

  GDPR; ePrivacy Directive 2002/58/EC; national rules (TTDSG, CNIL guidelines, LSSI)

### Impact assessment (DPIA)

Assess the volume and sensitivity of data processed through Flip-Pay, whether visitors are profiled or tracked across sites, and any transfer outside the EEA. A formal DPIA is advisable where Flip-Pay enables large scale monitoring or combines data from several sources.

### Sample text for your banner

> This site uses Flip-Pay to deliver core functionality. Optional analytics and marketing features of Flip-Pay are activated only with your consent, which you can change at any time in the cookie settings.

Cookies and trackers

## What Flip-Pay sets and contacts

- Tracking method

  First party cookies for payment and fraud prevention

- Server location

  Australia

- Data transferred outside the EU

  Flip-Pay processes payment data on infrastructure located in Australia, a third country without an adequacy decision.

### Cookies set (2)

| Name             | Type      | Duration | Purpose                                                   |
| ---------------- | --------- | -------- | --------------------------------------------------------- |
| flippay\_session | necessary | Session  | Maintains the checkout session                            |
| flippay\_csrf    | necessary | Session  | Protects payment forms against cross site request forgery |

### Third-party domains contacted (2)

- `flippay.com.au`
- `flip-pay.com`

Questions

## Frequently asked questions about Flip-Pay

Can't find your question? Write to us, we answer fast.

[Write to us](https://www.flowconsent.com/en/demo)

### What cookies does Flip-Pay set?

Flip-Pay typically stores session identifiers and, depending on configuration, analytics or marketing cookies. The exact names and lifetimes appear in the cookie table on this page, and you should scan your own site because deployments differ.

### Do I need consent to use Flip-Pay?

For its strictly necessary functions Flip-Pay can rely on contract or legitimate interest, but any analytics or marketing cookies it adds still require prior consent.

### What is the legal basis for Flip-Pay?

The non essential cookies rely on consent under Article 6(1)(a) GDPR combined with Article 5(3) ePrivacy. Strictly necessary processing can rely on contract under Article 6(1)(b) or legitimate interest under Article 6(1)(f).

### Does Flip-Pay transfer data to the United States or other third countries?

Flip-Pay processes payment data on infrastructure located in Australia, a third country without an adequacy decision. Any such transfer needs Standard Contractual Clauses or an adequacy decision and a transfer impact assessment.

### Do I need a DPIA for Flip-Pay?

A DPIA is required when processing is likely to result in a high risk, for example large scale tracking or profiling. Where Flip-Pay monitors behaviour at scale or combines data sources, run a DPIA before going live.

### How do I implement Flip-Pay in a compliant way?

Load Flip-Pay only after consent through a consent management platform, keep it blocked by default, document each consent, list it in your records and cookie policy, and sign a data processing agreement with the vendor.

### Are there alternatives to Flip-Pay?

Yes. Depending on your goal you can choose privacy first or cookieless tools, or self hosted options that keep data in the EEA. Whichever you pick, the same consent and transparency duties apply.

### How do I update my cookie policy for Flip-Pay?

Add Flip-Pay to the cookie policy with its purpose, the cookies it sets, their duration and the recipient, note any third country transfer and the safeguard used, and refresh the entry whenever you change configuration or after a new cookie scan.

Same category

## More services: E-commerce

[See the whole category](https://www.flowconsent.com/en/services/ecommerce)

### [Eveho](https://www.flowconsent.com/en/services/ecommerce/eveho)

[Eveho is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Eveho supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Eveho ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/ecommerce/eveho)

[Preferences](https://www.flowconsent.com/en/services/ecommerce/eveho)

·

### [Stripe.js](https://www.flowconsent.com/en/services/ecommerce/stripe-js)

[Stripe.js is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Stripe.js integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Stripe.js helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/ecommerce/stripe-js)

[Essential](https://www.flowconsent.com/en/services/ecommerce/stripe-js)

·

### [Sezzle](https://www.flowconsent.com/en/services/ecommerce/sezzle)

[Sezzle is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Sezzle supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Sezzle ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/ecommerce/sezzle)

[Preferences](https://www.flowconsent.com/en/services/ecommerce/sezzle)

·

### [Qumra](https://www.flowconsent.com/en/services/ecommerce/qumra)

[Qumra is a web hosting and cloud infrastructure provider delivering reliable, scalable hosting solutions for websites and applications of all sizes. It offers shared, VPS, and dedicated server options with SSD storage, global CDN, and automated backups. Qumra provides one-click deployment, managed databases, and 24/7 monitoring. With high uptime guarantees and developer-friendly tools, Qumra ensures optimal performance at scale.](https://www.flowconsent.com/en/services/ecommerce/qumra)

[Preferences](https://www.flowconsent.com/en/services/ecommerce/qumra)

·

### [Ochanoko](https://www.flowconsent.com/en/services/ecommerce/ochanoko)

[Ochanoko is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Ochanoko supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Ochanoko ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/ecommerce/ochanoko)

[Preferences](https://www.flowconsent.com/en/services/ecommerce/ochanoko)

·

### [GoodAPI](https://www.flowconsent.com/en/services/ecommerce/goodapi)

[GoodAPI is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. GoodAPI provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, GoodAPI helps deliver the right message to the right audience at the right time.](https://www.flowconsent.com/en/services/ecommerce/goodapi)

[Marketing](https://www.flowconsent.com/en/services/ecommerce/goodapi)

## Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

[Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)