Laybuy
Laybuy is a buy now pay later (BNPL) provider that lets shoppers spread a purchase over six interest free weekly payments. When a merchant adds the Laybuy widget or checkout, it sets cookies for session handling, fraud prevention and conversion attribution and runs an eligibility check. Under the GDPR and the ePrivacy Directive, its non essential cookies require prior consent, although its main data locations benefit from EU adequacy decisions.
What does Laybuy do?
What is Laybuy?
Laybuy is a buy now pay later service, founded in New Zealand and active in markets including the United Kingdom, that lets shoppers split a purchase into six interest free weekly instalments. Merchants offer it as a payment option through a widget on product and checkout pages, and shoppers pass an eligibility check before the order is confirmed.
What data and cookies does it collect?
When the Laybuy widget loads it sets cookies for session handling, fraud prevention and conversion attribution and reads device data such as IP address and browser. To approve instalments, Laybuy processes identity, contact and order data and performs an affordability and fraud assessment. Some cookies are persistent identifiers used to recognise the device and attribute the sale.
GDPR and ePrivacy implications
The attribution and fraud cookies are not strictly necessary, so storing them is governed by Article 5(3) of the ePrivacy Directive and requires consent. The instalment decision can involve an affordability assessment that profiles the shopper, triggering GDPR transparency duties about any automated decision and its effects.
Consent requirements
Block Laybuy non essential cookies until the shopper accepts them through a Consent Management Platform, while cookies strictly necessary to complete a requested payment may load. Log consent, inform shoppers about the affordability assessment, and let them refuse non essential tracking as easily as they accept it.
Data transfers
Laybuy processes data in the United Kingdom and New Zealand. Both jurisdictions benefit from European Commission adequacy decisions, so transfers from the EU are permitted without additional safeguards such as Standard Contractual Clauses. You should still record these transfers and confirm that no processing takes place in a non adequate country.
Practical compliance steps
List the Laybuy cookies and domains in your cookie policy, classify them and gate non essential ones behind consent. Clarify the controller roles with Laybuy, sign the appropriate terms, and inform shoppers about the affordability check and their rights. Keep the transfer documentation up to date and review the integration after any change.
Laybuy and the GDPR
Laybuy is classified as “Preferences”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.
- Legal basis
- Consent (Art. 6(1)(a) GDPR)
- Risk level
- medium
- Applicable regulations
- GDPR, ePrivacy Directive (Cookie Law)
Impact assessment (DPIA)
Laybuy processes identity, contact, device and order data to assess eligibility and prevent fraud, and sets cookies including persistent identifiers for attribution. Key DPIA considerations: (1) the affordability assessment can amount to profiling with significant effects; (2) fraud and device cookies create persistent identifiers; (3) data is processed in the United Kingdom and New Zealand, both covered by an adequacy decision, which lowers transfer risk; (4) the merchant and Laybuy must define their controller roles. A DPIA remains advisable because of the financial profiling involved.
Sample text for your banner
We offer Laybuy so you can pay in six interest free weekly instalments. The Laybuy checkout sets cookies and processes your identity, device and order data to assess eligibility and prevent fraud. You can withdraw your consent to non essential cookies at any time through our cookie settings.
What Laybuy sets and contacts
- Tracking method
- JavaScript checkout widget and cookies
- Server location
- United Kingdom and New Zealand
- Data transferred outside the EU
- Laybuy processes data in the United Kingdom and New Zealand. Both the UK and New Zealand benefit from European Commission adequacy decisions, so transfers from the EU are permitted without additional safeguards, though you should still document them in your records of processing.
Cookies set (3)
| Name | Type | Duration | Purpose |
|---|---|---|---|
| laybuy_session | Functional | Session | Maintains the shopper session through the Laybuy instalment checkout. |
| _lb_attr | Attribution / Analytics | 1 year | Persistent identifier used to attribute completed orders and recognise returning devices. |
| lb_fraud | Security | 6 months | Supports device recognition and fraud prevention during the eligibility check. |
Third-party domains contacted (3)
laybuy.comapi.laybuy.comcdn.laybuy.com
Frequently asked questions about Laybuy
Can't find your question? Write to us, we answer fast.
What cookies does Laybuy set?
Laybuy sets cookies for session handling, fraud prevention and conversion attribution. The attribution and fraud cookies are persistent identifiers that are not strictly necessary, so they require consent, while a narrow set needed to complete a requested payment may be treated as essential.
Does Laybuy require cookie consent?
Yes for the non essential cookies. The attribution and tracking cookies Laybuy sets need prior consent under the GDPR and the ePrivacy Directive, so they should not load until the shopper accepts. Cookies strictly necessary to process a requested payment can rely on a different basis.
What is the legal basis for Laybuy?
Consent under Article 6(1)(a) GDPR covers the attribution cookies, while processing needed to provide the instalment service the shopper requested can rely on contract under Article 6(1)(b). Fraud prevention may rely on legitimate interest, with care taken over any profiling that has significant effects.
Does Laybuy transfer data outside the EU?
Laybuy processes data in the United Kingdom and New Zealand, both of which benefit from EU adequacy decisions, so EU transfers are permitted without extra safeguards. You should still document the transfers and verify that no processing occurs in a country without adequacy.
Do I need a DPIA for Laybuy?
A DPIA is advisable because the affordability assessment can amount to profiling with significant effects, even though the transfer risk is reduced by adequacy. Documenting the purposes, the logic of automated decisions and the safeguards supports Article 35 GDPR compliance.
How do I implement Laybuy compliantly?
Add Laybuy through a CMP that blocks non essential cookies until consent, keep payment essential cookies separate, and disclose everything in your notices. Define the controller relationship, sign the relevant terms and explain the affordability check to shoppers.
Are there alternatives to Laybuy?
Other BNPL providers include Klarna, Clearpay, Scalapay and Alma, some of which are European. All involve an eligibility assessment and tracking cookies, so the compliance approach is similar; the main difference is where each provider processes data.
How do I update my cookie policy for Laybuy?
Describe the Laybuy cookies, their purpose and duration, list the Laybuy domains, and note that data is processed in the UK and New Zealand under adequacy decisions. Explain the affordability assessment in your privacy notice and keep both aligned with the integration.
Hextom Free Shipping Bar
Hextom Free Shipping Bar is a shipping and fulfillment solution that helps e-commerce businesses streamline their delivery operations. It offers real-time shipping rate calculations, automated label generation, package tracking, and multi-carrier support. Hextom Free Shipping Bar integrates with major e-commerce platforms and marketplaces, enabling merchants to optimize shipping costs, improve delivery times, and provide customers with transparent tracking. Its warehouse management features help.
Golden Volunteer
Golden Volunteer is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Golden Volunteer integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Golden Volunteer helps organizations maintain robust websites that meet user expectations and.
Forte
Forte is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Forte supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Forte ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.
Shoppy
Shoppy is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Shoppy integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Shoppy helps organizations maintain robust websites that meet user expectations and technical requirements.
Powa
Powa is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Powa integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Powa helps organizations maintain robust websites that meet user expectations and technical requirements.
Giveffect
Giveffect is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Giveffect provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Giveffect helps deliver the right message to the right audience at the right time.
Make your site compliant today.
Free up to 25,000 sessions a month. No credit card, no commitment.