Legal

Privacy Policy

Last updated: May 2026  ·  LikklePay

LikklePay ("we", "us", "our") is committed to protecting the personal data of the merchants who use our platform. This Privacy Policy explains what data we collect, why we collect it, and how we handle it.

1. Who we are

LikklePay is a payment facilitation platform that enables small merchants to accept card payments via QR codes and payment links, powered by Stripe Connect. We are based in Belgium.

Contact: hello@likklepay.com

2. Data we collect

When you create a LikklePay merchant account, we collect:

• Email address and password (for authentication)
• Business name, type, category, address, and phone number
• Personal information: first name, last name, date of birth, personal address
• VAT number and estimated monthly sales volume
• Website URL (optional)

When you process payments, we collect:

• Transaction amounts, timestamps, and descriptions
• Payment status and method (QR code / payment link)
• Stripe payment intent IDs and charge references

We do not store card numbers, CVVs, or any raw payment card data. All card data is handled exclusively by Stripe.

3. Why we collect it

• Account management — to create and manage your merchant account
• KYC / identity verification — required by Stripe to enable payment processing (in compliance with EU anti-money laundering regulations)
• Payment processing — to facilitate transactions and calculate platform fees
• Communication — to send you transaction confirmations, payout notifications, and important account updates
• Legal compliance — to meet our obligations under Belgian and EU law

4. Legal basis (GDPR)

• Contract — processing is necessary to perform our service agreement with you
• Legal obligation — KYC/AML requirements under EU financial regulations
• Legitimate interest — fraud prevention and platform security

5. Who we share data with

We share data only with the following trusted third parties:

• Stripe Payments Europe Ltd — payment processing and identity verification (Stripe's Privacy Policy applies)
• Supabase Inc. — secure database and authentication hosting (EU region)
• Railway Corp. — backend infrastructure hosting
• Resend Inc. — transactional email delivery (verification emails, receipts, notifications)

We do not sell your data to any third party.

6. Data retention

We retain your account data for as long as your account is active. Transaction records are kept for 7 years to comply with Belgian accounting and tax obligations. If you delete your account, personal data is removed within 30 days, except where retention is legally required.

7. Your rights (GDPR)

As an EU resident, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data (subject to legal retention requirements)
• Object to or restrict processing
• Data portability
• Lodge a complaint with the Belgian Data Protection Authority (GBA / APD)

To exercise any of these rights, contact us at hello@likklepay.com.

8. Security

We use industry-standard security measures including encrypted connections (HTTPS/TLS), hashed passwords, and access controls. Payment data is handled by Stripe, which is PCI DSS Level 1 certified.

9. Cookies

Our mobile app does not use cookies. Our website may use essential cookies for functionality only. We do not use tracking or advertising cookies.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or an in-app notification. Continued use of the platform after changes constitutes acceptance.

11. Payment processing

Payment processing on the LikklePay platform is performed by Stripe Payments Europe Ltd, licensed as a payment institution by the Central Bank of Ireland (licence number: C187865). LikklePay is not a payment institution and does not hold or process funds on behalf of merchants or customers.