This Cookie Notice explains how Atoa Payments Limited (“Atoa”, “we”, “us”, or “our”) uses cookies and similar technologies when you visit our website www.paywithatoa.co.uk, use our Atoa Business mobile application, or use the Atoa Pay mobile application (collectively, the “Services”).
By continuing to use our Services, you consent to our use of cookies in accordance with this Cookie Policy.
1. What Are Cookies?
Cookies are small text files that are stored on your device (computer, smartphone, or other device) when you visit a website or use an app. They help us remember your preferences, understand how you interact with our Services, and improve your overall experience.
2. Types of Cookies We Use
We use the following types of cookies:
a. Necessary Cookies
These cookies are essential for the operation of our Services. They include, for example, cookies that enable you to log into secure areas or use essential features.
b. Performance and Analytics Cookies
These cookies collect information about how users interact with our Services, such as pages visited, features used, and any errors encountered. This data helps us improve functionality and performance.
Examples:
- Google Analytics
- Firebase Analytics (for app usage tracking)
c. Functionality Cookies
These cookies allow us to remember your preferences and provide enhanced features, such as remembering your login details or your preferred settings.
d. Targeting and Advertising Cookies
We may use these cookies to deliver relevant advertisements to you and measure the effectiveness of our marketing campaigns.
Note: We do not and will never sell your personal information or data to third parties.
3. Cookies in Our Mobile Applications
Our Atoa Business and Atoa Pay mobile apps may use technologies equivalent to cookies, such as SDKs (Software Development Kits), to collect usage and diagnostic data. These help us to:
- Track app performance and crashes
- Understand user interactions and flows
- Provide tailored content or features
Third-party SDKs we may use include:
- Firebase SDK
- Appsflyer
- Sentry
- Segment
You can manage data collection preferences within your device settings, depending on your mobile operating system.
4. List of Cookies (across our website and applications)
Necessary Cookies
| Cookie ID | Provider | What is it used for? | Expires |
| __cf_bm | Apollo | This cookie is used to distinguish between humans and bots. This is beneficial for the website, in order to make valid reports on the use of their website. | 1 day |
| __cf_bm | Calendly | This cookie is used to distinguish between humans and bots. This is beneficial for the website, in order to make valid reports on the use of their website. | 1 day |
| __cfruid | Calendly | This cookie is a part of the services provided by Cloudflare - Including load-balancing, deliverance of website content and serving DNS connection for website operators. | Session |
| _calendly_session | Calendly | If consent is given by the visitor, this cookie allows the website to add events into the visitor's calendar. | 21 days |
| _cfuvid | Calendly | This cookie is a part of the services provided by Cloudflare - Including load-balancing, deliverance of website content and serving DNS connection for website operators. | Session |
| bcookie | Used in order to detect spam and improve the website's security. | 1 year | |
| CookieConsent | Chatwoot | Stores the user's cookie consent state for the current domain | 1 year |
| li_gc | Stores the user's cookie consent state for the current domain | 180 days | |
| OptanonConsent | Calendly | Determines whether the visitor has accepted the cookie consent box. This ensures that the cookie consent box will not be presented again upon re-entry. | 1 year |
| rc::a | Gstatic | This cookie is used to distinguish between humans and bots. This is beneficial for the website, in order to make valid reports on the use of their website. | Persistent |
| rc::c | Gstatic | This cookie is used to distinguish between humans and bots. | Session |
| test_cookie | Doubleclick | Used to check if the user's browser supports cookies. | 1 day |
| cw_conversation | Chatwoot | This cookie lets Chatwoot persist the conversation when the contact navigates through the webpages or revisits the website later. | 1 year |
| cw_user_{identifier} | Chatwoot | This cookie is used to cache the contact details if a contact is identified via Chatwoot | 1 year |
| _chatwoot_session | Chatwoot | Used by the Chatwoot Super Admin panel to persist the user session. | Session |
| cw_d_session_info | Chatwoot | Used by the Agent Dashboard to store the logged-in user's session. | Session |
Functional Cookies
| Cookie ID | Provider | What is it used for? | Expires |
| CookieConsent | Chatwoot | Stores the user's cookie consent state for the current domain | 1 year |
| auth | Atoa | For authorization & maintaining user session | Session cookie. As long as the user session lasts. Incase of inactivity expires in 6hr |
| BankAccountStore | Atoa | Used for identifying the bank for which user has provided AIS access | Same as above |
Performance and Analytics Cookies
| Cookie ID | Provider | What is it used for? | Expires |
| lidc | Registers which server-cluster is serving the visitor. This is used in context with load balancing, in order to optimize user experience. | 1 day |
Targeting and Advertising Cookies
| Cookie ID | Provider | What is it used for? | Expires |
| #-# | YouTube | Used to track user’s interaction with embedded content. | Session |
| #-# | YouTube | Used to track user’s interaction with embedded content. | Session |
| __Secure-ROLLOUT_TOKEN | YouTube | Unclassified | 180 days |
| _fbp | Used by Facebook to deliver a series of advertisement products such as real time bidding from third party advertisers. | 3 months | |
| _fbp | Used by Facebook to deliver a series of advertisement products such as real time bidding from third party advertisers. | 3 months | |
| _ga | Used to send data to Google Analytics about the visitor's device and behavior. Tracks the visitor across devices and marketing channels. | 2 years | |
| _ga | Used to send data to Google Analytics about the visitor's device and behavior. Tracks the visitor across devices and marketing channels. | 2 years | |
| _ga_# | Used to send data to Google Analytics about the visitor's device and behavior. Tracks the visitor across devices and marketing channels. | 2 years | |
| _ga_# | Used to send data to Google Analytics about the visitor's device and behavior. Tracks the visitor across devices and marketing channels. | 2 years | |
| _gcl_au | Used by Google AdSense for experimenting with advertisement efficiency across websites using their services. | 3 months | |
| _gcl_au | Used by Google AdSense for experimenting with advertisement efficiency across websites using their services. | 3 months | |
| IDE | Doubleclick | Used by Google DoubleClick to register and report the website user's actions after viewing or clicking one of the advertiser's ads with the purpose of measuring the efficacy of an ad and to present targeted ads to the user. | 400 days |
| iU5q-!O9@$ | YouTube | Registers a unique ID to keep statistics of what videos from YouTube the user has seen. | Session |
| iU5q-!O9@$ | YouTube | Registers a unique ID to keep statistics of what videos from YouTube the user has seen. | Session |
| LAST_RESULT_ENTRY_KEY | YouTube | Used to track user’s interaction with embedded content. | Session |
| LAST_RESULT_ENTRY_KEY | YouTube | Used to track user’s interaction with embedded content. | Session |
| lastExternalReferrer | Detects how the user reached the website by registering their last URL-address. | Persistent | |
| lastExternalReferrerTime | Detects how the user reached the website by registering their last URL-address. | Persistent | |
| nextId | YouTube | Used to track user’s interaction with embedded content. | Session |
| nextId | YouTube | Used to track user’s interaction with embedded content. | Session |
| NID | Registers a unique ID that identifies a returning user's device. The ID is used for targeted ads. | 6 months | |
| pagead/1p-user-list/# | Tracks if the user has shown interest in specific products or events across multiple websites and detects how the user navigates between sites. This is used for measurement of advertisement efforts and facilitates payment of referral-fees between websites. | Session | |
| remote_sid | YouTube | Necessary for the implementation and functionality of YouTube video-content on the website. | Session |
| requests | YouTube | Used to track user’s interaction with embedded content. | Session |
| requests | YouTube | Used to track user’s interaction with embedded content. | Session |
| TESTCOOKIESENABLED | YouTube | Used to track user’s interaction with embedded content. | 1 day |
| VISITOR_INFO1_LIVE | YouTube | Tries to estimate the users' bandwidth on pages with integrated YouTube videos. | 180 days |
| YSC | YouTube | Registers a unique ID to keep statistics of what videos from YouTube the user has seen. | Session |
| yt.innertube::nextId | YouTube | Registers a unique ID to keep statistics of what videos from YouTube the user has seen. | Persistent |
| yt.innertube::nextId | YouTube | Registers a unique ID to keep statistics of what videos from YouTube the user has seen. | Persistent |
| ` | YouTube | Used to track user’s interaction with embedded content. | Persistent |
| ytidb::LAST_RESULT_ENTRY_KEY | YouTube | Used to track user’s interaction with embedded content. | Persistent |
| yt-remote | YouTube | Stores the user's video player preferences using embedded YouTube video | Session |
| _gcl_ls | Unclassified | Persistent | |
| nextId | YouTube | Used to track user’s interaction with embedded content. | Session |
| requests | YouTube | Used to track user’s interaction with embedded content. | Session |
| yt.innertube::nextId | YouTube | Registers a unique ID to keep statistics of what videos from YouTube the user has seen. | Persistent |
| topicsLastReferenceTime | Unclassified | Persistent |
5. Managing Cookies and Tracking Preferences
You can manage your cookie preferences on our website using the cookie banner provided when you first visit the site. You can also change your browser settings to block or delete cookies.
Please note:
- Disabling certain cookies may limit your access to some features of the Services
- Cookie settings may need to be configured separately across browsers and devices
6. Changes to This Policy
We may update this Cookie Policy from time to time. Any changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically to stay informed about how we use cookies.
7. Contact Us
If you have any questions about this Cookie Policy or how we use cookies and similar technologies, you can contact us at:
Email: hello@paywithatoa.co.uk
Live Chat: www.paywithatoa.co.uk
This Policy was last updated on 18 June, 2025