Privacy Policy

Last updated: 5 November 2026

1. Introduction

At Zivra, we respect your privacy and are committed to protecting your personal data.

This Privacy Policy explains how Zivra collects, uses, stores and shares personal information when you visit our website, use our mobile application or interact with our services.

2. Who Is Responsible for Your Data?

The data controller for personal data processed for Zivra's own platform operations is:

Zivra B.V.
Keizersgracht 520
1017 EK Amsterdam
The Netherlands
KVK number: 42200298

Email: privacy@getzivra.com
Website: https://getzivra.com

For certain financial services, regulated financial partners may act as independent data controllers. Their own privacy notices will apply to the processing they undertake.

Where Zivra processes personal data on behalf of another organisation, it may act as a data processor.

3. Personal Data We Collect

Depending on how you use Zivra, we may collect the following categories of information.

A. Identity Information

• Full name.
• Date of birth.
• Nationality, where required.
• Residential address.
• Identity verification information.

B. Contact Information

• Email address.
• Telephone number.
• Communication preferences.

C. Rental Information

• Rental property information.
• Landlord or property manager details.
• Rental amount.
• Payment frequency.
• Scheduled payment dates.
• Relevant payment references.

D. Financial and Transaction Information

Where relevant to the services you use:

• Payment account identifiers.
• Transaction amounts and dates.
• Payment statuses.
• Card transaction information.
• Payment recipients.
• Rewards earned through eligible transactions.

Sensitive payment credentials and authentication information are handled in accordance with the relevant financial partner's security arrangements.

E. Technical Information

• IP address.
• Device information.
• Browser type.
• Operating system.
• Application usage information.
• Security and diagnostic logs.

F. Marketing and Communications

• Newsletter subscriptions.
• Marketing preferences.
• Customer support correspondence.
• Survey and feedback responses.

4. How We Use Your Information

We process personal data for the following purposes:

We only process personal data where we have an appropriate legal basis.

5. Sharing Your Information

We may share relevant personal data with the following categories of recipients.

Financial Infrastructure Partners

Regulated banks, electronic money institutions and payment service providers may receive information necessary to:

• Verify your identity.
• Open and maintain payment accounts.
• Issue payment cards.
• Process payment transactions.
• Meet financial crime prevention requirements.

The identity of the relevant provider will be disclosed to customers in connection with the applicable financial services.

Technology and Infrastructure Providers

We may use service providers for:

• Cloud hosting.
• Database management.
• Authentication.
• Analytics.
• Customer support.
• Security and fraud prevention.

Merchant Partners

Where you participate in the rewards programme, relevant transaction and reward information may be shared with participating merchants where necessary to administer rewards or redemptions.

Authorities

We may disclose personal information where required by law or where necessary to protect legal rights and prevent fraud.

We do not sell personal data to third parties.

6. International Data Transfers

Where personal data is transferred outside the European Economic Area, we ensure that an appropriate legal transfer mechanism is in place.

This may include:

• An adequacy decision by the European Commission.
• Standard Contractual Clauses.
• Additional safeguards where required.

7. Data Retention

We retain personal information only for as long as necessary for the purposes described in this Privacy Policy.

Retention periods depend on:

• The nature of the information.
• The purpose for which it is processed.
• Applicable legal and regulatory obligations.
• Legitimate business and security requirements.

Financial partners may have separate statutory retention obligations for financial and identification records.

8. Your Privacy Rights

Under the GDPR, you may have the right to:

• Access your personal information.
• Correct inaccurate information.
• Request deletion of personal information.
• Restrict certain processing.
• Object to processing based on legitimate interests.
• Request data portability.
• Withdraw consent where processing is based on consent.

You may exercise these rights by contacting privacy@getzivra.com.

We will respond in accordance with applicable data protection law.

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Website: https://autoriteitpersoonsgegevens.nl/

9. Security

We implement appropriate technical and organisational safeguards to protect personal data against unauthorised access, alteration, disclosure or destruction.

These measures may include encryption, access controls, authentication, monitoring and secure infrastructure.

No system can guarantee absolute security.

10. Children's Privacy

Zivra is intended for individuals aged 18 and above.

We do not knowingly provide consumer financial services to children.

11. Cookies

Our website may use functional, analytical and other cookies.

Further details are available in our Cookie Policy.

12. Third-Party Services

Our platform may integrate with services operated by third parties.

Those services may process personal information under their own privacy policies and contractual arrangements.

We encourage users to review the relevant privacy notices.

13. Changes to This Policy

We may update this Privacy Policy to reflect changes in our services, technology or legal obligations.

The latest version will always be published on our website.

14. Contact

Zivra B.V.
Keizersgracht 520
1017 EK Amsterdam
The Netherlands

Privacy enquiries: privacy@getzivra.com
General enquiries: hello@getzivra.com

Website: https://getzivra.com