Legal

Cookie Policy

Which cookies and browser-storage items this website uses, why, and how to manage your preferences.

Effective date: 8 September 2026 · Last updated: 8 September 2026

About this policy

This policy lists every cookie and browser-storage item this website sets, explains why each one is used, and tells you how to manage your choices. We operate an EU prior opt-in consent model: analytics and marketing technologies are not loadedand do not run until you explicitly grant consent. Essential cookies work without consent because the website and checkout cannot function without them.

We never place applicant, passport, photograph, payment-card or application-reference information in cookies. Cookies are limited to consent state, checkout operation, fraud prevention and — only with your consent — anonymous site-usage measurement.

Cookie and storage inventory

The table below lists every cookie and browser-storage item this website sets. Items in the Analytics section are created only after you grant analytics consent; items in the Marketing section are not active (see the Marketing section below).

NameProviderPurposeTypeRetentionPartyConsent
pgv-cookie-consentukelectronictravelauthorisation.comRemembers your cookie-consent choice (which categories you accepted or rejected) so the banner does not reappear on every pageEssentialPersistent in localStorage until you change your choiceFirst-partyNo
Stripe checkout cookies (e.g. __stripe_mid, __stripe_sid)stripe.comOperate Stripe-hosted checkout, keep your checkout session intact across the redirect, and process your paymentEssential / PaymentUp to 1 year (session and persistent variants)Third-partyNo (essential for checkout)
Stripe fraud-prevention cookies & device signalsstripe.comStripe Radar fraud and risk checks — device and transaction signals used to prevent fraudulent paymentsEssential / PaymentSession and up to 1 yearThird-partyNo (essential for checkout)
_gaGoogleGoogle Analytics 4 — distinguish visitors and count anonymous page viewsAnalyticsUp to 2 yearsThird-partyYes
_ga_<container-id>GoogleGoogle Analytics 4 — maintain session state for this measurement streamAnalyticsUp to 2 yearsThird-partyYes

Unfinished application data: while you complete the application form, your entered details, passport upload and photo are held only in your browser’s memory and session storage so they survive the redirect to and from Stripe Checkout. This data is not stored in a cookie. If you close or refresh the page before Stripe confirms a successful payment, the data is permanently lost — no unfinished application is retained on our servers.

Essential cookies

Essential cookies and storage are required for the website and checkout to function and to remember your cookie preferences. They are always on and do not require consent. This website uses:

  • pgv-cookie-consent (first-party localStorage) — stores your cookie-consent choice so the banner does not reappear on every page load.
  • Stripe checkout cookies (third-party, stripe.com) — operate Stripe-hosted Checkout, keep your checkout session intact across the redirect, and process your payment. This website never receives or stores your full card number or CVV.
  • Stripe fraud-prevention technology (Stripe Radar, third-party, stripe.com) — device and transaction signals used for fraud and risk checks that protect you and us from fraudulent payments.
  • HTTPS / transport security — encryption in transit across the entire website; not a cookie, but part of the essential security layer.

These items are set only when needed (for example, Stripe cookies are set when you proceed to checkout) and cannot be disabled without breaking checkout and security.

Analytics cookies

With your consent, this website uses Google Analytics 4 (provider: Google) to measure how visitors use the site and to measure conversions, so we can improve the service.

  • _ga — distinguishes visitors and counts anonymous page views. Retention: up to 2 years.
  • _ga_<container-id> — maintains session state for this GA4 measurement stream. Retention: up to 2 years.

Consent required: Yes. Google Analytics 4 is not loadeduntil you grant analytics consent. Before consent, the GA4 script (gtag.js) is not downloaded, no GA4 cookies are set, and no analytics pings of any kind are sent — not even cookieless measurement pings. When you grant consent, GA4 loads, the cookies above are set, and we send only sanitized, path-only page views (no query strings, application references, emails, names, passport numbers or form answers). When you reject or withdraw analytics consent, we update Google Consent Mode to denied, stop sending analytics events, and remove the GA4 cookies listed above from your browser.

We never send applicant, passport, photograph, payment-card or application-reference information to Google Analytics.

Marketing cookies

Marketing technologies are off by default. No marketing or advertising tags — including Google Ads, Meta (Facebook) Pixel, LinkedIn Insight Tag, TikTok Pixel or similar — are installed or active on this website at present. The consent banner includes a Marketing switch so that, if we add a genuinely installed marketing technology in the future, it will load only after you grant marketing consent. Until then, granting marketing consent has no effect because no marketing technology is present.

Managing your preferences

Use the cookie banner to Accept All, Reject Non-Essentialor Manage Preferences at any time. You can also reopen your cookie preferences using the “Cookie preferences” link in the website footer, or clear cookies in your browser settings. Withdrawing analytics consent stops GA4 measurement and removes the GA4 cookies listed above; essential checkout and security cookies continue to operate.

This legal wording is provided for information and is marked for professional Netherlands/GDPR legal review. It does not constitute legal advice.