No public evidenceSpreedly and GDPR
CertReports found no public GDPR evidence for Spreedly as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
Evidence
- Kind
- listing
- Issued or listed
- 29 Nov 2016
- Expires or valid through
- 28 Apr 2027
- Scope
- Spreedly provides a suite of web-based payments orchestration services through its proprietary application programming interface that enable its customers to validate, tokenize, and vault payment methods and then transact with one or more of the many payment gateways and other third-party payment service providers. We collect information in several ways: (i) when you send us an e-mail or communicate via any other electronic means we will store the address and the conversation history; (ii) when you register via our Website we will collect and store certain personal data that may include your address, phone numbers, credit card numbers, IP address, location, information about your computer or device and other standard web log information; (iii) when a customer uses a checkout process on a merchant’s website that is integrated to Spreedly, we will gather and may store payment card data, billing details and other personal data required to process the transaction. We refer to the information we collect generally as “personal information”, which includes any information that can be used to identify an individual, or any anonymous information that is linked to a specific individual. Any information that is aggregated or becomes anonymous such that it cannot be reasonably associated with an individual shall not be considered personal information. The types of personal information we collect and our use of that personal information will depend on whether you are a website user, merchant or end customer. With respect to personnel of the customer, we may collect information such as name, employer, address, e-mail, telephone number, location and other contact details. This information is shared with Spreedly personnel as part of regular business operations. With respect to customers of Spreedly's Customer, we may collect name, address, e-mail, telephone number, location, and billing and payment details such as bank account and credit or debit card numbers. This data may be shared with Spreedly personnel or Spreedly's subprocessors as part of the execution of Spreedly's service offering.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 17 Sep 2026 | Spreedly, Inc: Active: EU-US Certification, SW-US Certification, UK Extension Certification | Live pagesha256 4f0ee9d423 |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is Spreedly GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the Payments category) whose GDPR row is verified or vendor-stated, ranked by similarity.
