Privacy policy

Article 1 – Who we are

1.1 Cookie Confirm is operated by Hashtag SEM Marketing Management FZCO, registered in the United Arab Emirates under license number 57310.

1.2 Contact: support@cookieconfirm.com

Article 2 – Data we collect

2.1 We collect the following categories of personal data.

• Name, email address, and company information, collected during account registration and payment processing.
• IP address, browser type, device information, and pages visited, collected through our website when you have given consent for analytics cookies.
• Partial IP address, user agent, country, consent status, and whether consent was given explicitly or implicitly, collected through the consent log when our banner is used on a customer website.

2.2 This information is collected through account registration, payment processing, and use of the Cookie Confirm platform, either by you directly or by visitors to a website that uses our consent banner.

2.3 When we process consent log data on behalf of a customer, we act as a processor and the customer remains the controller for their own website visitors.

Article 3 – How we use your data

3.1 We use your personal data for the following purposes.

• To deliver and maintain our services.
• To process payments and send invoices.
• To provide customer support and communicate service related updates.
• To improve our services based on usage data.
• To detect and prevent misuse, fraud, or abuse of the platform.

Article 4 – Legal bases for processing

4.1 We process personal data on the following legal bases under the GDPR.

• Contractual necessity, to provide our services, process payments, and send invoices.
• Legal obligation, to comply with tax and financial regulations.
• Legitimate interests, to improve our services, secure our systems, and prevent fraud or abuse.
• Consent, for analytics cookies and promotional emails where applicable. You can withdraw consent at any time.

Article 5 – Data sharing

5.1 We share data with trusted third parties only where necessary to operate our services.

• Paddle, for processing payments.
• Google, for analytics and tag management.
• Our email and support tooling, for customer communication.
• Hosting and infrastructure providers, to run our platform on European infrastructure.

5.2 We do not sell your personal data. Data processing agreements are in place with all relevant third parties.

Article 6 – International data transfers

6.1 Hashtag SEM Marketing Management FZCO is established outside the European Economic Area. When your data is processed or accessed from outside the EEA, we rely on appropriate safeguards such as the Standard Contractual Clauses approved by the European Commission to ensure your data receives an equivalent level of protection.

6.2 Our data processing agreement, including the SCCs, is available for customers who want to review it via this link.

Article 7 – Data protection

7.1 We take the following measures to protect personal data.

• Collecting only the data we actually need.
• Using encrypted connections and secure infrastructure hosted in Europe.
• Working only with third parties that meet appropriate security and compliance standards.
• Limiting internal access to personal data to authorized personnel only.

Article 8 – Data retention

8.1 Account and billing data is retained for as long as your account is active, and afterward for the period required by applicable tax and accounting regulations.

8.2 Website and configuration data is deleted from our active systems within 30 days after account termination, unless we are legally required to retain it longer.

8.3 Consent log data, meaning the records created by the banner on a customer website, is retained for up to one year unless a customer has agreed to a different retention period with us.

8.4 Analytics data collected through our own website is retained for a maximum of 14 months.

8.5 When data is no longer needed for these purposes, it is securely deleted or anonymized.

Article 9 – Your rights under GDPR

9.1 You have the following rights regarding your personal data.

• Right to access, to request a copy of the data we hold about you.
• Right to rectification, to request correction of inaccurate or incomplete data.
• Right to erasure, to request deletion of your data in certain circumstances.
• Right to restrict processing, to request that we limit how your data is used.
• Right to data portability, to request your data in a structured, machine readable format.
• Right to object, to processing based on legitimate interest or for direct marketing.
• Right to withdraw consent, at any time, without affecting processing carried out before the withdrawal.

9.2 To exercise any of these rights, contact us at support@cookieconfirm.com. We will respond within one month.

9.3 If you believe your data protection rights have been violated, you can file a complaint with your local Data Protection Authority.

Article 10 – Cookies and tracking technologies

10.1 Our website uses cookies for functionality, analytics, and improving our services.

10.2 Non essential cookies, such as analytics cookies, are only activated with your prior consent, which you can manage at any time through our own cookie banner.

Article 11 – Log files and security monitoring

11.1 To keep our services secure, stable, and reliable, we automatically collect technical data in log files. This may include your IP address, browser type, device information, referring URLs, pages visited, and timestamps of access.

11.2 We use this data to detect and prevent fraud and abuse, apply rate limiting, monitor system performance, and diagnose technical issues.

11.3 This processing is based on our legitimate interest in keeping our platform secure, under Article 6(1)(f) GDPR. Log data is stored securely and retained only as long as necessary for these purposes.

Article 12 – Communication preferences

12.1 As an active customer, you will receive essential service updates and account related messages, for example about billing or changes to the platform. These messages are necessary for delivering our services and cannot be opted out of while your account is active.

12.2 You can unsubscribe from promotional or marketing emails at any time using the unsubscribe link included in those messages, or by contacting support@cookieconfirm.com.

Article 13 – Third party links

13.1 Our website may occasionally link to third party products or services. These sites have their own, independent privacy policies, and we are not responsible for their content or practices.

Article 14 – Changes to this policy

14.1 We may update this Privacy Policy from time to time, for example when we add new features or when regulations change. The date at the top of this page shows when it was last updated.

14.2 For significant changes, we will also notify you by email or through a notice on our website.

Article 15 – Contact information

15.1 If you have questions about this Privacy Policy or how we handle your personal data, contact us at support@cookieconfirm.com.