Article 1 – Who we are
1.1 Cookie Confirm is operated by Hashtag SEM Marketing Management FZCO, registered in the United Arab Emirates under license number 57310 ("we", "us"). We are responsible for the personal data described in this privacy policy.
1.2 Questions about your privacy or this policy? Email us at support@cookieconfirm.com.
1.3 This policy covers our website cookieconfirm.com, our communication with you and the accounts of our customers. For the consent data that our customers collect on their own websites with Cookie Confirm, see article 5.
Article 2 – Which data we collect
2.1 Visiting our website: technical data that your browser sends, such as your IP address, browser type, the pages you visit and the time of your visit. Our hosting and delivery providers process this data to show you the website and keep it secure.
2.2 Cookies and similar technologies: with your consent, we use analytics and marketing tools that collect data about how you use our website. More about this in article 4.
2.3 Chat and email: when you chat with us or send us an email, we process your name, email address and the content of your messages.
2.4 Partner applications: when you apply to become a partner, we process your company name, website, first and last name, email address, phone number (if you give it), the number of clients, the partnership you choose and your comments.
2.5 Demo appointments: when you plan a demo, you do so in Calendly. Calendly then shares your name, email address and the details you enter with us.
2.6 Customer accounts: when you use Cookie Confirm, we process your account details (name, email address, company), the websites you add, your settings and your billing and payment details.
Article 3 – Why we use your data
3.1 We use your data only for these purposes, each with its legal basis under the GDPR:
- To show and secure our website (legitimate interest).
- To answer your questions by chat or email (legitimate interest, or preparing an agreement when you ask about our services).
- To handle partner applications and demo appointments (taking steps at your request before entering into an agreement).
- To provide our service to customers, including support and invoicing (performance of the agreement).
- To analyse and improve our website and our marketing (your consent, see article 4).
- To meet legal obligations, such as keeping our financial records (legal obligation).
3.2 We do not sell your personal data, and we do not use it for automated decisions that significantly affect you.
Article 4 – Cookies and your consent
4.1 We ask for your consent with our own cookie banner, Cookie Confirm. Necessary cookies keep the website working; analytics and marketing cookies are only placed after you agree.
4.2 With your consent we use tools from Google (Google Analytics and Google Ads), Microsoft Clarity, Meta (Meta Pixel) and LinkedIn (Insight Tag). They help us understand how visitors use our website and measure our advertising.
4.3 You can change or withdraw your consent at any time in the cookie settings of the banner. Withdrawing consent does not affect the processing that took place before.
Article 5 – Consent logs we keep for our customers
5.1 Our customers use Cookie Confirm to ask their own visitors for consent. For that data, our customer is responsible and we process it on their behalf, under our Data Processing Agreement (DPA) including the Standard Contractual Clauses (SCCs).
5.2 A consent log contains a partial IP address, the user agent, the country, the consent status and whether consent was explicit or implicit. It is stored for up to one year, unless agreed otherwise.
5.3 Are you a visitor of one of our customers' websites with a question about your consent? Please contact that website first.
Article 6 – Who we share your data with
6.1 We only share your data with parties that help us run our website and service, and only as far as needed:
- Hosting and infrastructure providers, such as Amazon Web Services, that host our website, our servers and the forms you send.
- Analytics and marketing tools from Google, Microsoft, Meta and LinkedIn, after your consent.
- Sleak, which provides the chat on our website.
- Calendly, which we use for demo appointments.
- Payment and accounting providers, for our customers' invoices and payments.
6.2 We make agreements with these parties about protecting your data. We may also share data when the law requires it.
Article 7 – International transfers
7.1 Some of the parties we work with, and our company itself, are located outside the European Economic Area. When your data is transferred there, we make sure it is protected, for example with the Standard Contractual Clauses of the European Commission.
Article 8 – How long we keep your data
8.1 We do not keep your data longer than needed for the purpose we collected it for:
- Chat messages, emails and partner applications: as long as needed to handle them and the cooperation that may follow.
- Customer data: while your account is active. After you end your subscription, the data of your websites is deleted from active systems within 30 days, unless the law requires us to keep it.
- Consent logs: up to one year, see article 5.
- Financial records: as long as the law requires.
- Cookies: as long as described in our cookie banner.
Article 9 – Security
9.1 We take appropriate technical and organisational measures to protect your data against loss and unauthorised access, such as encrypted connections (HTTPS) and limited access to personal data.
Article 10 – Your rights
10.1 You have the right to access your data, to have it corrected or deleted, to restrict or object to its processing and to receive it in a portable format. Where we rely on your consent, you can withdraw it at any time.
10.2 To use your rights, email us at support@cookieconfirm.com. We may ask you to confirm your identity and we reply within one month.
10.3 Do you think we are not handling your data correctly? Let us know, so we can solve it together. You also have the right to file a complaint with the data protection authority in your country.
Article 11 – Changes to this policy
11.1 We may update this privacy policy when our website, our service or the law changes. The latest version is always on this page. This version was last updated in October 2026.