Privacy Policy

This Privacy Policy applies to personal data we collect in connection with: (a) our website located at cookiewave.com and any other website that links to this Privacy Policy (collectively, the "Site"); (b) the CookieWave account and dashboard our customers ("Customers") use to configure and manage the CookieWave consent management platform (the "Service"); and (c) our sales, marketing, and support communications with Customers and prospective customers.

This Privacy Policy does not apply to personal data that CookieWave processes on behalf of a Customer, as a processor or service provider, through the Service embedded on a Customer's own website — for example, consent records collected via a Customer's cookie banner. That processing is governed by our agreement with the applicable Customer, including our Data Processing Agreement ("DPA"), and by that Customer's own privacy policy. If you are a visitor to a website that uses CookieWave and have questions about how your personal data is handled on that website, please contact the operator of that website directly.

• Account and billing data. When you create an Account, we collect your name, work email address, and company name. Payment and billing details are collected and processed by our payment processor, Stripe, Inc.; CookieWave does not itself store full payment card numbers.
• Communications data. When you contact us, including at [email protected], we collect your name, email address, the content of your message, and any other information you choose to provide.
• Site usage data. When you visit the Site, we and our analytics and advertising partners automatically collect technical and usage information through cookies and similar technologies, including your IP address, browser and device type, pages viewed, referring and exit pages, and interaction data. See Section 4 (Cookies and Tracking Technologies).
• Marketing data. If you sign up to receive marketing communications from us, we collect your email address and any preferences you provide.

We collect personal data:

• directly from you, when you create an Account, request information, or contact support;
• automatically, through cookies and similar technologies when you visit the Site; and
• from third parties, including our payment processor (Stripe, which confirms successful payment) and our analytics and advertising partners (Google, LinkedIn, and Meta, which provide us with aggregated campaign performance information).

The Site uses CookieWave's own consent banner to let you choose which non-essential cookies to allow. You can review and change your preferences at any time using the cookie settings link available on the Site.

• Necessary cookies. Required for the Site and the cookie preference manager itself to function, and cannot be disabled.
• Analytics cookies. We use Google Analytics to understand Site traffic and usage patterns.
• Advertising cookies. We use the LinkedIn Insight Tag and the Meta Pixel to measure the performance of our advertising campaigns and, where you consent or as otherwise permitted by law, to show you more relevant ads on those platforms. See Section 11 (Do Not Sell or Share My Personal Information) for information on opting out.

The cookie checker on the Site is protected by Cloudflare Turnstile, which tells human visitors apart from automated traffic without asking you to solve a puzzle. To do that, Turnstile reads limited browser and device signals and may store data in your browser. It runs only on that page, it is necessary for the tool to be offered at all, and the data is not used to profile you or to show you advertising. Cloudflare processes it as described in the Cloudflare Turnstile Privacy Addendum.

The Site does not currently respond differently to browser "Do Not Track" signals, but honors the Global Privacy Control ("GPC") signal as described in Section 11.

We use personal data to:

• provide, maintain, and improve the Service;
• create and administer your Account, process payments, and provide customer support;
• communicate with you about the Service, including updates, security notices, and administrative messages;
• send marketing communications about CookieWave, where permitted, which you may opt out of at any time;
• measure and improve our marketing and advertising, including through Google Analytics, LinkedIn, and Meta;
• detect, prevent, and address fraud, abuse, security incidents, and technical issues; and
• comply with legal obligations, and establish, exercise, or defend legal claims.

Where the GDPR applies to our processing of your personal data, we rely on one or more of the following legal bases for the purposes above: performance of a contract with you, our legitimate interests (such as operating, securing, and marketing the Service, balanced against your rights), your consent (for example, for advertising cookies, where required), and compliance with a legal obligation. Where we rely on consent, you may withdraw it at any time as described in Section 4.

We disclose personal data to:

• Service providers, including Amazon Web Services (AWS) for infrastructure hosting, Cloudflare for content delivery, network security and bot protection on the cookie checker (Cloudflare Turnstile — see Section 4 and the Cloudflare Turnstile Privacy Addendum), and Stripe for payment processing, each acting on our instructions;
• Analytics and advertising partners, including Google, LinkedIn, and Meta, which may act as independent controllers of the information collected through their respective tags on the Site, subject to their own privacy policies;
• Professional advisors, such as legal, accounting, or financial advisors, as needed;
• Parties to a corporate transaction, such as a merger, acquisition, financing, or sale of assets, in which personal data may be transferred as part of that transaction; and
• Regulators, courts, and other third parties where required by law, regulation, legal process, or governmental request, or where necessary to protect the rights, property, or safety of CookieWave, our Customers, or others.

CookieWave does not sell personal data for monetary consideration.

CookieWave is based in the United States, and personal data we collect is processed in the United States. It may also be transferred to, stored, and processed by our service providers in other countries. Where we transfer personal data from the European Economic Area, the United Kingdom, or Switzerland to the United States or another country not deemed by the relevant authority to provide an adequate level of protection, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses and, where applicable, the UK International Data Transfer Addendum, to protect that data.

We maintain administrative, technical, and organizational safeguards designed to protect personal data against unauthorized access, disclosure, alteration, or destruction, including encryption of data in transit, access controls, and monitoring of our infrastructure. No method of transmission or storage is completely secure, and we cannot guarantee the absolute security of personal data.

• Account and billing data is retained for as long as Customer maintains an active Account and, following termination, in accordance with our Terms of Service.
• Site usage data collected through analytics and advertising cookies is retained for as long as necessary for the purposes described above, and no longer than the default retention periods applied by our analytics and advertising providers (typically no more than 26 months), unless a longer period is required by law.
• Communications data is retained for as long as necessary to address your inquiry and for a reasonable period afterward for record-keeping, unless you request earlier deletion and applicable law permits it.
• Marketing data is retained until you unsubscribe or as long as necessary to carry out our marketing activities.

If you are located in the EEA, UK, or Switzerland, you have the right to request access to, rectification of, or erasure of your personal data; to restrict or object to our processing of your personal data; to receive your personal data in a portable format; and to withdraw consent at any time where we rely on consent. You also have the right to lodge a complaint with your local data protection supervisory authority, such as the Information Commissioner's Office (ICO) in the United Kingdom or the supervisory authority in your EU member state of residence.

If you are a California resident, the categories of personal data we have collected about consumers in the preceding 12 months include identifiers (such as name and email address), internet or other electronic network activity (such as browsing and cookie data), commercial information (such as subscription and billing history, processed by Stripe), and professional or employment-related information (such as job title and company name, where provided). Subject to certain exceptions, you have the right to know what personal information we collect, use, and disclose about you; to request deletion of your personal information; to request correction of inaccurate personal information; to opt out of the sale or sharing of your personal information; to limit the use of sensitive personal information; and to not receive discriminatory treatment for exercising these rights. See Section 11 for how to opt out of sharing.

If you are a resident of another U.S. state with a comprehensive consumer privacy law (such as Virginia, Colorado, Connecticut, or others), you may have similar rights to those described above.

To exercise any of these rights, contact us at [email protected]. We may need to verify your identity before responding to your request.

CookieWave does not sell personal information for monetary consideration. However, our use of advertising cookies on the Site — specifically the LinkedIn Insight Tag and the Meta Pixel — may constitute "sharing" of personal information for cross-context behavioral advertising under the California Consumer Privacy Act, as amended by the CPRA. You can opt out of this sharing at any time by:

• using the cookie preference manager available through the CookieWave banner on the Site to disable Advertising cookies;
• enabling the Global Privacy Control ("GPC") signal in a supported browser or browser extension, which CookieWave will honor as a valid opt-out request for your browser on the Site; or
• emailing [email protected] with the subject line "Do Not Sell or Share."

The Site and Service are intended for businesses and professionals and are not directed to children. CookieWave does not knowingly collect personal data from children under the age of 16. If we become aware that we have collected personal data from a child under 16 without verifiable parental consent, we will take steps to delete it.

In accordance with Article 27 of the GDPR, CookieWave has appointed the following representative in the European Union:

Cubio Digital s.r.o.
Jaurisova 515/4, Michle
140 00 Praha 4
Czech Republic

You may contact our EU representative on matters related to CookieWave's processing of your personal data under the GDPR, in addition to contacting CookieWave directly at [email protected]. CookieWave has not separately appointed a representative under the UK GDPR at this time; residents of the United Kingdom may direct inquiries to CookieWave at [email protected].

The Site may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites, and we encourage you to review the privacy policy of any website you visit.

We may update this Privacy Policy from time to time. We will post the updated version on this page and update the "Last updated" date above. Where a change is material, we will provide additional notice, such as by email or a notice on the Service.

If you have questions about this Privacy Policy or our data practices, contact us at:

CookieWave, LLC
221 W 9th St PMB 1027
Wilmington, DE 19801
[email protected]