Privacy policy — CookieYes

Cited by

Facts read from this source

• Entity Report an error

  “the data controller is CookieYes Limited of 3 Warren Yard Warren Park, Wolverton Mill, Milton Keynes, MK12 5NW, United Kingdom.”

• Company number Report an error

  “CookieYes Limited is registered in the UK. Company no. 13074037.”

• EU representative Report an error

  “Euverify Ltd (Ireland) Unit 3D North Point House North Point Business Park New Mallow Road Cork T23 AT2P Ireland Email: gdpr@euverify.com”

• Dsar portal Report an error

  “To submit a Data Subject Access Request (DSAR), data deletion request, or any other GDPR-related inquiry, please use our secure portal at: https://gdpr.euverify.com/verify/2ea0ee81-7313-46b6-ae78-80863e25f8d6”

• UK authority Report an error

  “For UK individuals the data protection authority is: The Information Commissioner's Office at, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, England.”

• Last updated Report an error

  “This Privacy Policy was last updated on 10th of September, 2025”

• International transfers scc Report an error

  “We will only transfer UK personal data outside of the UK to: (i) countries deemed by the ICO to provide an adequate level of protection for UK personal data; or (ii) entities located outside of the UK with whom standard contractual terms approved for use in the UK which give the transferred personal data the same protection as it has in the UK have been entered into, for example the International Data Transfer Addendum, (IDTA) to the European Commission's standard contractual clauses for international data transfers or binding corporate rules (BCRs); or (iii) entities located in the USA certified under the UK Extension to the EU-U.S. DPF; or (iv) any entity located outside of the UK that is subject to any other transfer mechanism, bespoke contract, approved code of conduct or certification scheme approved by the ICO.”

• EU transfers scc Report an error

  “We will only transfer EU personal data outside of the EEA to: (i) countries deemed by the European Commission to provide an adequate level of protection for EU personal data; or (ii) entities located outside of the EEA with whom standard contractual terms approved for use in the EU which give the transferred personal data the same protection as it has in the EU have been entered into, for example the European Commission's standard contractual clauses for international data transfers, (EU SCCs) or binding corporate rules (BCRs); or (iii) entities located in the USA certified under the EU-U.S. DPF; or (iv) any entity located outside of the EEA that is subject to any other transfer mechanism, bespoke contract, approved code of conduct or certification scheme approved by the European Commission.”

• Swiss transfers Report an error

  “We will only transfer Swiss personal data outside of Switzerland to: (i) countries deemed by the Swiss Data Protection Authority to provide an adequate level of protection for Swiss personal data; or (ii) entities located outside of Switzerland with whom standard contractual terms approved for use in Switzerland which give the transferred personal data the same protection as it has in Switzerland have been entered into, for example the European Commission's standard contractual clauses for international data transfers, (EU SCCs) or binding corporate rules (BCRs); or (iii) entities located in the USA certified under the Swiss-U.S. DPF”

• DPA with subprocessors Report an error

  “We enter into data processing agreements with all Third Party Suppliers who process personal data, which include obligations equivalent to those set out in our Data Processing Addendum.”

• Named Report an error

  “Technical Data: from analytics providers, advertising networks and search information providers such as Google, Hotjar.”

• Stripe Report an error

  “Contact, Transaction and Financial Data: from providers of technical, payment and delivery services such as Stripe.”

• Zendesk Report an error

  “Identity and Contact Data: from providers of chat/communication services with customers including via email such as Zendesk.”

• Intercom Report an error

  “We use Intercom for live chat customer support.”

• Sub processor list on request Report an error

  “as set out in detail in our Sub Processors List (which you can get by contacting us directly)”

• No special category data Report an error

  “We do not collect, store and/or use special category data about you.”

• No sale of data Report an error

  “We will not sell or rent your personal data to anyone.”

• Support dnt Report an error

  “We support Do Not Track ("DNT").”

• Retention Report an error

  “We delete your personal data immediately upon closure of your account. However, we retain personal data for as long as reasonably necessary to fulfil the purposes for which it was provided or collected”

• Rights response time Report an error

  “We will respond to such queries within 30 days and deal with requests we receive from you, in accordance with the provisions of the applicable data protection law.”

• Legitimate interest assessment Report an error

  “Before relying on legitimate interests we conduct a Legitimate-Interest Assessment ("LIA") — a three-part test”

• Openai conversion data Report an error

  “where you have accepted the Advertisement category in our cookie consent banner, we may share conversion data (including purchase amount, currency, and an ad-click attribution reference) with OpenAI for the purpose of measuring the effectiveness of advertisements served on the ChatGPT platform.”

• Jurisdiction Report an error

  “For the purposes of EU and UK data protection laws and any applicable national implementing laws, regulations and secondary legislation relating to the processing of personal data (together "Data Protection Law"), the data controller is CookieYes Limited”

• Age restriction Report an error

  “This Site and the Services are not intended for and shall not be used by anyone under the age of 18.”

• No contract Report an error

  “It is not a contract and does not create any legal rights or obligations beyond those required by applicable data protection laws.”

• Third party marketing opt in Report an error

  “We will get your express opt-in consent before we share your personal data with any third party for marketing purposes.”

• Rights available Report an error

  “Access to your personal data. This enables you to request a copy of the personal data we hold about you and to check that we are lawfully processing it. Rectification or deletion of your personal data. This enables you to request that incomplete or inaccurate data we hold about you is corrected, although we may need to verify the accuracy of the new data you provide to us. A restriction on the processing of your personal data. This enables you to ask us to suspend the processing of your personal data: (i) if you want us to establish the personal data's accuracy; (ii) where our use of the personal data is unlawful but you do not want us to erase it; (iii) where you need us to hold the personal data even if we no longer require it as you need it to establish, exercise or defend legal claims; or (iv) you have objected to our use of your personal data but we need to verify whether we have overriding legitimate grounds to use it. Object to the processing of your personal data. Where we are relying on a legitimate interest (or those of a third party) as the legal basis for that particular use of your personal data (including carrying out profiling based on our legitimate interests). In some cases, we may demonstrate that we have compelling legitimate grounds to process your personal data which override your right to object. A transfer of your personal data (data portability) in a structured, machine readable and commonly used format to a third party. This right only applies to automated personal data which you initially provided consent for us to use, or where we used the personal data to perform a contract with you. Withdraw your consent to us processing your personal data, at any time.”

• Fees for requests Report an error

  “You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive.”

• Controller vs processor scope Report an error

  “This Privacy Policy does not apply to any data you provide to us when we process personal data on your behalf as your data processor i.e. where we process customer data within the cloud service we provide to you, as a BTB service provider.”

• Accessible worldwide Report an error

  “Our Services are global and your personal data may be stored and processed in any country where we have operations, our staff are located.”

Scores citing this record

• The Agency Developer European sovereignty
• The Data Protection Officer European sovereignty
• The In-House Lawyer European sovereignty
• The Publisher Marketing Lead European sovereignty
• The Skeptic European sovereignty
• The WordPress Webmaster European sovereignty