At Coolset, we value your privacy and are committed to protecting your personal information. This Privacy policy outlines how we collect, use, disclose, and safeguard your data when you interact with our services. By accessing or using our services, you agree to the practices described in this policy.
When you sign up for our services, we may collect personal information such as your name, email address, job title, and company information to create and manage your account.
To provide the services, we may process financial and organizational information provided by you or your organization. This may include financial transactions, invoices, receipts, policies, governance structures, ownership details, operational metrics, compliance records, and related information.
We may collect information about how you interact with our services, such as your IP address, browser type, device information, pages visited, and actions taken on our platform.
We use cookies and similar technologies to enhance your user experience and collect certain information about your interactions with our website and services. You can manage your cookie preferences through your browser settings. We use both functional cookies and analytical cookies.
We have a functional cookie that has a lifetime of one week and remembers whether or not website visitors have accepted our terms of service.
Our website uses Google Analytics which allows us to improve our website experience and measure the effectiveness of certain parts of it. We have three main cookies which are used to distinguish between website visitors and how they interact with our website. The lifetime of these cookies varies between 1 day and 2 years.
We use the information you supply to us for the purpose of delivering the services detailed within the Order Form.
We may use your contact information to communicate important updates, progress reports and news related to our platform and services.
We analyze aggregated and anonymized usage data to improve our platform's functionalities, enhance our services and optimize the user experience for our customers.
We may process your data to comply with legal obligations, industry standards, and respond to lawful requests from government authorities related to the services.
We retain your data for a period of 24 months after the termination of your contract. This retention period allows us to comply with legal obligations, handle disputes, and provide historical data to assist you if needed.
We recognize the critical nature of the data we manage. All customer data, including financial and organizational details, is encrypted both at rest and in transit. We use industry-standard encryption methods to safeguard your information during storage and transmission.
Access to customer data is limited to authorized personnel who require it for providing the services. Our access controls are designed to prevent unauthorized access, modification, or disclosure of your data.
Your data is stored on servers located within the European Union (EU) that are hosted by reputable cloud service providers, adhering to strict security standards and certifications. These servers are protected by robust security measures to prevent unauthorized physical access.
We only collect and retain the data necessary for the provision of the services. We do not store personal data beyond the required retention period, as outlined in section 3: Data retention.
Our employees undergo regular data protection and security awareness training. They are educated about the significance of data privacy and confidentiality, with a strong emphasis on their duty to treat customer data with the highest level of care.
In cases where we engage third-party vendors to support our services, we conduct a thorough vetting process to ensure their security practices align with our high standards. These vendors are bound by contractual obligations to protect customer data and use it solely for the purposes outlined in the service agreement.
We have implemented a comprehensive incident response plan to address any security breaches or data incidents promptly. In the unfortunate event of a data breach, we will notify affected customers and the relevant authorities as required by applicable laws and regulations.
We prioritize data anonymization in the services. Aggregated and anonymized data may be used for research and industry benchmarking purposes without disclosing individual company-specific information.
As a user of our platform and services, you are responsible for maintaining the security of your account credentials. Please ensure that you keep your login information confidential and refrain from sharing it with unauthorized individuals.
While we take all reasonable measures to protect your data, no data transmission or storage method can be guaranteed to be 100% secure. If you have any concerns or questions about the security of your data, please contact us at security@coolset.com.
We may share your information with trusted third-party service providers who assist us in delivering our services. These third parties are authorized to use your personal information only as necessary to provide these services to us and are bound by confidentiality agreements.
We may share your data to comply with legal obligations or in response to lawful requests from government authorities.
In the event of a merger, acquisition, or sale of our assets, some or all information may be shared or transferred, subject to appropriate and commercially reasonable confidentiality arrangements.
You have the right to access, rectify, erase, restrict, or object to the processing of your personal information under applicable law. To exercise any of these rights, please contact us at info@coolset.com.
We may update this Privacy policy from time to time to reflect changes in our practices or legal requirements. We encourage you to review the policy periodically for any updates.
If you have any questions, concerns, or feedback regarding this Privacy policy or our data practices, please contact us at info@coolset.com.
For any questions or concerns regarding the processing of your personal data or to exercise your data protection rights, you may contact our Data Protection Officer (DPO) at dpo@coolset.com.