1. Introduction
This Cookie Policy explains how Dorik, Inc. ("Company," "we," "us," or "our") uses cookies and similar tracking technologies on Consently.net ("Service"), our consent management platform.
This policy should be read together with our Privacy Policy, Terms of Service, and for business clients, our Data Processing Agreement.
2. Information We Collect
2.1 Information You Provide Directly
When you create an account with us, we collect:
-
Name: Your full name for account identification
-
Email Address: Used for account creation, communication, and service notifications
-
Password: Encrypted and stored securely (not applicable when using Google Sign-In)
2.2 Information from Third-Party Services
When you sign in using Google Sign-In, we receive:
-
Your email address
-
Your name and basic profile information
-
Information permitted by your Google account privacy settings
We do not store your Google password or access information beyond what is necessary for authentication.
2.3 Automatically Collected Information
We may automatically collect certain information when you use our Service to improve functionality and user experience:
-
Usage Data: Such as how you interact with our Service, features accessed, and time spent
The specific data we collect may vary based on your device settings and how you interact with our Service.
2.4 Cookies and Similar Technologies
We use cookies and similar tracking technologies to:
-
Maintain your login session
-
Remember your preferences
-
Analyze Service usage and performance
-
Provide and improve our Service
For detailed information about our use of cookies, please see our Cookie Policy.
2.5 Industry Standard Compliance and Consent Frameworks
As an IAB TCF 2.2 certified and Google CMP approved platform, we process consent data according to established industry standards:
IAB TCF 2.2 Compliance:
-
Generate and manage consent strings according to IAB specifications
-
Maintain vendor lists and purpose classifications
-
Process consent signals for advertising and analytics purposes
-
Ensure interoperability with other TCF-compliant services
Google CMP Integration:
-
Certified integration with Google advertising products
-
Proper consent signal transmission to Google services
-
Compliance with Google's consent requirements
Consent Data Processing: We process consent records that include:
-
User consent choices for specific purposes and vendors
-
Consent timestamps and expiration data
-
Consent string generation for third-party integrations
-
Preference center interactions and updates
2.6 Client Data
As a consent management platform, we process consent records and related data on behalf of our clients. For this data:
-
We act as a data processor
-
Our clients remain the data controllers
-
We process this data solely according to client instructions
-
This data is covered by our Data Processing Agreement with clients
3. How We Use Your Information
We use your personal information for the following purposes:
3.1 Service Provision
-
Creating and managing your account
-
Providing access to our consent management tools
-
Processing your requests and transactions
-
Delivering customer support
3.2 Communication
-
Sending service-related notifications
-
Responding to your inquiries
-
Providing technical support
-
Sending important updates about our Service
3.3 Service Improvement
-
Analyzing usage patterns to improve our Service
-
Developing new features and functionality
-
Troubleshooting technical issues
-
Ensuring Service security and stability
3.4 Legal Compliance
-
Complying with applicable laws and regulations
-
Responding to legal requests
-
Protecting our rights and interests
-
Preventing fraud and abuse
4. Legal Basis for Processing (GDPR)
If you are located in the European Economic Area (EEA), our legal basis for processing your personal information includes:
-
Contract Performance: Processing necessary to provide our Service
-
Legitimate Interests: Improving our Service, security, and customer support
-
Consent: Where you have explicitly consented to specific processing
-
Legal Obligation: Where required by applicable law
5. Information Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share your information in the following limited circumstances:
5.1 Service Providers
We may share information with trusted third-party service providers who assist us in operating our Service, such as:
-
Cloud hosting providers
-
Email service providers
-
Analytics services
-
Payment processors
These providers are contractually obligated to protect your information and use it only for the purposes we specify.
5.2 Legal Requirements
We may disclose your information if required to do so by law or in response to:
-
Valid legal process (subpoenas, court orders)
-
Government investigations
-
Protecting our rights, property, or safety
-
Preventing fraud or illegal activities
5.3 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction. You will be notified of any such change in ownership or use of your personal information.
6. Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction, including:
-
Encryption of data in transit and at rest
-
Regular security assessments and updates
-
Access controls and authentication measures
-
Employee training on data protection
-
Incident response procedures
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
7. Data Retention
We retain your personal information for as long as necessary to:
-
Provide our Service to you
-
Comply with legal obligations
-
Resolve disputes and enforce agreements
-
Fulfill legitimate business purposes
When you delete your account, we will delete or anonymize your personal information within a reasonable timeframe, except where we are required to retain it by law.
For consent records processed on behalf of our clients, retention periods are determined by our clients as data controllers, typically in accordance with applicable privacy laws.
8. International Data Transfers
Our Service is operated from the European Union where our servers are located. If you are located outside the EU, your information may be transferred to, stored, and processed in the EU.
We ensure appropriate safeguards are in place for international data transfers in accordance with applicable data protection laws, including GDPR requirements for data transfers outside the EEA when applicable.
9. Your Privacy Rights
Depending on your location, you may have the following rights regarding your personal information:
9.1 General Rights
-
Access: Request information about what personal data we have about you
-
Correction: Request correction of inaccurate personal information
-
Deletion: Request deletion of your personal information
-
Restriction: Request limitation of processing of your personal information
-
Objection: Object to processing of your personal information
9.2 EEA Residents (GDPR Rights)
-
Data Portability: Request a copy of your data in a machine-readable format
-
Withdraw Consent: Withdraw consent where processing is based on consent
-
Lodge Complaints: File complaints with supervisory authorities
9.3 California Residents (CCPA Rights)
While our CMP platform does not currently include specific CCPA compliance features, California residents have the following rights regarding their personal information:
-
Right to Know: Categories and specific pieces of personal information collected
-
Right to Delete: Request deletion of personal information
-
Right to Opt-Out: Opt-out of the sale of personal information (we do not sell personal information)
-
Non-Discrimination: We will not discriminate against you for exercising your rights
10. Exercising Your Rights
To exercise your privacy rights, you can:
-
Contact us at support@consently.net
-
Use the privacy controls in your account settings
-
Submit a request through our privacy request form
We will respond to your request within the timeframe required by applicable law, typically within 30 days.
11. Children's Privacy
Our Service is not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete such information promptly.
12. Third-Party Links and Services
Our Service may contain links to third-party websites or services. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you use.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of any material changes by:
-
Posting the updated policy on our website
-
Sending you an email notification
-
Providing notice through our Service
Your continued use of our Service after the effective date of the updated Privacy Policy constitutes your acceptance of the changes.
14. California "Shine the Light" Law
California residents may request information about our disclosure of personal information to third parties for direct marketing purposes. We do not share personal information with third parties for their direct marketing purposes.
15. Do Not Track
Some browsers include a "Do Not Track" feature. Our Service does not currently respond to Do Not Track signals, as there is no established standard for how to respond to such signals.
16. Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:
Privacy Officer Dorik, Inc. Email: support@consently.net
