Privacy Policy

Last updated: January 2026

1. Data Controller

The controller of your personal data is:

Warszawskie Centrum Obsługi Biznesu sp. z o.o.

al. Jana Pawła II 27, 00-867 Warsaw, Poland

KRS: 0000472882 | NIP: 527-269-88-85 | REGON: 146827166

Email: sales@consentguards.com | Phone: +48 792 599 999

For matters related to personal data protection, you can contact us at: sales@consentguards.com

2. What Data We Collect

2.1. Website User Data (site owners)

When you register and use ConsentGuards, we collect:

Account data: email address, password (encrypted)
Billing data: company name, tax ID, billing address (for paid plans)
Technical data: IP addresses, browser type, access time
Domain data: website addresses added to the account

2.2. End User Data (visitors to client websites)

ConsentGuards does not collect personal data of end users visiting our clients' websites. The ConsentGuards script:

stores consent information only locally in the user's browser (cookie),
does not transmit end users' personal data to our servers,
does not create end user profiles,
does not track users across websites.

3. Purposes and Legal Bases of Processing

Purpose of processing	Legal basis (GDPR)	Retention period
Providing the ConsentGuards service	Art. 6(1)(b) – contract performance	Until contract termination + 30 days
Billing and invoices	Art. 6(1)(c) – legal obligation	5 years from end of tax year
Handling inquiries and complaints	Art. 6(1)(f) – legitimate interest	Until resolved + 3 years
Marketing communication	Art. 6(1)(a) – consent	Until consent withdrawal
Analytics and service improvement	Art. 6(1)(f) – legitimate interest	26 months
Security and fraud prevention	Art. 6(1)(f) – legitimate interest	12 months

4. Data Recipients

Your data may be shared with the following categories of recipients:

Stripe – payment processor (transaction processing, payment data). Stripe acts as an independent data controller. Stripe Privacy Policy
IT infrastructure providers – hosting, servers, CDN (technical data)
Analytics tool providers – Google Analytics (anonymized traffic data)
Government authorities – when required by law

We do not sell your personal data to third parties.

5. Data Transfers Outside the EEA

Some of our service providers (e.g., Stripe, Google) may process data outside the European Economic Area. In such cases, the transfer is based on:

European Commission adequacy decisions, or
Standard contractual clauses approved by the European Commission, or
Binding corporate rules.

6. Your Rights

Under GDPR, you have the following rights:

Right of access – you can obtain information about what data we process and receive a copy.
Right to rectification – you can request correction of inaccurate data.
Right to erasure ("right to be forgotten") – you can request deletion of data when it is no longer necessary.
Right to restriction of processing – you can request restriction of processing in certain situations.
Right to data portability – you can receive data in a structured format.
Right to object – you can object to processing based on legitimate interest.
Right to withdraw consent – when processing is based on consent, you can withdraw it at any time.

To exercise these rights, contact us at: sales@consentguards.com

You also have the right to lodge a complaint with a supervisory authority – in Poland, this is the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl).

7. Cookies and Tracking Technologies

The consentguards.com website and our clients' websites may use the following technologies:

7.1. Essential Cookies (no consent required)

These files are necessary for the Website to function and do not require consent:

session_token – user session identifier, necessary for login
csrf_token – protection against CSRF attacks
cookie_consent – remembering your cookie preferences

7.2. Analytics Cookies (with consent)

Used to analyze traffic and user behavior:

Google Analytics 4 (GA4) – cookies: _ga, _ga_*, _gid – traffic analysis, visit statistics, traffic sources. Google Privacy Policy
Google Tag Manager (GTM) – tag and script management. GTM itself does not store cookies but manages other tools.
Hotjar – cookies: _hj* – heat maps, session recordings, surveys. Hotjar Privacy Policy

7.3. Marketing Cookies (with consent)

Used for remarketing and ad personalization:

Google Ads – cookies: _gcl_*, IDE, ANID – conversion tracking, remarketing. Google Privacy Policy
Meta Pixel (Facebook) – cookies: _fbp, _fbc, fr – conversion tracking, remarketing on Facebook and Instagram. Meta Privacy Policy
TikTok Pixel – cookies: _ttp, tt_* – conversion tracking, remarketing on TikTok. TikTok Privacy Policy
LinkedIn Insight Tag – cookies: li_*, bcookie, lidc – conversion tracking, remarketing on LinkedIn. LinkedIn Privacy Policy

7.4. How to Manage Cookies

You have full control over cookies:

ConsentGuards Banner – on your first visit, you can accept all, only essential, or customize preferences
Settings button – you can change your preferences at any time by clicking the cookie settings icon
Browser settings – you can block or delete cookies in your browser settings

Disabling essential cookies may prevent you from using some Website features. Disabling analytics and marketing cookies does not affect website functionality.

8. Data Security

We implement appropriate technical and organizational measures to protect your data:

Connection encryption (HTTPS/TLS)
Password encryption (Argon2 algorithm)
Regular backups
Limited data access (principle of least privilege)
Security monitoring and intrusion detection

9. Changes to Privacy Policy

We may update this Privacy Policy. We will inform you of significant changes by email or through a notice on the Website. We encourage you to regularly check this page.

10. Contact

If you have questions about personal data processing, contact us:

Warszawskie Centrum Obsługi Biznesu sp. z o.o.

al. Jana Pawła II 27, 00-867 Warsaw, Poland

Email: sales@consentguards.com

Phone: +48 792 599 999