Who We Are

FlexyConsent is operated by Westcoast Technology Limited, a company registered in England and Wales (company number 12008657), registered office 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom. You can contact us by email at support@flexyconsent.com.

Our Two Roles

• For publishers (our customers), we are the controller of their account and billing data.
• For visitors to our customers' websites, we are a processor: we record consent choices on the website operator's behalf and only on its instructions. The website operator is the controller and its own privacy notice applies. Our Data Processing Agreement with publishers, available from flexyconsent.com/data-processing-agreement, sets out the terms.

Visitors to Websites That Use FlexyConsent

When you visit a website that uses FlexyConsent, our script shows the consent banner, applies your choice and records it so the website operator can prove it. We process:

• A consent record: a random identifier created in your browser, your choice and the categories or purposes you accepted, the date and time, how the choice was made (banner, preferences, embedded content, the website itself or an automatic signal), whether your browser sent a Global Privacy Control signal, and the website's domain.
• Usage statistics: daily counts per random identifier (pages viewed, whether the banner was shown, the kind of choice made) and the country and region of the visit.
• Your IP address and browser user agent, received with every request. We use the IP address only to find the country and region that decide which privacy law applies. We do not store it in consent records. Our web server logs that contain it are deleted after at most 15 days.
• Cookies and browser storage on your device that hold your choice, so the website does not ask you again on every page. They are listed in the website's consent notice.

We do not collect your name, email address or other contact details, and we do not track you across websites. We do not use visitor data for our own purposes, advertising, profiling or analytics, and we do not sell or share it. Consent records are deleted 2 years after they were last updated, daily statistics after 60 days, and the random identifier 380 days after your last visit. To exercise your rights over this data, contact the website operator; we help them answer your request.

Publisher Account Information

FlexyConsent is a business-to-business service. Publishers create accounts in our panel to configure consent banners for their websites. We process:

• Account data: name, email address and password (or Google sign-in) for panel access
• Billing data: subscription, invoice and payment details. Payments are processed by PayPal; we do not store card numbers.
• Service configuration: banner settings, domain names and other settings
• Support correspondence: emails you send us

We process this data to provide the service you subscribed to, manage your subscription, process payments and support you (performance of a contract), and to meet tax and accounting obligations (legal obligation). We use your email address to send service messages about your account. We do not sell or share publisher data with third parties except PayPal for payments and our hosting provider.

Cookies on flexyconsent.com

Our website uses FlexyConsent itself. Strictly necessary cookies keep you signed in to the panel and remember your consent choice. With your consent, we use Google Analytics to understand how our website is used; it runs only if you accept analytics cookies in our consent banner. For more details, see our Cookie Policy.

Where Data Is Stored

Our servers are hosted by OVHcloud: the application and database in France, and edge servers in France and Canada. OVHcloud provides the infrastructure and does not access the data. Nightly backups are kept on our own storage in our office in the EU/EEA for up to 12 months. Transfers to the United Kingdom and Canada are covered by adequacy decisions.

Data Security

We use HTTPS encryption for all traffic, restrict database access to our own servers, limit production access to named staff, and keep each publisher's data separate from others'.

Children's Privacy

Our service is a B2B platform intended for website operators and businesses. It is not directed at children under 16, and we do not knowingly collect personal information from children for our own purposes.

Data Retention

Publisher account data is kept while the account is active and for a reasonable period afterwards for billing, legal and administrative purposes; invoices are kept as long as tax law requires. Visitor data is kept for the periods described above. Publishers may request account deletion by contacting us.

Your Rights

Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict its processing, and to complain to a data protection authority, such as the UK Information Commissioner's Office. Publishers can contact us directly. Visitors to our customers' websites should contact the website operator first.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.

Contact Us

If you have any questions about this Privacy Policy, please contact us:

• Email: support@flexyconsent.com
• Post: Westcoast Technology Limited, 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom