Privacy Policy

Last updated: July 23, 2025

This Privacy Policy explains how Confiz Limited (“Confiz”, “we”, “our”, or “us”) collects, uses, discloses, and protects your personal data when you access or use our services, including our website www.confiz.com. It also outlines your privacy rights and how applicable laws safeguard them.

By using our services, you agree to the practices described in this Privacy Policy.

Interpretation and definitions

Interpretation

The terms defined below apply consistently throughout this Privacy Policy, regardless of whether they are used in singular or plural form.

Definitions

For the purposes of this Privacy Policy:

• Account: A unique profile created to access specific features or parts of our services.
• Business (under CCPA): Refers to Confiz Limited, the legal entity responsible for collecting and determining the purpose of personal data processing in California.
• Company (also “we”, “us”, or “our”): Refers to Confiz Limited, located at 3120 139th Avenue Southeast, Suite 500 Bellevue, WA 98005. For GDPR purposes, the Company is the Data Controller.
• Consumer (under CCPA): A California resident, as defined by the California Consumer Privacy Act.
• Cookies: Small data files stored on your device to track and improve user experience.
• Country: Refers to the United States (specifically Washington State).
• Data Controller: The entity (Confiz) that determines how and why personal data is processed (under GDPR).
• Device: Any internet-connected tool such as a smartphone, tablet, or computer used to access our services.
• Do Not Track (DNT): A browser setting that signals your preference not to be tracked across websites.
• Personal Data: Any information that identifies or can be linked to an individual. This includes names, identifiers, IP addresses, location data, or behavioral information, as per GDPR and CCPA.
• Sensitive Personal Information (SPI): Under CPRA, includes precise geolocation, racial or ethnic origin, health data, and similar categories. We do not collect SPI unless explicitly required and consented.
• Sale (under CCPA): The exchange of personal data for monetary or other valuable consideration.
• Sharing (under CPRA): Disclosure of personal data for cross-context behavioral advertising. · Service: The Confiz website and related offerings accessible via https://www.confiz.com.
• Service Provider: Third parties contracted by Confiz to process data on our behalf (data processors under GDPR).
• Third-Party Social Media Service: External platforms (e.g., Google, LinkedIn, Facebook) through which users may access or register for our services.
• Usage Data: Automatically collected data on how the service is accessed and used, such as page visits and device information.
• You: The individual using our service or the organization on whose behalf the individual is acting. Under GDPR, this refers to the “Data Subject.”
  
  

Collecting and using your personal data

Types of data collected

1.Personal data

When you use our services, we may collect personal information that identifies you. This includes, but is not limited to:

• Full name
• Email address
• Phone number
• Mailing address (city, state/province, ZIP/postal code)

You may provide this information through account registration, contact forms, subscriptions, or direct communication.

2.Usage data

We collect data automatically when you access our services. This may include:

• IP address
• Browser type and version
• Device type and operating system
• Pages visited and time spent
• Referrer URLs and clickstream data
• Mobile identifiers and diagnostic information (when accessed via mobile)

This data helps us improve performance, enhance security, and better understand user behavior.

4.Cookies and Tracking Technologies

We use cookies and similar technologies to analyze traffic, improve service functionality, and personalize content. These may include:

• Browser Cookies: Store settings and enable functionality.
• Flash Cookies: Save preferences across sessions (managed separately from browser cookies).
• Web Beacons: Monitor interactions with content or emails.

Cookies may be:

• Session Cookies: Deleted when your browser is closed.
• Persistent Cookies: Remain on your device until manually removed or expired.
  
  

Types of Cookies We Use

How We Use Cookies?

We use cookies and similar technologies to:

• ·Keep the website running smoothly
• Understand how visitors use our site (so we can improve it)
• Show you content and promotions that are more relevant to you

You’re in control—when you first visit, you’ll see a cookie banner where you can accept all, reject non-essential cookies, or customize your preferences.

If you ever change your mind, you can revisit your settings by clicking the “Privacy Preferences” link at the bottom of the page.

Use of your personal data

Confiz may use your personal data for the following purposes:

• Service delivery and maintenance: To operate, maintain, and monitor the use of our services.
• Account management: To manage user registrations, enable account functionality, and provide user support.
• Contract performance: To fulfill and manage contracts for purchases, subscriptions, or other agreements.
• Communications: To contact you via email, phone, SMS, or app notifications regarding service updates, security alerts, or transactional information.
• Marketing and promotions: To share relevant offers, product updates, and event information, unless you opt out.
• Request management: To respond to your inquiries, feedback, or support tickets.
• Personalized advertising: To serve relevant content and ads based on your interests and usage, and to measure ad effectiveness.
• Business transitions: To support business transfers such as mergers, acquisitions, or asset sales.
• Analytics and improvement: To analyze data, identify trends, and improve services, performance, and user experience.
  
  

Consent Management and Withdrawal

Where required by law (e.g., GDPR, CPRA), we obtain your consent before collecting or processing your personal data for marketing, analytics, or cross-context advertising. You may withdraw your consent at any time by:

• Adjusting your preferences in our Privacy Preferences Center
• Using the “unsubscribe” link in marketing emails · Contacting us directly via https://www.confiz.com/contact/ Withdrawal of consent does not affect the lawfulness of processing carried out prior to your withdrawal.
  
  

Sharing Your Personal Data

We may share your personal data under the following conditions:

• With service providers: To facilitate analytics, advertising, communications, and other business operations.
• During business transitions: If involved in a merger, acquisition, or asset transfer.
• With affiliates and partners: For joint service delivery or promotional purposes, under privacy-compliant agreements.
• With other users: If you interact in public areas or through linked social media accounts such as Google, Facebook, Twitter (X), LinkedIn, Instagram, or others.
• With your consent: When you provide explicit permission for a specific purpose.
  
  

Behavioral Advertising and Opt-Out Rights

We use third-party tools for behavioral advertising, including:

• Google Ads
• Facebook/Meta Platforms
• LinkedIn

These tools may collect your data through cookies and tracking pixels.

To opt out, you can: · Email us at marketing@confiz.com with your request.

• Manage browser-based tools like Global Privacy Control (GPC)
• Use third-party opt-out pages:
  https://optout.networkadvertising.org 
  https://www.youronlinechoices.eu
  https://optout.aboutads.info

Note: These options are provided in accordance with the California Consumer Privacy Act (CCPA) and apply only to residents of California.

Retention of your personal data

We retain your personal data for no longer than:

• 3 years from your last interaction for marketing records
• 7 years for contractual or transactional records (to meet legal and tax obligations)
• As required by applicable laws or business needs, Usage data may be retained longer for analytics and system security, unless prohibited by law.
  
  

Transfer of your personal data

Your personal data may be transferred to and maintained on servers located outside your region. We ensure appropriate safeguards (such as standard contractual clauses) are in place to protect your data in compliance with applicable privacy laws.

Disclosure of your personal data

• Legal obligations: We may disclose data to comply with legal requirements, government requests, or court orders.
• To protect rights and safety: We may share data to protect the rights, property, and safety of users or the public.
  
  

Security of Personal Data

We use administrative, technical, and organizational safeguards to protect your personal data. However, no online transmission or storage system is fully secure. We encourage you to take steps to protect your own data.

Analytics and Advertising

We use tools such as Google Analytics to collect usage data and analyze trends. To opt out of Google Analytics, visit: https://tools.google.com/dlpage/gaoptout

We may use email platforms like Mailchimp for sending newsletters and promotional content. You may unsubscribe at any time via email footer links or by contacting us directly.

Behavioral Remarketing

We use remarketing services such as Google Ads, Facebook, Twitter (X), LinkedIn, and Instagram to display targeted ads across websites.

You can manage ad preferences and opt out using: · Network Advertising Initiative · YourOnlineChoices (EU) · Digital Advertising Alliance

For more about specific vendors’ practices:

• Google: https://policies.google.com/privacy
• Facebook: https://www.facebook.com/privacy/explanation
• X: https://x.com/en/privacy
• LinkedIn: https://www.linkedin.com/legal/privacy-policy
• Instagram: https://privacycenter.instagram.com/policy
  
  

Compliance with Global Privacy Laws

We process your personal data in accordance with applicable privacy laws, including:

• The General Data Protection Regulation (GDPR) for individuals in the EU/EEA and UK
• The California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) for California residents

These laws provide you with rights over your personal data, and we are committed to supporting them.

General Data Protection Regulation (GDPR) – EU/EEA

We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and UK GDPR under the following lawful bases:

• Consent: You have given clear permission for us to process your personal data for one or more specific purposes.
• Contractual necessity: Processing is necessary to fulfill a contract with you or to take steps prior to entering into a contract.
• Legal obligation: We are required to process your personal data to comply with applicable law.
• Vital interests: Processing is necessary to protect someone’s life.
• Public task: Processing is necessary to perform a task in the public interest or under official authority.
• Legitimate interests: Processing is necessary for our legitimate business interests, provided these are not overridden by your rights.
  
  

Your Rights under GDPR:

As an EU or UK resident, you have the right to:

• Access the personal data we hold about you
• Rectify inaccuracies in your data
• Erase your data (“right to be forgotten”)
• Restrict processing under certain conditions
• Object to processing based on legitimate interests or for direct marketing
• Data portability – to receive your data in a structured, machine-readable format
• Withdraw consent at any time for processing based on consent
• Object to automated decision-making, including profiling, and request human intervention
  
  

Automated Decision-Making & Profiling

We may use automated tools for analytics, ad targeting, or customer segmentation. These do not produce legal effects or similarly significant impacts on individuals. Under GDPR, you may object to such processing or request human intervention by contacting us.

California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) – United States

If you are a California resident, your rights under the CCPA and CPRA include:

• Right to Know: You may request details on the personal data collected, including:
• Categories and specific pieces of personal information
• Categories of sources
• Purpose of collection
• Categories of third parties with whom data is shared
• Right to Delete: Request deletion of your personal data (subject to legal exceptions)
• Right to Correct: Request correction of inaccurate personal information
• Right to Opt-Out of Sale or Sharing: Direct us not to sell or share your personal data for cross-context behavioral advertising
• Right to Limit Use of Sensitive Personal Information: Restrict use of sensitive information to essential services
• Right to Non-Discrimination: Exercise your rights without being denied goods/services or charged different prices
  
  

Personal Data Collected:

We may collect identifiers (e.g., name, email, IP), internet activity (e.g., pages viewed), and other data as detailed in this policy.

Sources: Data is collected directly from users, automatically via cookies or tracking tools, and from service providers.

We do not sell personal data of consumers under 16 years of age.

To exercise your rights, including opting out of sale or sharing of data, visit https://www.confiz.com/contact/. Only you or an authorized agent may make a verifiable consumer request.

Verification Requirements:

• Provide sufficient information to verify your identity
• Describe your request in detail to enable accurate response

We will respond within 45 days of receiving a verifiable request. The period may be extended once for an additional 45 days with notice.

Browser and Mobile Settings: You may also limit tracking and advertising through your device or browser:

• “Limit Ad Tracking” on iOS
• “Opt-out of Ads Personalization” on Android
  
  

Do Not Track: Our website does not respond to browser based “Do Not Track” signals. However, you may manage your tracking preferences using third-party tools linked above.

California “Shine the Light” & Minor Privacy Rights: California residents may request information about data shared with third parties for marketing purposes. Minors under 18 may request removal of content posted publicly on our site, subject to limitations. For all requests related to California privacy rights, contact us at https://www.confiz.com/contact/.

Your Rights Under CPRA: Do Not Sell or Share My Personal Information. If you are a California resident, you have the right to direct us not to sell or share your personal information for cross-context behavioral advertising. You can exercise this right by visiting our Do Not Sell or Share My Info page. We do not knowingly sell or share the personal data of individuals under 16 years of age. You may also use browser-based tools to signal your preference, such as the Global Privacy Control (GPC) signal, which we honor in compliance with applicable laws.

Limiting Use of Sensitive Personal Information

We may collect Sensitive Personal Information (SPI) such as geolocation data, racial or ethnic origin, or health-related data when necessary to provide our services. You have the right to limit the use and disclosure of your SPI for purposes necessary for providing requested services. To exercise this right, visit Limit Use of My Sensitive Information or contact us directly.

Children’s Privacy

Our services are not intended for children under the age of 13 (or 16 in certain jurisdictions), and we do not knowingly collect personal information from minors. If you believe that a child has provided us with personal information without parental consent, please contact us immediately so we can delete the data.

International Users and Data Transfers

If you are accessing our services from outside the United States, your data may be transferred to, stored, and processed in a country where data protection standards may differ. Regardless of where you are, we apply safeguards to ensure your personal data is treated with care and in accordance with applicable legal requirements.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal obligations. Any changes will be posted on this page with an updated “Last Updated” date.

We encourage you to review this policy regularly. If material changes are made, we will provide additional notice (e.g., via email or prominent notice on our website).

Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us: ·

• By visiting: https://www.confiz.com/contact/

• By email: marketing@confiz.com

• By mail: Confiz Limited, 3120 139th Avenue Southeast, Suite 500 Bellevue, WA 98005