This Privacy Notice explains how Cyber Technology II, LLC. ("we," "our," or "the Company") operates its ConsentConfirmation technology, including how it functions when you visit webforms utilizing ConsentConfirmation services, what data is collected, how it is used, and how long it is retained.
ConsentConfirmation is a lead certification service designed to independently verify the origin of Internet Leads. It assists website owners and customers in documenting and verifying consent to meet privacy compliance requirements while ensuring the authenticity of leads.
ConsentConfirmation enables website owners and customers to document, analyze, and archive product or service registrations and visitor interactions. These include consent-to-contact notices, terms, and disclosures presented on web pages. This helps customers make informed and compliant decisions about contacting individuals who have provided their consent to be reached via email, text, phone, or mail.
ConsentConfirmation operates via the following methods:
ConsentConfirmation Script: A proprietary JavaScript installed on web pages.
Each method issues a ConsentConfirmation Certificate, which accompanies the lead data and includes information such as the visitor’s actions, the time of the visit, and the form content presented.
ConsentConfirmation independently certifies a significant number of consent-to-contact transactions daily. It collects and processes the following data during visitor interactions with webforms:
Web Forms are interactive elements commonly found on websites, such as input boxes, text fields, dropdown menus, or selection options, where users are prompted to provide personal information, including their name, email address, phone number, or other relevant details. These forms are often used by businesses to collect information from individuals who express interest in a specific product or service.
Webforms should include mechanisms to obtain and record user consent before the data is submitted. This consent typically allows the company (or its affiliates) to contact the individual via phone, email, or text message to provide additional details about the product or service. "Notice," "Consent," and "Opt-In" are fundamental privacy principles, and certain privacy and consumer protection laws require specific language to be presented during such interactions.
Businesses often employ webforms to facilitate communication with interested customers by gathering relevant information for tailored follow-ups. For instance, webforms are frequently used on websites related to home improvement (e.g., solar panels, roof repair), automotive services (e.g., car purchases, insurance quotes), relocation services (e.g., moving companies), financial products (e.g., loan inquiries), insurance (e.g., health or home insurance quotes), and educational programs (e.g., degree or certification programs). These forms enable companies to exchange detailed information and assess customer needs effectively.
Webform Interaction Details: Includes screen content, mouse movements, keystrokes, window size, and document object model (DOM) interactions.
Browser-Shared Data: Includes timestamps, URLs, browser and OS details, and IP addresses.
Exclusions: ConsentConfirmation does not use or rely on cookies, nor is it intended for profiling or advertising purposes.
Data submitted through a webform using ConsentConfirmation is typically retained for 90 days as standard practice. This retention period allows sufficient time for customers to validate, confirm, store, and take necessary action on the data. When a customer "claims" a ConsentConfirmation record—indicating an intent to reach out to the individual—ConsentConfirmation retains the transaction documentation for a longer period to comply with legal and data regulation requirements. The standard retention period for such transaction data and session replays is five years. Any ConsentConfirmation data not claimed within the initial 90-day period is scheduled for deletion.
In some cases, webform submissions using ConsentConfirmation may lack confirmation of a submit-button action. Similarly, incomplete or abandoned webforms that are not fully submitted are retained for a brief period of three days. This short retention window provides time for potential reconciliation if a submission action is later confirmed or the webform is resumed and completed. Such reconciled entries are then processed under the standard claimed data retention period of 90 days.
Abandoned or incomplete webform submissions are retained for 3 days to allow reconciliation.
Unclaimed data is retained for 90 days before deletion, unless otherwise configured.
Claimed data may be retained for up to 5 years or another agreed-upon timeframe for compliance purposes.
ConsentConfirmation functions as a service provider under agreements, including Terms of Service (ToS) and End User License Agreements (EULA). Data processed through ConsentConfirmation is owned and directed by the customer. ConsentConfirmation does not process data for advertising, profiling, or behavioral targeting purposes. However, aggregated or de-identified data may be used for fraud detection, analytics, and product improvement.
We take responsible and reasonable steps to ensure that your data is treated securely and in accordance with this privacy policy. All information you provide to us is stored on securely monitored servers, via the following protocol:
Encryption: Data in transit uses TLSv1.2 or higher, and data at rest is encrypted with AES-256.
Data Obfuscation: Sensitive fields flagged by customers are not transmitted and are replaced with masked characters.
Independent Audits: ConsentConfirmation adheres to SOC 2 security standards and conducts annual penetration testing.
CCPA, CPRA: ConsentConfirmation operates as a service provider/data processor, processing data solely under customer directives.
ConsentConfirmation does not sell website webform data or personal data to third parties. As a service provider, we process customer-owned or customer-directed data strictly under contracted terms and solely on behalf of our customers. We do not sell personal data related to consent-to-contact transactions to third parties for any marketing purposes, including cross-context behavioral advertising or targeted advertising. ConsentConfirmation’s data usage is strictly limited to documenting consent-to-contact transactions and performing related data analysis.
Do Not Track (DNT): ConsentConfirmation aligns with the technical privacy settings implemented by customers but does not itself process data for cross-site tracking or advertising purposes.
Even though ConsentConfirmation is not interfacing with consumers or collecting data on behalf of customers, our privacy office will promptly research and respond to data subject requests
ConsentConfirmation assists customers in fulfilling data subject requests under applicable laws such as CCPA, and CPRA. Requests can be directed to the privacy office at support@ConsentConfirmation.com.
ConsentConfirmation reserves the right to update this Privacy Notice. Updates will be published on our website with the revised effective date.
If you have any questions or concerns about this notice, the ways in which ConsentConfirmation collects, uses, or discloses information as described herein and in our Privacy Policy, your choices and rights regarding such use, or if you wish to exercise your rights under applicable, California, or other U.S. state laws, please contact us via email at: support@consentconfirmation.com