Privacy Notice

Last updated: 7/25/2026

This Privacy Notice explains how ConsentSol ("ConsentSol", "ConsentHub", "we", "us") processes personal data of visitors to consentsol.com and customers of the ConsentHub service.

1. Who we are (Controller)

ConsentSol (trading as "ConsentHub") is the data controller of personal data collected through our website, marketing, sign-up, and customer account flows. When we process personal data on behalf of our customers as part of the ConsentHub service (e.g. hashed IPs, consent events, DSAR tickets), we act as a data processor — see our Data Processing Agreement.

2. Personal data we collect

• Account data: name, email, hashed password or OAuth identifier.
• Billing data: plan, subscription status, invoices. Card details are handled by Paddle — we never see or store them.
• Support data: messages you send us via email or in-app.
• Usage & telemetry: pages viewed, features used, device/browser, IP address, approximate location.
• Cookies: essential session cookies; analytics cookies only if you consent.

3. Why we use it (Purposes & legal bases)

• Providing the service and your account — performance of contract.
• Billing, tax, and invoicing (via Paddle) — performance of contract & legal obligation.
• Security, fraud prevention, and abuse detection — legitimate interests.
• Product improvement and analytics — legitimate interests or consent where required.
• Marketing emails — consent, which you can withdraw at any time.
• Complying with law and responding to lawful requests — legal obligation.

4. Who we share it with

• Paddle.com Market Ltd — our Merchant of Record for all sales, handling payments, subscription management, tax compliance, invoicing, and buyer support.
• Infrastructure & subprocessors — cloud hosting, database, email delivery, error monitoring, and analytics providers acting under contract.
• Professional advisers — legal, accounting, and audit firms where necessary.
• Authorities — where required by law, court order, or to protect rights.

5. International transfers

Personal data may be processed outside your country, including in the EU, UK, US, and India. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

6. Retention

We retain account and billing data for the life of your account and for a reasonable period after closure to meet legal, tax, and audit obligations (typically up to 7 years for invoices). Usage logs are retained for up to 24 months. Data is deleted or anonymised when no longer needed.

7. Your rights

Subject to applicable law (including EU/UK GDPR, India DPDP Act, and California CCPA/CPRA), you may request access, correction, deletion, restriction, portability, or object to processing, and withdraw consent at any time. You can also lodge a complaint with your local supervisory authority. To exercise any right, email privacy@consentsol.com. We respond within the timelines required by law (typically 30 days).

8. Security

We use appropriate technical and organisational measures including encryption in transit, access controls, least-privilege, audit logging, and regular reviews. No system is 100% secure; please protect your credentials.

9. Cookies

We use strictly necessary cookies to run the service (session, CSRF). Analytics or marketing cookies are only set with your consent, which you can change at any time via our banner.

10. Children

ConsentHub is a B2B service not directed to children under 18.

11. Changes

We may update this Notice. Material changes will be highlighted on this page and, where appropriate, notified by email.

12. Contact

ConsentSol — privacy@consentsol.com · support@consentsol.com.