Privacy Policy

Introduction

cosmity Ltd ("we", "our", or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website cosmity.world and use our cash flow management services.

Data Controller

The data controller for your personal information is cosmity Ltd, a company registered in Ireland with registration number CRO975314, located at Dame Street 7, Kilkenny, R92 5518, Leinster, Ireland.

Data Collection

We collect personal data that you provide to us directly and information that is automatically collected when you use our website. The data we collect includes:

• Personal identification information (name, email address, phone number)
• Company information (business name, industry, size)
• Financial information relevant to our services (cash flow data, financial statements)
• Communication records (emails, phone calls, meeting notes)
• Website usage data (IP address, browser type, pages visited, time spent)
• Technical data (device information, operating system, browser preferences)

How We Use Your Information

We use the personal data we collect for various purposes, including how we use your information to provide and improve our services:

• To provide cash flow management services and business consulting
• To communicate with you about our services and respond to enquiries
• To process payments and manage client accounts
• To improve our website and services based on your feedback
• To comply with legal obligations and regulatory requirements
• To send marketing communications (with your consent)
• To protect against fraud and unauthorised access

Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal bases: contract performance for service delivery, legitimate interests for business operations and improvement, legal compliance for regulatory requirements, and consent for marketing communications and cookies.

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner. For more detailed information, please refer to our Cookie Policy.

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information with trusted service providers who assist us in operating our website and conducting our business, professional advisors such as lawyers and accountants, regulatory authorities when required by law, and in connection with business transfers or mergers.

Data Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, secure servers, access controls, and regular security assessments.

Data Retention

We retain your personal data for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Generally, we keep client data for seven years after the end of our business relationship, and marketing data until you withdraw consent or for three years of inactivity.

Your Rights

Under GDPR, you have the following rights regarding your personal data:

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent
• Right to lodge a complaint with the Data Protection Commission

International Data Transfers

Your personal data is primarily processed within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as adequacy decisions or standard contractual clauses approved by the European Commission.

Children's Privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal information, please contact us immediately.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the new Privacy Policy on our website and updating the "Last updated" date.

Contact Information

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us using the following information:

You also have the right to lodge a complaint with the Irish Data Protection Commission if you believe we have not handled your personal data in accordance with applicable law.