Privacy Policy
Last updated: July 31, 2026
1. Introduction
Cogo Site ("we", "our", or "us") respects and protects your privacy. This Privacy Policy explains how we collect, use, store, and share your personal information when you use our website builder platform (the "Service"). Please read this policy carefully before using our Service. By using the Service, you acknowledge that you have read and agree to this policy. We may update this policy from time to time; material changes will be communicated via email or in-app notification.
2. Data Controller
The data controller for this Service is: Cogo Site. Privacy contact email: privacy{'@'}cogosite.com. Customer support email: support{'@'}cogosite.com.
3. Information We Collect
Information you provide directly: Account information (name, email, password stored encrypted), payment information (transaction amounts, payment status — we do not store full card numbers; card data is processed exclusively by our PCI-DSS compliant payment processor), and communication records (emails, tickets, feedback you send to support). Information we collect automatically: Device and network data (IP address, device type, operating system, browser type, timezone), usage behavior (pages visited, features used, session duration), and log data (request timestamps, error logs, performance data).
4. How We Use Your Information
We use your information to: provide and maintain our services (contract performance), process billing and payments (contract performance), provide customer support (contract performance / legitimate interest), send service notifications such as billing, security, and policy updates (legitimate interest), prevent fraud and ensure security (legitimate interest), improve and optimize our platform (legitimate interest), comply with legal obligations (legal obligation). We may aggregate or de-identify data for statistical analysis. Such data cannot identify specific individuals. We do not sell your personal information, including as defined under CCPA.
5. Information Sharing and Disclosure
We do not sell your personal information. We share information only in the following circumstances: Service providers (cloud computing, payment processing, customer support, analytics) bound by confidentiality agreements — payment card data is exclusively processed by our PCI-DSS compliant payment processor Waffo Pancake and is never stored on our servers; legal and regulatory requirements (when required by law, court order, or lawful request from competent authorities); business transactions (in case of merger or acquisition, with prior notice and continued protection obligations); with your consent (for other purposes with your explicit prior consent).
6. Data Security
We implement industry-standard security measures including: TLS/HTTPS encryption for all data in transit, encrypted or hashed storage for passwords and sensitive data, least-privilege access control with staff confidentiality agreements, and regular security audits and vulnerability scanning. In the event of a security incident affecting your rights, we will notify you and relevant regulatory authorities within 72 hours of discovery. Please safeguard your account credentials and do not share them with others.
7. Cookies and Tracking Technologies
We use cookies and similar technologies: Essential cookies (maintain login, core functionality — cannot be disabled), functional cookies (language preference, personalization — can be disabled), analytics cookies (anonymous usage statistics, product optimization — can be disabled). You can adjust preferences through your browser settings. See our Cookie Policy for more details.
8. Data Retention
Account information: retained during active use; deleted or anonymized within 2 years after account closure. Transaction records: retained for 7 years per applicable tax/accounting regulations. Customer support records: retained for 3 years then securely deleted. Security audit logs: retained for 12 months then securely deleted.
9. Your Data Rights
You have the right to: access your personal information, correct inaccurate or incomplete information, request deletion of your data under certain conditions, restrict processing in specific circumstances, receive your data in a machine-readable format (data portability), object to processing based on legitimate interest or marketing, and withdraw consent for consent-based processing. To exercise these rights, contact us at privacy{'@'}cogosite.com — we will respond within 30 calendar days. If you believe we have not properly handled your request, you have the right to lodge a complaint with your local data protection authority.
10. Children's Privacy
Our services are intended for users aged 13 and above. We do not knowingly collect personal information from children under 13. If you believe your child has provided us with information, please contact us immediately and we will delete it promptly.
11. Third-Party Links and Services
Our Service may contain links to or integrate with third-party services. This policy applies only to information we collect directly. We are not responsible for the data practices of third parties — we recommend reviewing their policies before use.
12. Cross-Border Data Transfers
Our servers and partners may be located in the United States and Singapore. For cross-border transfers, we ensure data security through: data processing agreements incorporating EU Standard Contractual Clauses (SCCs), and transfers only to recipients with equivalent protection levels.
13. Changes to This Policy
If material changes occur, we will notify you at least 15 days in advance via platform announcement or your registered email, and update the "Last updated" date at the top of this page. Continued use after the effective date constitutes acceptance.
14. Contact Us
Privacy contact email: privacy{'@'}cogosite.com. Customer support email: support{'@'}cogosite.com. Company: Cogo Site. Service hours: Monday to Friday 09:00–18:00 UTC+8.