Let’s talk

Cognisearch · Privacy

Privacy policy

What we collect, why we use it, who helps us process it, and the choices you control.

Effective 18 July 2026contact@cognisearch.net

1. Who we are

Cognisearch is a Bucharest-based digital studio. For the personal information described here, Cognisearch is the website operator and data controller. Contact us at contact@cognisearch.net.

2. What this policy covers

This policy applies to cognisearch.net, its enquiry form, privacy controls, and website measurement. The site has no public accounts, payments, or request for financial, identity-document, health, biometric, or other sensitive information.

Calendly, Instagram, Facebook, and client websites are separate services with their own privacy practices.

3. Information we handle

Enquiries

When you use the contact form, we receive your name, email address, message, and privacy acknowledgement. We also receive the limited technical data needed to deliver and protect the request, such as a timestamp and request diagnostics. Please do not put sensitive personal information in your message.

Website delivery and security

Vercel, our hosting provider, may process IP address, requested URL, time, browser or user-agent information, and diagnostic or security logs to deliver the site, prevent abuse, and troubleshoot faults.

Consent records

CookieYes records your cookie choice against a consent ID so we can honour it and demonstrate compliance. Its proof-of-consent record includes an anonymised or masked IP address, country, consent status, and the date and time of the choice. The necessary cookieyes-consent cookie stores the consent ID and category choices in your browser.

Website measurement

Google Tag Manager delivers Google Analytics 4 and Microsoft Clarity under the consent state supplied by CookieYes. Before a choice, and after a rejection, analytics storage remains denied. In our advanced consent-mode setup, Google and Clarity may still receive limited cookieless signals such as the page, consent state, device or browser information, and basic interaction or timing data. Those signals do not use the GA4 or Clarity analytics cookies and do not provide continuous cross-page session history.

If you select “Accept analytics,” analytics storage becomes granted. GA4 can then use pseudonymous analytics identifiers to measure page views and the two site events contact_form_submit and calendly_click. Clarity can use analytics cookies to produce heatmaps and session recordings. Contact-form names, email addresses, messages, and field values are never included in our analytics events. Clarity masks input values in every masking mode, and the contact form is expressly marked for masking.

Booking

If you open the Calendly booking link, you leave our site and give scheduling information directly to Calendly. Cognisearch receives the details needed to arrange the meeting.

4. Why we use information

  • Replying to enquiries. We process enquiry information to take steps at your request and for our legitimate interest in responding to prospective clients.
  • Operating and securing the site. We use limited technical data for our legitimate interests in reliable delivery, abuse prevention, diagnostics, and security.
  • Remembering and proving privacy choices. We use necessary consent storage and a consent log to meet privacy obligations and our legitimate interest in showing that those choices were respected.
  • Understanding performance. We use analytics cookies, continuous sessions, heatmaps, and recordings only with consent. Limited cookieless measurement is used to understand aggregate service performance while storage remains denied.
  • Meeting legal obligations. We may retain or disclose information where applicable law, valid legal process, or protection of legal rights requires it.

5. Service providers

  • Vercel hosts and delivers the website and contact function.
  • Resend relays contact-form email to Cognisearch.
  • Google Workspace stores and delivers email to our internal inboxes.
  • CookieYes supplies the consent banner, preference centre, cookie scan, and proof-of-consent log.
  • Google supplies Tag Manager and Google Analytics 4.
  • Microsoft supplies Clarity analytics, heatmaps, and session recordings.
  • Calendly processes information when you choose to book a meeting.

We may also disclose information to professional advisers or public authorities when reasonably necessary and legally permitted. We do not publish enquiry details.

6. No sale, advertising profile, or automated decision

Cognisearch does not sell personal information or share it for cross-context behavioural advertising. This site does not deploy advertising tags. Advertising storage, ad user data, and ad personalisation remain denied even when analytics is accepted. We do not use website data for automated decisions that produce legal or similarly significant effects.

7. Retention

  • Contact enquiries are normally kept for up to 24 months, unless a client relationship, legal duty, dispute, or valid earlier deletion request requires a different period.
  • The CookieYes browser consent record is valid for up to 12 months. Consent-log evidence is retained only as long as needed to demonstrate compliance and is reviewed against our legal and account requirements.
  • GA4 user and event data is configured for 14 months. Aggregated reports may remain without directly identifying a browser.
  • Clarity playback data is retained for 30 days. Clarity click and heatmap data, and recordings we deliberately label or favourite, may be retained for up to 13 months.
  • Security and delivery logs are retained according to provider settings only for as long as needed for delivery, diagnostics, and abuse prevention.

8. International processing

Some providers operate internationally and may process information outside Romania or the European Economic Area. Where European transfer rules apply, we rely on appropriate provider safeguards such as adequacy decisions, the EU-US Data Privacy Framework where applicable, or approved contractual protections.

9. Your choices and rights

Select “Manage cookies” in the footer to reopen the CookieYes preference centre. You can reject, grant only analytics, or withdraw a previous choice. Global Privacy Control is supported. Withdrawal applies to future processing and does not affect processing already lawful before it.

Depending on applicable law, you may ask to access, correct, delete, restrict, or receive a copy of personal information, or object to processing based on legitimate interests. Email contact@cognisearch.net. We may request proportionate information to verify the request. You may also complain to your local authority; in Romania, this is ANSPDCP.

10. Security

We use encrypted connections, access controls, limited provider access, input masking, and operational safeguards appropriate to this website. No internet service is risk-free, so absolute security cannot be guaranteed.

11. Children

This business website is not directed to children, and we do not knowingly collect children’s personal information through it. Contact us if you believe a child has sent information so we can review and remove it where appropriate.

12. Changes and contact

We update the effective date when these practices materially change. Questions and requests can be sent to contact@cognisearch.net.