1. About this Privacy Policy
This Privacy Policy explains how Cognival LTD collects, uses, stores, shares, and protects personal data when you visit our website, join our waitlist, create an account, contact us, interact with our communications, or purchase Cognival products when they are made available.
We process personal data in accordance with the UK General Data Protection Regulation, the Data Protection Act 2018, the Privacy and Electronic Communications Regulations, and other applicable data protection laws.
2. Controller details
The data controller is Cognival LTD, a private limited company registered in England and Wales under company number 16782883.
- Registered office: 1 De La Warr Way, Cambourne, Cambridge, England, CB23 6DX.
- Email: business@cognival.co.uk.
- Website: cognival.co.uk.
3. Personal data we collect
We collect personal data that you provide directly and data generated by your use of the website.
| Category | Examples |
|---|---|
| Identity and contact data | Name, email address, contact details, account details, customer communications. |
| Account data | Login credentials, account preferences, signup date, account status, security records. |
| Waitlist and launch data | Email address, signup source, preferences, product interest, launch communications. |
| Order and transaction data | Products ordered, billing and shipping details, payment status, delivery information, customer support records. |
| Technical data | IP address, browser type, device information, operating system, pages viewed, timestamps, error logs and security logs. |
| Marketing data | Email preferences, campaign interaction, consent status, unsubscribe records. |
4. How we collect personal data
- When you submit a waitlist, account, contact, or checkout form.
- When you contact us by email or through the website.
- When you interact with launch communications, product updates, or customer service.
- Automatically through essential website technologies, server logs, security tools, and analytics where enabled.
- From service providers involved in hosting, payment processing, fulfilment, email delivery, analytics, fraud prevention, or customer support.
5. How we use personal data
| Purpose | Legal basis |
|---|---|
| To operate the website, forms, accounts, and customer access. | Contract performance and legitimate interests. |
| To manage waitlist access, launch updates, and first-batch communications. | Consent and legitimate interests. |
| To respond to inquiries and provide customer support. | Legitimate interests and contract performance. |
| To process orders, payments, delivery, refunds, and customer records. | Contract performance and legal obligations. |
| To send marketing communications where permitted. | Consent or legitimate interests, depending on the communication and applicable law. |
| To protect the website, prevent fraud, and maintain security. | Legitimate interests and legal obligations. |
| To comply with accounting, tax, regulatory, and legal obligations. | Legal obligations. |
6. Email and marketing communications
If you join the waitlist, create an account, or opt in to updates, we may send launch news, first-batch access, product updates, account notices, and customer communications. You can unsubscribe from marketing emails at any time using the unsubscribe link in the email or by contacting us.
Transactional and service emails, including account, order, delivery, safety, or legal notices, may still be sent where necessary.
7. Cookies, storage, and analytics
We use essential cookies, local storage, or session storage where needed for website operation, account access, form handling, security, and performance. We may also use analytics technologies to understand website performance and improve the customer experience.
Where legally required, non-essential cookies or similar technologies will be used only with appropriate consent.
8. Service providers and data sharing
We share personal data only where necessary for legitimate business and legal purposes. This may include hosting providers, database providers, email delivery platforms, payment processors, fulfilment partners, analytics providers, security providers, professional advisers, regulators, and legal authorities.
We do not sell personal data.
9. International transfers
Some service providers may process personal data outside the United Kingdom or European Economic Area. Where required, we rely on appropriate safeguards such as adequacy regulations, standard contractual clauses, transfer risk assessments, or equivalent lawful mechanisms.
10. Data retention
We keep personal data only for as long as necessary for the purposes described in this Privacy Policy. Retention periods depend on the type of data, legal requirements, customer relationship, security needs, accounting records, and dispute-management requirements.
Marketing records are retained until you unsubscribe or ask us to remove them, unless a longer period is required to keep a suppression record or comply with law.
11. Security
We use technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, encrypted connections, secure hosting, restricted administrative access, logging, and data minimisation.
No website or online transmission is completely secure, but we take security seriously and maintain proportionate safeguards.
12. Your rights
Depending on your location and applicable law, you may have rights to access, correct, delete, restrict, object to processing, request portability, withdraw consent, or complain about how your personal data is handled.
To exercise your rights, contact business@cognival.co.uk. We may need to verify your identity before responding.
13. Complaints
If you are unhappy with how we handle personal data, please contact us first so we can address the issue. You also have the right to complain to the UK Information Commissioner’s Office at ico.org.uk.
14. Children
Our website and products are not directed at children. We do not knowingly collect personal data from children. If you believe a child has provided personal data to us, please contact us.
15. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. The latest version will always be available on this page and will show the date it was last updated.