Privacy Policy

1. Who we are

CobiCare, Inc. ("CobiCare," "we," "us," or "our") is the data controller for personal information collected through this website (cobicare.ai). Our principal place of business is in the United States. For data protection enquiries, contact us at privacy@cobicare.ai.

2. Information we collect

We collect only what is necessary to operate this website and respond to enquiries.

Information you provide directly

When you submit the contact form on this website, we collect your name, email address, and the message you write. We may also collect your organisation name and role if you choose to include them. Providing this information is voluntary; however, without a valid name, email address, and message we may not be able to respond to your enquiry.

Information collected automatically

Like most websites, our infrastructure collects standard server logs including IP addresses, browser type, referring URLs, and pages visited. These logs are retained for security and operational purposes and are not used for advertising or cross-site tracking. We do not currently use analytics cookies or third-party tracking pixels on this website.

Cloudflare Turnstile

Our contact form uses Cloudflare Turnstile, a privacy-preserving challenge service, to distinguish humans from bots. Turnstile processes your browser's interaction locally; it does not use tracking cookies or fingerprinting. Cloudflare's privacy policy governs how Turnstile data is handled: cloudflare.com/privacypolicy.

3. How we use your information

We use the information you provide through the contact form to:

• Respond to your enquiry
• Follow up if you request information about the CobiCare platform or a pilot programme
• Maintain a record of our correspondence

We do not sell, rent, or share your personal information with third parties for their marketing purposes. We do not use your information to build advertising profiles.

4. Legal bases for processing (GDPR)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, we rely on the following legal bases under the General Data Protection Regulation (GDPR):

• Legitimate interests (Article 6(1)(f)): Responding to your enquiry, maintaining security of this website, and conducting basic operational logging.
• Contract (Article 6(1)(b)): Where your enquiry leads to a commercial relationship, processing necessary to take steps at your request prior to entering a contract.
• Consent (Article 6(1)(a)): Where you have explicitly agreed to a specific use, such as receiving communications from us. You may withdraw consent at any time by emailing privacy@cobicare.ai.

5. Service providers (data processors)

We use the following third-party service providers that act as data processors on our behalf. Each has executed or incorporated a Data Processing Addendum (DPA) consistent with GDPR requirements.

Notion

Contact form submissions are stored in Notion, a productivity and database platform we use as our internal CRM. Notion receives the name, email address, company, role, and message content you submit. Receipt confirmation emails are sent via a Notion automation. Notion's DPA is incorporated into its Business Terms, and its privacy policy is available at notion.so/privacy.

Cloudflare

This website is served via Cloudflare, which provides hosting, content delivery, security services, and Cloudflare Turnstile (our bot-detection service). Cloudflare processes standard server logs — including IP addresses, browser type, referring URLs, and pages visited — as part of operating and securing this website. Cloudflare's DPA is incorporated into its Self-Serve Subscription Agreement. Cloudflare's privacy policy is available at cloudflare.com/privacypolicy.

6. International data transfers

CobiCare is based in the United States. If you are located outside the United States, your personal information will be transferred to and processed in the United States. For transfers of personal data from the EEA or UK, we rely on appropriate safeguards including Standard Contractual Clauses where required.

7. Data retention

We retain contact form enquiries and email correspondence for as long as is reasonably necessary to respond to your enquiry and manage any resulting relationship, typically no longer than three years from last contact. Server logs are retained for up to 90 days. You may request deletion at any time.

8. Your rights

Depending on where you are located, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request that we correct inaccurate or incomplete data.
• Erasure: Request deletion of your personal data, subject to certain legal exceptions.
• Restriction: Request that we limit how we use your data while a dispute is resolved.
• Portability: Receive your data in a structured, machine-readable format.
• Objection: Object to processing based on legitimate interests.
• Withdrawal of consent: Where processing is based on consent, withdraw it at any time without affecting prior processing.

CobiCare has not appointed an EU/UK Data Protection Officer (DPO) or an Article 27 representative at this time, as we do not believe we currently meet the thresholds for mandatory appointment under GDPR. If this changes, we will update this policy accordingly.

To exercise any of these rights, contact us at privacy@cobicare.ai. We will respond within 30 days. If you are in the EEA or UK and are not satisfied with our response, you have the right to lodge a complaint with your local supervisory authority (in the UK: the Information Commissioner's Office; in the EEA: your national data protection authority).

9. California residents (CCPA / CPRA)

California residents have rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act, including the right to know, delete, correct, and opt out of the sale or sharing of personal information. CobiCare does not sell or share personal information as those terms are defined under California law. To submit a verifiable consumer request, contact privacy@cobicare.ai.

10. Cookies

This website does not use analytics cookies, advertising cookies, or cross-site tracking cookies. We may use strictly necessary session-related browser storage for technical operation of the site. No cookie consent banner is shown because we do not set non-essential cookies.

11. Children's privacy

This website is not directed at children under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us and we will delete it promptly.

12. Security

We use industry-standard measures to protect your personal information, including TLS encryption for all data in transit, access controls, and processing on Cloudflare's globally distributed infrastructure with strict security headers. No method of transmission over the internet is completely secure; we cannot guarantee absolute security.

13. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Material changes will be communicated via the website. The updated policy will apply from the posted effective date.

14. Contact

For any questions, requests, or concerns about this Privacy Policy or our data practices, contact us at: