Privacy Notice | Cogent Consulting Group

1. Who We Are

Cogent Consulting Group ("Cogent," "CCG," "we," "us," or "our") is a U.S. corporation located at 116 East Oak Hill Drive, Florence, AL 35633. This Privacy Notice explains how we collect, use, and share personal data when you interact with our website (myccgroup.com), AI agents, and related services (the "Services"). For personal data processed in connection with our Services, Cogent acts as the data controller.

2. Personal Data We Collect

Identity & contact data: name, email address, phone number, company, job title.
Account credentials: login identifiers and hashed authentication tokens.
Support and communications: messages, form submissions, meeting notes, chat transcripts with our AI assistant.
Diagnostic and assessment inputs: answers you provide to our AI Opportunity Diagnostic and readiness assessments.
Usage and telemetry: pages viewed, features used, referring URLs, timestamps, device identifiers, IP address, browser and OS metadata.
Cookies and similar technologies: see the Cookies section below.

Payment card details are collected directly by our Merchant of Record, Paddle, and are not stored on our systems. We receive limited transaction metadata (order ID, product, amount, country) from Paddle to service your subscription.

3. How We Use Personal Data (Purposes and Legal Bases)

Provide the Services — account creation, delivering AI agent outputs, subscription management (legal basis: performance of a contract).
Customer support — responding to questions and troubleshooting (contract; legitimate interests).
Security and fraud prevention — protecting accounts, detecting abuse, maintaining integrity of the Services (legitimate interests; legal obligation).
Product improvement — analyzing usage patterns to improve features (legitimate interests).
Marketing — sending updates and offers where permitted; you can unsubscribe at any time (consent, or legitimate interests where allowed).
Legal and accounting — complying with tax, accounting, and other legal obligations (legal obligation).

4. How We Share Personal Data

We share personal data only with the following categories of recipients:

Merchant of Record (Paddle): for checkout, payment processing, subscription management, tax compliance, invoicing, and refund handling.
Service providers / subprocessors: cloud hosting, database, email delivery, analytics, AI model providers, and customer support tools that process data on our behalf under written agreements.
Professional advisers: lawyers, accountants, and auditors under duties of confidentiality.
Authorities: where required by law, subpoena, or to protect rights, safety, or property.
Business transfers: in connection with a merger, acquisition, or sale of assets, subject to continued protection of your data.

We do not sell your personal data.

5. International Transfers

Cogent is based in the United States and our service providers may process data in other countries. Where personal data is transferred out of the UK or EEA, we rely on lawful transfer mechanisms such as the European Commission's Standard Contractual Clauses (SCCs), the UK International Data Transfer Addendum, or adequacy decisions where available.

6. Data Retention

We keep personal data only as long as necessary for the purposes described above, including to comply with legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. When no longer required, personal data is deleted or anonymised.

7. Security

We implement appropriate technical and organisational measures to protect personal data, including encryption in transit, role-based access controls, isolated database policies (row-level security), least-privilege service credentials, and audit logging. No system is 100% secure; you are responsible for keeping your account credentials confidential.

8. Your Rights

Depending on where you live, you may have the right to:

access the personal data we hold about you;
request correction or deletion of your data;
request restriction of, or object to, certain processing;
receive your data in a portable format;
withdraw consent where processing is based on consent;
lodge a complaint with your local data protection authority.

To exercise these rights, email privacy@myccgroup.com. We will respond within the timeframes required by applicable law (generally within one month for GDPR/UK GDPR requests).

9. Cookies

We use essential cookies to run the Services (authentication, session state) and, with your consent where required, analytics cookies to understand product usage. You can manage cookie preferences through your browser settings or, where offered, in-product controls.

10. Children

The Services are not directed to children under 16, and we do not knowingly collect personal data from them.

11. Changes to This Notice

We may update this Privacy Notice from time to time. Material changes will be posted here and, where appropriate, communicated by email.

12. Contact

Cogent Consulting Group
116 East Oak Hill Drive, Florence, AL 35633, USA
Email: privacy@myccgroup.com