Privacy policy

Information you provide

When you contact us, we store the name, email address, phone number if supplied, and messages you submit. Your conversation also includes its language, dates, status, and read information. Please avoid sending passwords, payment card details, or information you are not authorized to share.

How the conversation is used

The inquiry system makes your message available to authorized ColSuite administrators so they can respond and follow up. A new inquiry can generate an acknowledgment email and staff notifications. Staff chat replies appear in the website widget; they do not automatically generate an email for each reply.

This draft covers website inquiries. Account, shipment, customer, payment, and AI-related data processing within the platform must be addressed in the final service privacy information and any relevant customer agreement.

The guest chat cookie

After you start a conversation, the colsuite_guest_chat cookie lets the same browser reopen it for up to 30 days from creation. It contains a random access secret. The database stores a hash of that secret. The cookie is HttpOnly, uses SameSite Lax, and is marked Secure when the website is served over HTTPS.

Chat access is based on this browser cookie, not an IP address, MAC address, or an email address alone. Clearing the cookie or using a different browser can prevent you from reopening the same conversation.

Other browser storage

The widget uses local storage to remember the last message you have seen and display an unread indicator. This marker does not grant access to your chat. Website session and security cookies may also be used for language preferences and request protection.

Ending a chat and record retention

End chat revokes this browser’s access and removes its chat cookie. Ending a chat, clearing cookies, or reaching the 30-day expiry does not delete messages already stored in the inquiry system. On a shared device, end the chat when you finish.

A record-retention schedule and deletion process must be confirmed before this policy is finalized. You can contact us to ask about access, correction, or deletion of information associated with your inquiry. Identity verification may be needed before information is disclosed or changed.

Providers and privacy questions

Hosting, email delivery, and other configured services may process information needed to provide their functions. The final policy must identify the relevant recipients, hosting locations, any transfers, and the applicable grounds for processing. Contact us with any privacy concern; this draft does not limit rights available under applicable law.