Legal
Privacy Notice.
A short summary follows. The full notice is being finalised for publication; the current draft is available under request to dataprotect@coshine.com.
Coshine processes personal data in two distinct capacities: (1) as a payment service provider on behalf of our customers (in which case we act as processor under their controllerships), and (2) on this website, where we act as controller for limited marketing and contact data.
On this website we use Google Tag Manager and Google Analytics 4 to measure aggregate usage — pages visited, referral source, country and device type. The legal basis is your consent (GDPR Art. 6(1)(a)): analytics cookies are set only after you accept them in the cookie banner, and you can withdraw consent at any time via the Cookies page. Google Analytics 4 does not log or store visitor IP addresses, and we never send names, email addresses, form contents or any payment data to analytics.
We do not sell personal data. We retain marketing contact data for as long as you remain in our pipeline; you can request deletion at any time via dataprotect@coshine.com.
For data we process on behalf of our customers, please refer to the data processing agreement signed with your provider; we publish our sub-processor list at /trust/sub-processors.