Legal
Privacy Notice
This draft explains how [LEGAL NAME TO BE ADDED AFTER REGISTRATION], trading as Cold, intends to handle personal information through coldagencies.online.
Last updated July 12, 2026
Who is responsible
[LEGAL NAME TO BE ADDED AFTER REGISTRATION] will be the controller for account, billing and website information. Customers may be controllers of prospect and campaign information they upload or ask Cold to process; in those cases Cold acts as their processor. The legal entity, company number and registered address must be added before launch.
Information we handle
We may handle account and contact details, authentication records, workspace settings, billing and subscription records, support communications, usage and security logs, campaign configuration, uploaded media, prospect contact information, outreach messages, replies, bookings and campaign outcomes. We do not intentionally collect special-category information and customers should not upload it unless a lawful, documented need has been agreed.
How we receive it
Information comes from users, their authorised workspace members, connected services, uploaded lists, public business sources selected by a customer, campaign recipients who reply or opt out, and technical records created when the service is used.
Why we use it
We use information to create and secure accounts, provide requested features, process payments, generate and deliver campaign materials, send customer-authorised communications, handle replies and suppression requests, prevent fraud and abuse, diagnose faults, support users and meet legal obligations. A solicitor must confirm and document the applicable lawful bases before launch.
AI and automated processing
Cold uses AI providers to research, draft, classify and generate content. Relevant prompts, campaign context or media may be sent to configured providers to fulfil a customer's request. Customers remain responsible for reviewing outputs and the lawfulness of campaigns. Cold should not claim that an automated result is a legal, credit, employment or similarly significant decision.
Service providers and international transfers
The service is designed to use providers including Supabase for database and authentication services, Stripe for payments, communications providers such as Resend and Twilio, and configured AI or media providers such as OpenRouter, Google and fal.ai. The final notice must identify the providers actually enabled in production, their roles, processing locations and the transfer safeguards relied upon.
Cookies
Authentication cookies are used to keep users signed in and protect accounts. A referral cookie may be set after a referral link is opened and can last for the referral period configured by the partner programme. Any non-essential analytics or advertising cookies must remain disabled until an appropriate consent mechanism and cookie notice are in place.
Retention
Information is retained only for as long as needed for the service, security, legal, tax and dispute-resolution purposes. Suppression records may need to be retained to ensure an opted-out person is not contacted again. Concrete retention periods and a deletion process must be approved and documented before launch; this draft does not promise deletion from backups on an unimplemented schedule.
Security
Cold uses access controls, tenant separation, database row-level security, encryption mechanisms and audit records. No online service can guarantee absolute security. Users must protect their credentials and report suspected compromise promptly.
Your rights
Depending on the circumstances, UK data-protection law may give you rights to access, correct, erase, restrict or object to use of your information, and to receive portable data. You may also complain to the Information Commissioner's Office. Contact hello@coldagencies.online to make a request; identity verification may be required.
Children
Cold is a business service and is not intended for customer account holders under 18. The service must not knowingly be used to target children. If the service may be accessed by children, an Age Appropriate Design Code assessment and suitable safeguards are required before launch.
Contact and changes
Privacy questions can be sent to hello@coldagencies.online. The operator's postal address and, if required, ICO registration details must be inserted before launch. Material changes will be dated and communicated where required.