/ /

Unified Consent Retention Policy

Updated 29 days ago

To properly display the Unified Consent Preference Hub on a customer's website and record the visitor's preferences, Osano may collect the following information:

Information Collected

Retention Limit

IP address

Indefinitely

Unified Consent ID / subject identifier 

Indefinitely

User Email Address (where the customer uses email as the subject identifier)

Indefinitely

Phone Number (where used as the subject identifier)

Indefinitely

Customer-supplied attributes (free-form)

Indefinitely

Record of Consent

Indefinitely

Aggregate Reporting Dashboard Metrics

Indefinitely

All data above is stored in AWS-managed services and protected by AWS: encrypted at rest using AES-256 (via AWS Key Management Service) and encrypted in transit using TLS. When identifiers such as IP address, email, phone, or subject ID are used to look up a consumer's consent records, they are stored as one-way hashes. Records are stored in AWS EU-Frankfurt or US-Virginia depending on caller context and customer routing. No personal information from the EU or the UK is transferred to the US.

Was this article helpful?
Subscribe to receive updates on this article