SnobBot Cookie Policy

Last updated: 17 November2025

This Cookie Policy explains how Snob Monkey Ltd. (“SnobBot”, “we”, “us”, or “our”) uses cookies and similar technologies when you visit snobbots.com or use any of our products and services (collectively, the “Services”).

1) What cookies are

Cookies are small text files placed on your device to collect standard internet log and visitor behaviour information. They help us make the website work efficiently, understand how you use it, and deliver a more personalised experience.

Cookies may be first-party (set by us) or third-party (set by external providers such as analytics or payment processors).

2) How we use cookies

We use cookies and similar technologies for the following purposes:

Type	Purpose	Examples	Retention
Essential	Required for the website and Dashboard to function properly. These cannot be switched off in our systems.	Login sessions, authentication, CSRF protection	Session-based
Performance / Analytics	To understand how visitors use our Services, improve functionality, and troubleshoot issues.	Google Analytics, dashboard usage metrics	Typically 1–24 months
Functional	To remember your preferences, language, or layout settings.	“Remember me” login, dashboard layout choices	6–12 months
Marketing / Tracking	To measure engagement with marketing campaigns or identify returning visitors from ads.	Cookie consent platform, campaign tracking	Variable depending on partner

3) Third-party cookies

Some cookies are placed by third-party services integrated with SnobBot, such as:

• Analytics – Google Analytics, Microsoft Clarity, or similar tools for aggregated usage insights.
• Payments – Stripe or other payment processors may set cookies for secure transactions.
• AI or hosting providers – Operational metrics or API usage tracking.

We do not allow these parties to use cookies for their own marketing unrelated to SnobBot.

4) Managing or disabling cookies

You can control cookies through:

• Our cookie consent banner, which allows you to enable or disable non-essential cookies.
• Your browser settings, where you can delete existing cookies or block new ones.

If you block essential cookies, some features of snobbots.com and the Dashboard may not work correctly.

5) Updates to this Cookie Policy

We may update this Cookie Policy periodically. The “Last updated” date at the top will always indicate the latest revision.

For questions about our use of cookies, contact us at contactus@snobmonkey.com.

SnobBot Data Processing Agreement (DPA)

Last updated: 17 November 2025

This Data Processing Agreement (“DPA”) forms part of the Terms of Service between Snob Monkey Ltd. (“SnobBot”) and the Customer using the SnobBot Services (“Controller”, “Client”, or “you”).

It reflects the parties’ agreement on how personal data will be handled where SnobBot acts as a Data Processor.

1) Definitions

• Data Controller / Controller: The organisation determining the purposes and means of processing personal data.
• Data Processor / Processor: The party processing data on behalf of the Controller (SnobBot).
• Data Subject: An identified or identifiable individual whose personal data is processed.
• Personal Data: Any information relating to an identified or identifiable individual.
• Applicable Law: All data protection laws applicable to the Controller or Processor, including the UK GDPR, EU GDPR, and equivalent international frameworks.

2) Subject matter and duration

This DPA covers the processing of personal data by SnobBot on behalf of the Controller while providing the Services described at snobbots.com.

Processing continues for the duration of the service agreement, until deletion or return of the data as requested by the Controller.

3) Nature and purpose of processing

SnobBot processes data solely to deliver and maintain its Services, including:

• Operation of Chatbots and dashboards.
• Website scanning, SEO, and analytics tools.
• Customer support and maintenance.
• Product improvement and diagnostics (aggregate/anonymised).

SnobBot will not process personal data for its own purposes without the Controller’s written instructions.

4) Categories of data and subjects

• Categories of data: Contact details, chat inputs, website data, usage data, technical logs, prompts, and optional uploaded content.
• Data subjects: End-users interacting with the Chatbot or other SnobBot features; employees or representatives of the Controller.

5) Processor obligations

SnobBot shall:

• Process personal data only on documented instructions from the Controller.
• Ensure staff with access to personal data are subject to confidentiality obligations.
• Implement appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing, loss, or damage.
• Notify the Controller without undue delay of any personal data breach.
• Assist the Controller in responding to data-subject requests, impact assessments, or consultations with regulators.
• Delete or return all personal data at the end of the service provision (unless retention is required by law).

6) Sub-processors

SnobBot may engage sub-processors to support the Services.

• Sub-processors are subject to written agreements ensuring data protection standards equivalent to this DPA.
• A current list of sub-processors (infrastructure, AI model providers, analytics, support tools) is available on request.
• SnobBot will notify Controllers in advance of material changes to sub-processors.

7) International transfers

Where SnobBot or its sub-processors transfer data outside the UK/EEA, it will ensure lawful safeguards such as:

• UK International Data Transfer Addendum,
• EU Standard Contractual Clauses, or
• other mechanisms recognised under Applicable Law.

8) Audit rights

Upon reasonable notice, the Controller may request evidence of SnobBot’s data-protection controls or relevant audit reports.

For security reasons, physical audits will only be permitted under strict confidentiality and scheduling arrangements.

9) Liability

Each party’s liability for breaches of this DPA shall be limited as set out in the main service agreement, except where prohibited by law.

10) Termination

Upon termination of the Services, SnobBot will delete or return personal data within 60 days, unless otherwise required by law or expressly agreed with the Controller.

11) Governing law

This DPA is governed by and interpreted in accordance with the laws of England and Wales, with exclusive jurisdiction in its courts.

Execution

By continuing to use SnobBot’s Services, the Controller agrees to this DPA and authorises SnobBot to process personal data in accordance with its terms.

For a countersigned copy, contact contactus@snobmonkey.com.