Privacy policy
Version 1.0. Last updated October 18, 2026.
cxconfidenceindex.com publishes the 2023, 2024, and 2025 editions of the Offshore CX Confidence Index. Off Mute Media is responsible for your data on this site. This policy covers visits and measurement. The cookie policy lists what is stored in your browser, by name.
For any question or request about your data, write to [email protected].
What we collect and when
When you visit
Cloudflare, which hosts and protects the site, keeps technical logs with IP addresses for security and to keep the site running. We do not use them to identify anyone.
Links to other websites (sponsors, industry bodies, and the authors) carry tags that tell those sites the visit came from the Index and from which page. The tags contain nothing about you.
How you use the site, with your permission
If you accept analytics in the cookie bar, Google Analytics records how you use the site: the pages and sections you view, how far you scroll, how long you stay, and where you click, including the menu, the charts, and links to sponsors and other sites. Google tells browsers apart with an ID stored in a cookie. We do not send Google your name or email address.
We use this data to improve the Index and to give sponsors total figures. We do not use it to follow you across other websites or to build advertising profiles.
Your cookie choice
When you make or change your choice, we store a record of it: a random ID, what you chose, and when. The record has no IP address.
If you write to us
We keep your message and your email address so we can reply.
What sponsors receive
Sponsors pay to appear in a market's Confidence Profile. They receive total figures: how many people saw their profile or clicked their links, and over what period. They never receive your name, your email address, or what you did on the site.
We do not sell personal data or share it with advertising networks.
Legal basis
| What we do | Legal basis |
|---|---|
| Running and protecting the site | Our legitimate interest in a site that works and is secure (GDPR Article 6(1)(f)) |
| Google Analytics | Your consent in the cookie bar, which you can withdraw at any time (Article 6(1)(a)) |
| The record of your cookie choice | Our legal duty to show that we asked for consent (Article 6(1)(c)) |
| Replying to your messages | Our legitimate interest in answering you (Article 6(1)(f)) |
Who handles data for us
These companies provide the services the site runs on. Each one handles data on our instructions and under its own data protection agreement.
| Company | What for | Where |
|---|---|---|
| Cloudflare | Hosting and protecting the site, and the record of cookie choices | European Union, with servers around the world |
| Google Analytics and Google Tag Manager, only with your consent | Ireland and the United States |
When data leaves the European Economic Area for the United States, the transfer relies on the EU-U.S. Data Privacy Framework or the European Commission's standard contractual clauses.
Apart from these companies, we share data only when the law requires it.
How long we keep it
| Data | How long |
|---|---|
| Activity in Google Analytics | 14 months. After that, only totals remain. |
| Record of cookie choices | Three years from the choice |
| Messages you send us | Two years from your last message |
| Technical logs | The period Cloudflare sets |
Your rights
You can ask us for access to your data, to correct or delete it, for a copy you can take to another service, and to limit how we use it. You can also object to anything we do on the basis of our legitimate interest.
You can withdraw your consent at any time from Cookie settings in the menu.
To use any of these rights, write to [email protected]. We reply within one month. If you only read the site, we hold nothing that identifies you by name.
If you disagree with our answer, you can complain to the Spanish Data Protection Agency (www.aepd.es) or to the data protection authority where you live.
Children
The site is not meant for children under 14, and we do not knowingly collect their data. If you think we have, write to us and we will delete it.
Security
The whole site is served over an encrypted connection (HTTPS).
Changes
When what we do with data changes, this page and the date at the top change too.