Privacy Policy

This notice says what information this website collects, why, who else handles it, how long we keep it, and what you can ask us to do with it. The data controller is Convert Commerce Limited, licence number MC14494, registered in Masdar City Free Zone, Abu Dhabi, trading as Convert Commerce, registered office Ground Floor, Incubator Building, Masdar City Free Zone, Masdar City, Abu Dhabi, United Arab Emirates. Write to info@convertcommerce.com with any question about your information.

What we collect, and why

When you send an enquiry

Your name, email address and company; the enquiry type, company size, budget, timeline, partnership stage and referral source you select; your message; whether you ticked the box to receive partnership insights, and when; and the page of this site the form was on. We use this to answer you. Legal basis: our legitimate interest in responding to an enquiry you made.

When you request a free Instant Scan

Your name, email address, company name, your website if you give it (we store it and do not read the site), whether you are a software company, an agency or a consultancy, your answers to the scan's eight questions, and whether you ticked either of its two optional boxes, and when. The scan runs only after you confirm your address by clicking the link we email you; an unconfirmed request is deleted after a week. We also keep a hashed form of your network address for a short time to limit how many scans one connection can request.

We use your answers, in code and without any AI model, to produce the result we email you. We also use them, with your contact details, to follow up with you about Convert Commerce's services, and we keep them so that they can be filled in for you if you later buy a paid assessment with the same email address. We use them to tell you about PartnerBuddy, our partner management software, only if you ticked the separate box asking for that information; we may note from your answers whether PartnerBuddy could suit your programme, and we act on that note only if you ticked the box. Legal basis: performance of the service you asked for; our legitimate interest in following up a request for our services and in preventing abuse; and, for PartnerBuddy information, your consent, which you can withdraw at any time by unsubscribing from any message, by the opt-out link in any email that follows a scan, or by writing to info@convertcommerce.com. We keep the time you gave it as the record that you did. Every email that follows a scan also carries the opt-out link described under Aggregate research below.

When you buy an assessment

Everything above, plus the survey answers you give, the billing name and address you enter at checkout, and for the Advanced Assessment a record of your acceptance of the mutual non-disclosure agreement: the name you accepted under, the version accepted, the time, a hashed form of your network address and your browser identifier, kept as evidence of the agreement. Card details are entered on Stripe's own form and never reach us. Legal basis: performance of the contract, and our legal obligation to keep accounting records.

Automatically

Our hosting and edge providers record network addresses and browser identifiers in their access and security logs, as any web host does. We do not build profiles from them.

Only with your permission

Google Analytics runs only if you allow it in the banner shown on your first visit. It sets cookies and sends your network address and the pages you read to Google. The survey page is excluded from analytics whatever you choose. You can change your answer by clearing this site's data in your browser, after which the banner asks again. Partnership insights by email are sent only if you ticked the box on the contact form or the Instant Scan form, and information about PartnerBuddy only if you ticked its own box on the Instant Scan form; every message carries an unsubscribe link.

Who processes it

We use these providers to run the service. Each acts on our instructions under a data processing agreement.

• Lovable hosts the site, sends our transactional email (scan reports, receipts, survey links, the NDA copy), and provides the gateway to the AI model providers below.
• Cloudflare serves the site at the network edge and protects it against abuse.
• Supabase holds the database and the stored reports, invoices and NDA copies.
• Stripe takes payment. Stripe is an independent controller for the card transaction itself.
• AI model providers, accessed through Lovable's gateway, do not write your assessment. When you buy a paid assessment, they read your website's public pages, with your company name, to describe what you sell and who buys it, and use that description to choose your partner targets from our vendor record, with one line on each saying why it fits. They also read those pages for an internal check of how well a read of a website agrees with survey answers; nothing from that check is printed in your report. Your survey answers are not sent to them. They also read vendors' public partner pages to keep our vendor records current. What is sent to them is not used to train their models under the terms we hold.
• Google Analytics, only with your permission, as above.

Some of these providers operate outside the United Kingdom. Where they do, the transfer relies on the UK's adequacy regulations or on the International Data Transfer Agreement with the provider.

Aggregate research, and how to opt out

We keep a graph of which partners, platforms and competitors companies name in their survey answers and which platforms appear on their websites, so that assessments can say how common a choice is. Entries in that graph are the named partner or platform, the kind of relationship, and the answering company's audience type and sector. They do not carry your company name, website, email or any individual's name. The same answers may be included, stripped of anything that could identify your company, in benchmark statistics across our client base. You can opt out at any time with the link in every email that follows a scan or an assessment, or by writing to info@convertcommerce.com; the opt out removes what your answers contributed and applies to any later assessment you buy.

How long we keep it

• Contact enquiries: two years from the last update.
• Free Instant Scan records and reports: one year from the request.
• Orders that were started but never paid for: ninety days.
• Paid assessments, their reports, invoices and NDA copies: six years from the end of the financial year of purchase, which is what accounting rules require of the invoice.
• Rate-limiting records: thirty days.

Links to reports in our emails expire after fourteen days; write to us for a fresh one.

Your rights

You can ask for a copy of what we hold about you, ask us to correct it, ask us to delete it, object to our use of it, or ask us to restrict it. Deleting a paid assessment removes the report and survey answers; we keep the invoice for as long as accounting rules require. Write to us through the contact form or at info@convertcommerce.com and we will action the request within a month. If you are unhappy with how we handle your information you can complain to the Information Commissioner's Office.

The rest of the agreement

Our terms of sale and refund policy set out the rest of the agreement for an assessment.