Privacy Policy

This notice says what information this website collects, why, who else handles it, how long we keep it, and what you can ask us to do with it. The data controller is Convert Commerce Limited, licence number MC14494, registered in Masdar City Free Zone, Abu Dhabi, trading as Convert Commerce, registered office Ground Floor, Incubator Building, Masdar City Free Zone, Masdar City, Abu Dhabi, United Arab Emirates. Write to info@convertcommerce.com with any question about your information.

What we collect, and why

When you send an enquiry

Your name, email address and company; the enquiry type, company size, budget, timeline, partnership stage and referral source you select; your message; whether you ticked the box to receive partnership insights, and when; and the page of this site the form was on. We use this to answer you. Legal basis: our legitimate interest in responding to an enquiry you made.

When you request a free Instant Scan

Your name, email address, company name and website, the partnership challenges you select, and, when your email domain is not the website being scanned, the relationship you declare to that company. The scan runs only after you confirm your address by clicking the link we email you; an unconfirmed request is deleted after a week. We also keep a hashed form of your network address for a short time to limit how many scans one connection can request. We use this to produce and email the scan. Legal basis: performance of the service you asked for, and our legitimate interest in preventing abuse.

When you buy an assessment

Everything above, plus the survey answers you give, the billing name and address you enter at checkout, and for the Advanced Assessment a record of your acceptance of the mutual non-disclosure agreement: the name you accepted under, the version accepted, the time, a hashed form of your network address and your browser identifier, kept as evidence of the agreement. Card details are entered on Stripe's own form and never reach us. Legal basis: performance of the contract, and our legal obligation to keep accounting records.

Automatically

Our hosting and edge providers record network addresses and browser identifiers in their access and security logs, as any web host does. We do not build profiles from them.

Only with your permission

Google Analytics runs only if you allow it in the banner shown on your first visit. It sets cookies and sends your network address and the pages you read to Google. The survey page is excluded from analytics whatever you choose. You can change your answer by clearing this site's data in your browser, after which the banner asks again. Partnership insights by email are sent only if you ticked the box on the contact form; every message carries an unsubscribe link.

Who processes it

We use these providers to run the service. Each acts on our instructions under a data processing agreement.

• Lovable hosts the site, sends our transactional email (scan reports, receipts, survey links, the NDA copy), and provides the gateway through which the assessment is produced.
• Cloudflare serves the site at the network edge and protects it against abuse.
• Supabase holds the database and the stored reports, invoices and NDA copies.
• Stripe takes payment. Stripe is an independent controller for the card transaction itself.
• AI model providers, accessed through Lovable's gateway, produce the assessment from your website's public pages and your survey answers. Your company name and answers are sent to them for that purpose and are not used to train their models under the terms we hold.
• Google Analytics, only with your permission, as above.

Some of these providers operate outside the United Kingdom. Where they do, the transfer relies on the UK's adequacy regulations or on the International Data Transfer Agreement with the provider.

Aggregate research, and how to opt out

We keep a graph of which partners, platforms and competitors companies name in their survey answers and which platforms appear on their websites, so that assessments can say how common a choice is. Entries in that graph are the named partner or platform, the kind of relationship, and the answering company's audience type and sector. They do not carry your company name, website, email or any individual's name. The same answers may be included, stripped of anything that could identify your company, in benchmark statistics across our client base. You can opt out at any time with the link in every email that follows a scan or an assessment, or by writing to info@convertcommerce.com; the opt out removes what your answers contributed and applies to any later assessment you buy.

How long we keep it

• Contact enquiries: two years from the last update.
• Free Instant Scan records and reports: one year from the request.
• Orders that were started but never paid for: ninety days.
• Paid assessments, their reports, invoices and NDA copies: six years from the end of the financial year of purchase, which is what accounting rules require of the invoice.
• Rate-limiting records: thirty days.

Links to reports in our emails expire after fourteen days; write to us for a fresh one.

Your rights

You can ask for a copy of what we hold about you, ask us to correct it, ask us to delete it, object to our use of it, or ask us to restrict it. Deleting a paid assessment removes the report and survey answers; we keep the invoice for as long as accounting rules require. Write to us through the contact form or at info@convertcommerce.com and we will action the request within a month. If you are unhappy with how we handle your information you can complain to the Information Commissioner's Office.

The rest of the agreement

Our terms of sale and refund policy set out the rest of the agreement for an assessment.