Updated 14 Oct 2026
Effective 1 Nov 2026
Version 3.1This policy explains how CortexGrip Ltd handles personal data when you visit our website, create an account or use any of our products. It also covers what we do with the data of people who visit the sites you build.
1. Who looks after your data
CortexGrip Ltd is the data controller for your account information. We’re registered with the UK Information Commissioner’s Office (ICO) under number ZB482913. You can reach our Data Protection Officer at privacy@cortexgrip.com.
2. What we collect
We only collect what we need to run CortexGrip well. Here’s every category, with the reason we hold it.
CATEGORY
WHAT IT INCLUDES
WHY WE NEED IT
Account
Name, email, phone, hashed password
To create and secure your account
Billing
Billing address, last 4 card digits, invoices
To take payment and meet UK tax law
Your sites
Content, uploads, domain and DNS settings
To host, publish and back up your sites
Usage
Pages viewed, features used, device type
To fix bugs and improve CortexGrip
Support
Chats, emails and call notes
To help you and train our team
3. How we use it
We use your data to provide the services you sign up for and keep them secure. Specifically, we use it to:
Create your account and keep it secure- Take payments and send invoices and receipts
- Host, publish and back up your sites
- Send service emails, like renewal reminders
- Improve features, using anonymised usage patterns
We only send marketing emails if you’ve opted in, and every one has a one-click unsubscribe.
4. Your visitors’ data
When people use a site you’ve built with CortexGrip (for example, filling in a contact form), you decide what’s collected and why. You’re the controller, and we process that data on your behalf under our Data Processing Addendum.
IN PLAIN ENGLISH
Your visitors are your relationship. We just keep their data safe on your behalf.
5. Who we share it with
We work with a small number of trusted partners who help us run CortexGrip. Each one is bound by a contract and can only use your data for the job we give them.
Amazon Web Services
Hosting in London (eu-west-2)
Stripe
Secure card payments
Postmark
Delivering service emails
Google Analytics
Only if you allow analytics cookies
6. How long we keep it
We keep data only as long as we need it, then delete or anonymise it.
Account data
Until you close it
Billing records
6 years (tax law)
Support chats
2 years
Usage analytics
14 months
Server logs
30 days
7. Your rights
Under UK GDPR you have strong rights over your data. Most of them are one click away in Settings → Privacy.
See your data
Get a copy of everything we hold about you.
Take it with you
Export it in a standard, portable format.
Fix mistakes
Correct anything that’s wrong or out of date.
Delete it
Ask us to erase your data for good.
Pause processing
Restrict how we use it while we check.
Say no
Object to marketing or profiling.
Most requests are instant
Anything that needs a human is done within 30 days.
8. Keeping it secure
All data is encrypted in transit (TLS 1.3) and at rest (AES-256). Staff access is limited, logged and protected by two-factor authentication. We run independent security tests every year.
IN PLAIN ENGLISH
Your data is locked down in transit and at rest, and only a few people can ever see it.
9. International transfers
Your data is stored in the UK and EU. If a partner processes data outside these regions, we use UK-approved safeguards such as the International Data Transfer Agreement.
10. Changes and complaints
We’ll email you before any significant change to this policy. If you’re unhappy with how we’ve handled your data, tell us first. You can also complain to the ICO at ico.org.uk.
Was this page clear?
Tell us what to explain better and we’ll rewrite it.
