Privacy Policy

Last updated: January 2024

This privacy policy explains how E-commerce Analytics Hub (operated by CortexCart) collects, uses, and protects your personal data when you visit our website. We are committed to being transparent about what we do with your information.

Data Controller

The data controller responsible for your personal data is:

E-commerce Analytics Hub
Operated by CortexCart
Email: privacy@ecommerce-analytics-hub.co.uk

What Data We Collect

We collect the following types of personal data:

  • Contact form submissions — your name, email address, company name (optional), and message content
  • Email capture forms — your email address when you request a guide or resource
  • Analytics data — pages visited, time on site, device type, browser, and approximate location (country/city level)
  • Cookie data — consent preferences and session information (see Cookies section below)

How We Use Your Data

We use your personal data for the following purposes:

  • To respond to enquiries — when you submit a contact form, we use your details to reply to your message
  • To deliver requested content — when you provide your email for a guide, we send you the resource
  • To understand site usage — we use analytics data to improve our content and user experience
  • To provide consultation services — if you request a CortexCart consultation, we pass your details to our team

We process your data under the following lawful bases:

  • Consent — for analytics cookies and email captures
  • Legitimate interest — for responding to contact form submissions and improving our services

Cookies

Our website uses cookies to function properly and to understand how visitors interact with our content.

Essential cookies

These are necessary for the website to work and cannot be switched off. They include:

  • Session storage — remembers your cookie consent choice and controls features like the exit-intent popup (session only, not shared with third parties)

Analytics cookies (optional)

These cookies are only set if you give consent via our cookie banner:

  • Google Analytics 4 (GA4) — helps us understand which pages are popular, how visitors find us, and what content is most useful. GA4 collects anonymised usage data including pages visited, session duration, and device information. Data is processed by Google and stored on their servers. You can learn more in Google's privacy policy.

If you reject analytics cookies, no tracking scripts are loaded and no analytics data is collected from your visit.

Data Retention

We keep your personal data only as long as necessary:

  • Contact form submissions — retained for up to 2 years, then deleted
  • Email capture data — retained until you unsubscribe or request deletion
  • Analytics data — retained for 14 months (GA4 default), then automatically deleted
  • Cookie consent preferences — stored in your browser's local storage until you clear it

Third-Party Data Processors

We share your data with the following third-party services that help us operate:

  • Amazon Web Services (AWS) SES — processes and delivers emails from our contact form and email capture forms. Data is processed within the EU/UK region. See AWS privacy notice.
  • Google Analytics (GA4) — processes anonymised website usage data only when you consent to analytics cookies. See Google's privacy policy.

We do not sell your personal data to any third party.

Your Rights

Under the UK General Data Protection Regulation (UK GDPR), you have the following rights:

  • Right of access — you can request a copy of the personal data we hold about you
  • Right to rectification — you can ask us to correct any inaccurate or incomplete data
  • Right to erasure — you can ask us to delete your personal data
  • Right to data portability — you can request your data in a structured, machine-readable format
  • Right to object — you can object to our processing of your data where we rely on legitimate interest
  • Right to restrict processing — you can ask us to limit how we use your data
  • Right to withdraw consent — where we rely on consent, you can withdraw it at any time

How to Exercise Your Rights

To exercise any of the rights listed above, please contact us:

We will respond to your request within 30 days. We may ask you to verify your identity before processing your request.

Complaints

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the UK's data protection supervisory authority:

Information Commissioner's Office (ICO)
Wycliffe House, Water Lane
Wilmslow, Cheshire, SK9 5AF
Website: ico.org.uk
Telephone: 0303 123 1113

We would appreciate the chance to address your concerns before you contact the ICO, so please reach out to us first.

Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this page periodically.