Privacy notice

As a controller, for account holders:

• Account details — name, work email address, organisation, and a hashed password.
• Billing details — company name, billing address, VAT number, and a payment reference held by our payment processor. We do not store card numbers.
• Product usage — pages viewed in the dashboard, features used, and error diagnostics, so we can find and fix faults.
• Correspondence — support tickets and emails you send us.

When a company installs the tracker or connects an integration, the platform receives data about that company's own visitors and customers. By design it is minimised:

• A first-party identifier stored in a cookie, used to join a visit to a later outcome.
• Page URLs, referrers, campaign parameters and advertising click identifiers.
• Approximate location, derived from a hashed or truncated IP address. Raw IP addresses are not retained unless a company explicitly enables it and records a justification.
• Hashed email addresses and phone numbers, used to match a person across devices and to send conversion signals to advertising platforms. Raw values are stored only where the company enables it and has a lawful basis.
• Business outcomes supplied by the company — that a lead was created, an appointment was booked, attended, or produced revenue.

For account and billing data we rely on performance of a contract. For product usage and diagnostics we rely on legitimate interests — running a reliable service — balanced against your interests.

For tracking on a company's own websites, the controller is the company. Where consent is required, it must be collected before the tracker records anything. The platform captures consent state alongside every event and will not export a conversion for a visitor who has not consented to marketing.

Raw event data is retained for a period each company sets, defaulting to 26 months. A nightly job deletes anything past that horizon. Aggregated reporting totals are kept beyond it, because they contain no personal data.

Account and billing records are kept for seven years after an account closes, to meet UK company and tax record-keeping requirements.

We do not sell personal data and we do not use it to train models.

Data is shared with the infrastructure and service providers listed in our subprocessors page, each under a written contract. Where a company has enabled a conversion export, hashed identifiers are transmitted to the relevant advertising platform on that company's instruction.

Application data is stored in the United Kingdom and the European Economic Area. Where a subprocessor operates outside those regions, transfers are covered by the UK International Data Transfer Addendum or the EU Standard Contractual Clauses.

You may request access to your personal data, correction of it, erasure, restriction or objection to processing, and portability. Write to the address below and we will respond within one month.

If the data concerns your activity on a customer's website rather than your relationship with us, we will pass the request to that customer, who is the controller, and support them in answering it.

You can complain to the Information Commissioner's Office at ico.org.uk.

Privacy enquiries: privacy@tracepointer.com.

Tracepointer Ltd, London, United Kingdom.