Privacy policy

Convertr is committed to protecting the privacy of its users and customers. This Privacy Policy tells you how we collect your personal data, how we store it, how we use it, and how we keep it safe. Please take a minute to read and understand the policy. Our website and services are intended for business users. We do not knowingly collect personal data from anyone under 18. If you are under 18, please do not use our services without the involvement of a parent or guardian.

We shall only use your information in line with the applicable data protection laws, including the UK Data Protection Act 2018 (DPA), UK General Data Protection Regulation (UK GDPR), the UK Data (Use and Access) Act 2025, and the Privacy and Electronic Communications Regulations (PECR); the EU General Data Protection Regulation (GDPR) and EU e-Privacy Directive (ePD); and, where applicable, other laws that apply to our collection and use of your personal information, including US state privacy laws and the laws of China and Australia.

Who We Are

This website is owned and operated by Convertr Media Limited, Fora House, 21-33 Great Eastern Street, Hackney, London, EC2A 3EJ. Convertr collects, uses and is responsible for certain personal information about you. This privacy policy tells you how we collect your personal data, how we store it, how we use it, and how we keep it safe. If we ask you to provide information by which you can be identified, the information will only be used in accordance with this privacy statement.

If you want to know what information we collect and hold about you, please email us at compliance@convertr.io.

Data Protection Officer: Data Compliant Limited, email convertrdpo@datacompliant.co.uk, 25-26 Nethergate Street, Clare, Suffolk, CO10 8NP, UK.

ICO Registration Number: Convertr is registered with the ICO as a data controller, registration number: Z3557518.

Legal Reasons for Processing

We promise that we shall only use your data in the way you wish, and we shall always respect your privacy. We process your data under the following legal grounds:

• To fulfil a Contract we have with you as a client, supplier or employee
• When it is our legal duty, such as tax authorities
• When it is in our legitimate interest, such as responding to queries from you about our products or services
• When you provide consent

A legitimate interest is when we have a business or commercial reason to process your information. We only rely on it where we have weighed our interests against your rights and interests and are satisfied the processing is fair and that you would reasonably expect it. When we process under legitimate interest we will conduct a legitimate interest assessment.

What We Collect About You

We process the personal data of clients, prospects, enquirers, partners, suppliers and workers. We may collect, store and use the following personal information about you:

• Contact details (Name, Job Title, Address, Billing address, Postcode, Country, email address, telephone number)
• How you heard about us
• Your business challenges
• Technology platforms being used
• Information relating to customer surveys
• CCTV images of workers and visitors to the Convertr office
• Information relating to the services we have provided or you have requested from us
• Enquiry / quote information
• Financial details for invoicing
• User name and log in details for authorised users who access our systems
• We collect information from your computer and about your visits to and use of this website. This includes collecting unique online identifiers such as IP addresses, which are numbers that uniquely identify a specific computer or other device on the internet. Please see our Cookie Policy for more details.
• Any other personal information that you choose to send us

Please let us know if the personal data we hold about you needs to be corrected or updated.

Where We Collect Personal Data

Much of the data we collect about you will be data you share with us through the following sources:

• Information that you provide by filling in forms on our website. This includes information provided at the time of registration or requesting further services and products.
• Through emails, telephone calls, our platform, support and events
• Details of transactions you carry out through our website and the fulfilment of orders
• Information about your computer including, where available, your IP address, operating system and browser type.
• Details of your visits to our website and the pages and resources that you access.
• Details of your interactions with marketing communications, such as email opens and clicks.
• Any other information you choose to provide to us, including business cards.

We also collect information about you via openly available public sources such as LinkedIn, company websites or public registers and from other sources, including demographic information such as postcode, preferences and interests.

How We Use Your Personal Information

We will:

• Obtain your consent where the law requires it before collecting or using your personal information;
• Obtain consent or notify you before using previously submitted personal information for a new purpose;
• Verify the authenticity of third-party sources from whom information about a person is collected;
• Maintain integrity of personal information across vendors or partners who process it;
• Only use your personal data in the way you wish, and;
• Always respect your privacy.

We process your data for the following purposes, and under the following legal grounds:

Automated Decision-Making and AI

We use automated tools, including AI-based scoring and quality-assurance capabilities, to help us process enquiries, assess and route leads, and improve our products and services. We do not leave decisions that would have a legal or similarly significant effect on you to automated processing alone (a human remains involved and in control of the outcome). Where we use automated processing in this way we are transparent about it, and you have the right to request human review of, and to contest, any significant automated decision that affects you (see Your Rights below).

Keeping Your Personal Information Secure

Convertr is ISO 27001 and ISO 27701 certified and takes appropriate organisational and technical measures against unauthorised or unlawful processing of personal data and against accidental loss or destruction of, or damage to, personal data. To prevent unauthorised access or disclosure we have put in place suitable physical, electronic and managerial procedures to safeguard and protect the information we collect online. We use state of the art technology for processing and storing data, and data transfers, including encryption and access control. Your personal data is processed with confidentiality and integrity.

We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.

We begin collecting information about you upon initial registration and store this information on our secure server to process your requests. Our secure server encrypts all of your personal information, to ensure that the information you give us is protected against unauthorised access.

Please keep your Convertr password safe and do not share it with others. If you forget your password please contact us and we will provide a secure ‘password reset’ link to the email address you provided during registration.

With Whom We Share Your Personal Information

Convertr does not sell personal data. However, we may also disclose your information to third parties.

• In order to verify your details and enrich your data.
• Third parties who provide services on behalf of Convertr, for example administrative services
• In the event that we sell or buy any business or assets, in which case we may disclose your personal data to the seller or buyer of such business or assets.
• To pass your information to our affiliates or certain suppliers/sub-contractors to supply goods, services or information requested by you.
• Where we have asked and been given your consent to share
• If we are under a duty to disclose or share your personal data in order to comply with any legal obligation or in order to enforce or apply our Terms and Conditions and other agreements or protect the rights, property, or safety of Convertr, our customers, or others. This includes exchanging information with other companies and organisations for fraud protection and credit risk reduction.
• We may provide other companies, such as advertisers (for the purpose of serving advertisements), suppliers, potential suppliers and potential customers of Convertr and its affiliates with details about our services, but we will not provide them with any information which can be used to identify you.

Where we share data with agents and sub-contractors we ensure that the data processing is supported by a written contract and that your data is treated confidentially and securely, and in accordance with data protection legislation. Our contract with them will not allow them to use your information for anything other than the fulfilment of our contract with you.

We may also use or permit selected third parties to use your information to provide you with information about goods and services which may be of interest to you in accordance with any permissions granted by you when registering or ordering products on our website.

You have the right to request us not to pass information to third parties, please request this before submitting your consent by contacting compliance@convertr.io.

Links to Other Websites

Our website may from time to time contain links to and from our advertisers’, partners’ and affiliates’ websites. Please note, this Privacy Policy applies only to Convertr and these websites have their own privacy policy. Please ensure that you read the privacy policy of such other companies before submitting any personal information. Convertr does not accept any responsibility or liability for these policies and they will be subject to separate terms and conditions.

Data Transfers

Your personal data may be stored, processed, and transferred to and processed outside the United Kingdom (UK) or European Economic Area (EEA) so that we can use your personal data as described in this policy. Where this is the case, we will make sure that any transfers of your personal information from one country to another comply with those data protection and privacy laws which apply to us.

We will only transfer your personal data to countries that have been deemed to provide an “adequate” level of protection for personal data by the UK and/or the European Commission.

Where we use service providers based outside the UK and EEA, we may use the standard data protection contract clauses approved for use in the UK and EEA which give personal data the same protection it has in the UK and EEA.

We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and applicable laws.

How Long We Keep Your Personal Information

All personal data will be held in accordance with our internal Record Management and Retention Policy, which sets out how long different categories of personal data are kept and how they are securely disposed of when no longer needed. We only keep your personal information for as long as we need to, so that we can use it for the reasons described above.

To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirement.

To make sure that you do not receive marketing from us after you have told us to stop sending it, we need to keep a record of that instruction with your contact details. We shall hold that information until you tell us otherwise.

Where necessary, we shall keep your personal data for as long as required to do so by law; and where required to establish, exercise or defend our legal rights.

Any unrequested contact by electronic communication to any personal (not business) address will respect your personal e-privacy rights by being restricted to the use of e-contact details that you provided to us in connection with the supply by us to you of services that you paid us for or enquired about previously and will be limited to the same or similar goods and services.

Your Rights

Your personal data matters to us and you have the following rights:

• Right to object to processing based on legitimate interest or direct marketing (including profiling)
• Right to be informed – about what and how we collect your data
• Right of access – you have the right to know that we are processing your information and what we are processing. We will respond within 1 month. Where your request is complex or you have made a number of requests, we may extend this by up to a further two months, and we will tell you within the first month if we do. If you are in the UK, we may also pause this timescale (‘stop the clock’) while we clarify your request or verify your identity.
• Right to rectification – you have the right to have any incomplete data completed or any inaccurate personal data corrected
• Right to erasure (to be forgotten) – you have the right to ask us to erase personal data where there is no valid reason for us to keep it
• Right to restrict processing – you have the right to ask us to restrict processing of your information in certain circumstances
• Right to data portability – where we process your personal data based on your consent or a contract, and by automated means, you have the right to receive it in a structured, commonly used, machine-readable format, or to ask us to transfer it to another organisation
• Right to withdraw consent – where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing before you withdrew it
• Right to make a complaint to the data protection regulator
• Right to be involved in automated decisions – where we make a significant decision about you based solely on automated processing (including profiling), you have the right to be told this is happening, to make representations, to request human review, and to contest the decision. If EU data protection law applies to you, you also have the right not to be subject to such a decision except in the limited circumstances the law allows.

If you wish to exercise any of the rights listed above, please contact us at compliance@convertr.io.

How to Make a Complaint

If you are unhappy with how we have handled your personal data, you can complain to us electronically at compliance@convertr.io. We will acknowledge your complaint within 30 days and investigate and respond without undue delay. You also have the right to complain directly to the Information Commissioner’s Office (ICO) or your relevant data protection regulator at any time – see ‘Contacting the Data Protection Regulator’ below.

Contacting the Data Protection Regulator

If you are not satisfied with our response or believe we are not processing your personal data in accordance with the law you have the right to make a complaint to the data protection regulator. The General Data Protection Regulation also gives you the right to lodge a complaint with a supervisory authority, in particular in the European Union (or European Economic Area) state where you work, normally live or where any alleged infringement of data protection laws occurred.

Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We recommend you check this page periodically for the latest version.