Last updated: January 2026
1. Introduction
Commerciera Limited ("Company", "we", "us", or "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal data when you visit our website, use our services, or otherwise interact with us. This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Data Controller
The data controller responsible for your personal data is:
3. Information We Collect
We may collect and process the following categories of personal data:
- Identity Data: Full name, title, username, or similar identifier.
- Contact Data: Email address, telephone number, postal address, and billing address.
- Business Data: Company name, job title, industry, and business size.
- Technical Data: IP address, browser type and version, operating system, device type, and information collected through cookies and similar technologies.
- Usage Data: Pages visited, time spent on pages, click patterns, referral sources, and interaction data.
- Communication Data: Records of your correspondence with us, including contact form submissions and emails.
- Marketing Data: Your preferences for receiving marketing communications from us.
4. How We Use Your Data
We use your personal data for the following purposes:
- To respond to your enquiries and provide customer support.
- To deliver the services you have engaged us for.
- To process payments and manage billing.
- To send service-related communications, including updates and changes to our services.
- To send marketing communications where you have opted in to receive them.
- To improve our website, services, and user experience.
- To comply with legal obligations and protect our legal rights.
- To detect, prevent, and address technical issues and security threats.
5. Legal Basis for Processing
We process your personal data only when we have a lawful basis to do so. The legal bases we rely on include:
- Consent: Where you have given clear consent for us to process your data for a specific purpose (e.g., subscribing to a newsletter).
- Contract: Where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
- Legitimate Interests: Where processing is necessary for our legitimate interests (or those of a third party), provided your interests and rights do not override those interests.
- Legal Obligation: Where processing is necessary to comply with a legal obligation.
6. Cookies
Our website uses cookies and similar tracking technologies to distinguish you from other users, improve your experience, and gather analytics data. For full details on the cookies we use and how to manage them, please refer to our Cookie Policy.
7. Third-Party Services
We may share your personal data with trusted third-party service providers who assist us in operating our business, including:
- Website hosting and infrastructure providers.
- Analytics services (e.g., Google Analytics).
- Email marketing platforms.
- Payment processing services.
- CRM and project management tools.
- Customer support platforms.
All third-party processors are contractually obligated to protect your data and use it only for the purposes for which it was provided. We do not sell your personal data to third parties.
8. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. Generally:
- Contact form submissions are retained for up to 24 months.
- Client project data is retained for the duration of the relationship and for 6 years thereafter, as required by UK tax law.
- Marketing preferences are retained until you withdraw consent.
- Analytics data is aggregated and anonymised after 26 months.
9. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, access controls, secure hosting, and regular security assessments. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.
10. Your Rights Under GDPR
Under the UK GDPR, you have the following rights regarding your personal data:
- Right of Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Erasure: Request deletion of your personal data where there is no compelling reason for its continued processing.
- Right to Restrict Processing: Request that we limit the processing of your data in certain circumstances.
- Right to Data Portability: Receive your data in a structured, commonly used, machine-readable format and have it transmitted to another controller.
- Right to Object: Object to the processing of your data, including for direct marketing purposes.
- Right to Withdraw Consent: Withdraw consent at any time where we rely on consent to process your data.
To exercise any of these rights, please contact us at commerciera@gmail.com. We will respond to your request within 30 days.
11. International Transfers
Your data may be transferred to and processed in countries outside the United Kingdom. Where this occurs, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions, to protect your personal data in compliance with applicable data protection laws.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically to stay informed about how we protect your data.
13. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us:
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at https://ico.org.uk if you believe your data protection rights have been infringed.