Privacy Policy

Introduction

CoverPath Analytics Limited ("we", "us", "our") respects your privacy.

This policy explains how we collect, use, and protect your personal data when you use our website and services.

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Our registered office: 42 Kingsway, London, WC2B 6EX, United Kingdom.

Data We Collect

We collect the following types of personal data:

Information You Provide

• Contact details: name, email address, phone number, company name.
• Inquiry data: messages, questions, requests submitted via contact forms.
• Account data: username, password (hashed), preferences if you create an account.
• Service usage data: project details, analytics requests, uploaded documents.

Information We Collect Automatically

• Technical data: IP address, browser type, operating system, device identifiers.
• Usage data: pages visited, time spent, referral source, clickstream data.
• Cookies: session cookies, preference cookies, analytics cookies (see Cookies section below).

Third-Party Sources

We may receive data from:

• Analytics platforms (Google Analytics 4).
• CRM and email marketing tools.
• Business partners with whom you have consented to share data.

How We Use Your Data

We process your personal data for the following purposes:

Service Delivery

• To respond to your inquiries and provide quotes.
• To deliver analytics, consulting, and optimization services.
• To manage your account and billing.
• To communicate project updates and deliverables.

Improvement and Development

• To analyze website usage and improve user experience.
• To develop new features and services.
• To conduct research and statistical analysis.

Marketing (With Consent)

• To send newsletters, case studies, and service updates.
• To inform you about relevant offers and industry insights.
• You can opt out at any time using the unsubscribe link in emails.

Legal and Security

• To comply with legal obligations and regulations.
• To protect against fraud, abuse, and security threats.
• To enforce our Terms of Service.

Legal Basis for Processing

We process your data under the following legal grounds:

• Contract: necessary to provide services you requested.
• Consent: for marketing communications and optional cookies.
• Legitimate interests: to improve services, ensure security, and conduct business operations.
• Legal obligation: to comply with UK laws and regulations.

Cookies and Tracking

We use cookies to enhance your experience.

Essential Cookies

Required for site functionality. Session management, security, form submission.

These cannot be disabled without breaking core features.

Analytics Cookies

Google Analytics 4 tracks page views, user journeys, conversion events.

Data is anonymized. IP addresses are masked.

You can opt out via browser settings or the cookie banner.

Preference Cookies

Remember your language, region, display preferences.

Enhance usability. Non-intrusive.

Managing Cookies

You control cookies through:

• Our cookie banner (appears on first visit).
• Browser settings (Chrome, Firefox, Safari, Edge all support cookie management).
• Third-party opt-out tools like Google Analytics Opt-out Browser Add-on.

Third-Party Services

We work with trusted partners who process data on our behalf:

Google Analytics

Analytics and reporting. Privacy Policy: https://policies.google.com/privacy

Email Service Providers

For newsletters and service communications. All providers are GDPR-compliant.

Payment Processors

Stripe, PayPal for secure payment handling. We do not store full credit card details.

Cloud Hosting

AWS (UK region) for secure data storage and processing.

All third parties are contractually bound to protect your data and use it only for specified purposes.

Your Rights

Under UK GDPR, you have the following rights:

Right to Access

Request a copy of the personal data we hold about you.

Right to Rectification

Correct inaccurate or incomplete data.

Right to Erasure ("Right to be Forgotten")

Request deletion of your data when no longer necessary or if consent is withdrawn.

Right to Restriction

Limit how we use your data in certain circumstances.

Right to Data Portability

Receive your data in a structured, machine-readable format.

Right to Object

Object to processing based on legitimate interests or for direct marketing.

Right to Withdraw Consent

Withdraw consent at any time (does not affect prior processing).

How to Exercise Your Rights

Email us at: privacy@coverpath.co.uk

We respond within 30 days.

If unsatisfied, you can lodge a complaint with the UK Information Commissioner's Office (ICO): https://ico.org.uk

Data Retention

We retain your data only as long as necessary:

• Active clients: duration of contract + 6 years (UK tax and legal requirements).
• Inquiries: 2 years from last contact.
• Marketing subscribers: until you unsubscribe + 30 days.
• Analytics data: 26 months (Google Analytics default).
• Legal holds: longer retention if required by law or ongoing legal matters.

After retention periods expire, data is securely deleted or anonymized.

Data Security

We implement industry-standard security measures:

• SSL/TLS encryption for data in transit.
• AES-256 encryption for data at rest.
• Multi-factor authentication for staff access.
• Regular security audits and penetration testing.
• Access controls and role-based permissions.
• Incident response and breach notification procedures.

No method is 100% secure. We continuously improve our defenses.

In the event of a data breach, we will notify affected individuals and the ICO within 72 hours where required by law.

International Transfers

Your data is primarily stored and processed in the United Kingdom.

If we transfer data outside the UK (e.g., to service providers in the EU or other regions), we ensure:

• Adequate protection via adequacy decisions.
• Standard Contractual Clauses (SCCs) approved by the UK ICO.
• Compliance with UK GDPR transfer requirements.

Children's Privacy

Our services are not intended for individuals under 16 years of age.

We do not knowingly collect data from children.

If we become aware of such collection, we will delete the data immediately.

Changes to This Policy

We may update this Privacy Policy from time to time.

Changes will be posted on this page with an updated "Last updated" date.

Significant changes will be communicated via email or website notice.

Continued use of our services after changes constitutes acceptance.

Contact Us

For privacy-related questions, requests, or concerns:

Email: privacy@coverpath.co.uk

Phone: +44 20 7946 0820

Address: CoverPath Analytics Limited, 42 Kingsway, London, WC2B 6EX, United Kingdom

We aim to respond within 5 business days.

This Privacy Policy is effective as of June 2026 and governs all data processing activities of CoverPath Analytics Limited.