Legal — Privacy policy
Privacy policy
This policy explains what personal data we collect when you visit cohortport.com or contact us through it, why, and what you can ask us to do with it. It is written to be read, not skimmed past.
1. Who we are
The controller of your personal data is CohortPort Limited, a company in the process of registration in England & Wales. Its company number and registered office address will be published here as soon as they are issued.
For anything in this policy, write to hello@cohortport.com. A person reads that inbox.
2. What this policy covers
This policy covers this website and enquiries made through it. It does not describe the audience data CohortPort supplies to clients. How that data is sourced, the consent basis it relies on and how it is processed are documented separately and supplied to clients with the taxonomy and the data processing agreement.
3. What we collect
When you send the contact form
- the details you type in: first and last name, work email, company, role, and your message if you write one;
- technical details sent by your browser with the form: your IP address, the country it resolves to, your browser and device type (user agent), and the page that referred you to the site;
- the time of the request, and whether our notification email about it was delivered.
When you simply visit
We collect no personal data ourselves. Our hosting provider processes your IP address in order to deliver the pages, and we use a privacy-focused visitor statistic that does not use cookies and does not identify you (see sections 5 and 9).
We do not buy information about visitors, we do not build profiles of them, and we do not add people who contact us to the audience data we supply.
4. Why we use it
| Purpose | Data | Legal basis |
|---|---|---|
| Replying to your request and sending the taxonomy pack you asked for | Form details | Steps taken at your request before a possible contract (Art. 6(1)(b)), and our legitimate interest in responding to business enquiries (Art. 6(1)(f)) |
| Keeping the form free of spam and abuse | IP address, time, browser details | Legitimate interest in protecting the service (Art. 6(1)(f)) |
| Understanding where enquiries come from | Country, referring page | Legitimate interest in running the business (Art. 6(1)(f)) |
| Counting visits to the site, in aggregate | No data that identifies you | Legitimate interest (Art. 6(1)(f)) |
We do not use your details for automated decisions about you, and we will not send you marketing emails unless you separately ask for them.
5. Who else handles it
We use a small number of service providers who process data on our behalf, under contract, and only for the purposes above:
- Cloudflare, Inc. — hosting of the website, the database that stores form submissions (located in Western Europe), security, and the cookieless visitor statistic.
- Brevo (Sendinblue SAS, France) — delivery of the internal notification email that tells us a request has arrived.
- Our email provider — the inbox where those notifications and your emails are read.
- Google Ireland Ltd / Google LLC — web fonts used by this site. Loading them sends your IP address to Google.
We do not sell your personal data, and we do not share it with anyone else unless the law requires us to.
6. Transfers outside the UK and EU
Some of the providers above are based in, or may process data in, the United States. Where that happens the transfer is covered by the UK International Data Transfer Addendum or the EU Standard Contractual Clauses, or by the provider’s certification under the EU–US Data Privacy Framework and its UK extension. You can ask us for a copy of the relevant safeguards.
7. How long we keep it
- Form submissions: 24 months after our last contact with you, unless we enter into a contract, in which case our records follow the contract.
- IP address and browser details attached to a submission: 90 days, which is as long as they are useful against abuse.
- Aggregate visit statistics contain no personal data and are kept by Cloudflare under its own retention rules.
8. Your rights
You can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or hand it over in a portable format. Where we rely on legitimate interest you can object to that use, and we will stop unless we have a compelling reason not to. Write to hello@cohortport.com; we reply within one month.
You can also complain to a data protection authority: in the UK the Information Commissioner’s Office (ico.org.uk), or in the EU the authority in the country where you live or work. We would appreciate the chance to put things right first.
10. Changes
If we change how we handle personal data we will update this page and the date at the top. Material changes will be flagged on the home page for a reasonable period.