Privacy Policy

How we collect, use, store and protect your personal information.

Last updated: 13 July 2026

CoryNet respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how CoryNet collects, uses, stores and protects personal information when you visit corynet.co.uk, submit an enquiry, use the website chat service or otherwise contact us.

1. Who we are

CoryNet provides managed websites, customer communication systems and related digital and Microsoft 365 support services to small businesses.

For the purposes of UK data protection law, CoryNet is the data controller for the personal information described in this policy.

• Business name: CoryNet
• Business type: Sole trader
• Website: corynet.co.uk
• Privacy contact: privacy@corynet.co.uk
• Business address: 16 Rosedale Gardens, Sutton-in-Ashfield, NG17 1ND

2. Information we collect

We may collect the following personal information.

Information submitted through our contact form

When you submit an enquiry, we may collect:

• Your name
• Your email address
• Your telephone number
• The contents of your message
• The date and time of your enquiry
• Information about how your enquiry was submitted

Information submitted through website chat

When you use our website chat service, we may collect:

• The messages you send
• Your name, email address or telephone number, where you choose to provide them
• Information you provide about your business or requirements
• The date and time of the conversation
• Technical and session information associated with the conversation
• Conversation history and any subsequent replies

Please do not submit passwords, payment card information, medical information or other highly sensitive personal information through the website chat.

Technical and website information

When you visit our website, we may automatically receive limited technical information, including:

• Your IP address
• Browser and device type
• Operating system
• Pages viewed
• Referring website or source
• Approximate location derived from your IP address
• Cookie identifiers and similar browser information
• Website interaction and diagnostic information

The precise information collected will depend on the cookies and website services that are enabled. More information is available in our Cookie Policy.

Information collected during our business relationship

If you become a customer or supplier, we may also collect:

• Business and contact details
• Correspondence and support requests
• Service requirements
• Contracts and account records
• Invoices and payment records
• Technical information needed to provide or support your services

We do not normally store complete payment card details. Payments may be processed by an external payment provider where applicable.

3. How we use your information

We may use your personal information to:

• Receive and respond to enquiries
• Provide information about our services
• Arrange consultations, demonstrations or follow-up conversations
• Prepare quotations and proposals
• Provide and manage services you have requested
• Maintain records of customer communications
• Operate and improve our website and chat service
• Diagnose technical problems and maintain website security
• Manage contracts, invoices and payments
• Meet our legal, tax and accounting obligations
• Establish, exercise or defend legal claims
• Prevent fraud, misuse and unauthorised access
• Send marketing communications where we have an appropriate lawful basis to do so

We will not sell your personal information.

4. Our lawful bases

UK data protection law requires us to have a lawful basis for using personal information. Depending on the circumstances, we rely on the following lawful bases.

Legitimate interests

We may process information where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights. This includes:

• Responding to business enquiries
• Following up an enquiry about our services
• Managing customer relationships
• Maintaining appropriate business records
• Protecting our website and systems
• Understanding and improving our services

Steps before entering into a contract

Where you ask us for a quotation, proposal or service information, we may process your information to take steps at your request before entering into a contract.

Performance of a contract

Where you become a customer, we process information where necessary to provide the agreed services and manage our contract with you.

Legal obligation

We may retain and use information where required to comply with legal, regulatory, tax or accounting obligations.

Consent

We rely on consent where the law requires it, including for certain non-essential cookies and some forms of electronic marketing.

You may withdraw your consent at any time. Withdrawal does not affect processing that took place before consent was withdrawn.

5. Website chat and artificial intelligence

Our website includes a chat service that may use artificial intelligence to answer questions about CoryNet and its services.

When you interact with the chat service:

• Your message may be analysed automatically to generate a response.
• The response may be produced without immediate human involvement.
• Your conversation may be stored in our customer relationship management system.
• A member of CoryNet may review the conversation and respond personally.
• Information you provide may be linked to an existing or newly created customer record.
• The chat service may not always provide complete or accurate information.

The chatbot is provided for general information and initial enquiry handling. Its responses do not constitute legal, financial, technical-security or other professional advice.

Please avoid including confidential information or personal information that is not necessary for your enquiry.

We do not use the chatbot to make legal or similarly significant decisions about you solely by automated means.

6. Marketing communications

Submitting an enquiry does not automatically subscribe you to general marketing communications.

We may contact you to respond to your enquiry and to follow up reasonably in relation to the services you asked about.

Where we send separate marketing emails or text messages, we will only do so where permitted by law. You can ask us to stop sending marketing communications at any time by:

• Using the unsubscribe option included in the message, where available; or
• Contacting privacy@corynet.co.uk

Service-related messages, such as communications necessary to provide an agreed service, are not marketing messages.

7. Who we share information with

We may share personal information with trusted service providers where reasonably necessary to operate our business and provide our services.

These may include providers of:

• Website hosting and website-building services
• Customer relationship management systems
• Website chat and artificial intelligence services
• Email and communication services
• Cloud storage and IT services
• Website security, diagnostics and analytics
• Accounting, payment and professional services

Our principal website and customer communication platform is provided by HighLevel, also known as GoHighLevel. Information submitted through website forms or chat may be processed and stored using the HighLevel platform.

HighLevel may use its own authorised subprocessors to provide hosting, communications, artificial intelligence and related platform functionality.

Service providers are only permitted to process personal information for the purposes of providing their services to us or as otherwise permitted by law.

We may also disclose information:

• Where required by law or a court order
• To law enforcement or regulatory authorities where legally required
• To professional advisers where necessary
• In connection with the sale, transfer or restructuring of the business
• Where necessary to protect our rights, systems, customers or other people

We do not share mobile telephone information, messaging opt-in data or messaging consent with third parties or affiliates for their own marketing or promotional purposes.

8. International transfers

Some of our technology providers, including HighLevel and its subprocessors, may process personal information outside the United Kingdom.

Where personal information is transferred internationally, we take reasonable steps to ensure that an appropriate legal safeguard is used. Depending on the provider and destination, this may include:

• UK adequacy regulations
• The UK International Data Transfer Agreement
• The UK Addendum to approved Standard Contractual Clauses
• Other safeguards permitted under UK data protection law

Further information about the safeguards used by a particular provider may be requested by contacting us.

9. How long we keep information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected.

Unless a longer period is required for legal, contractual or security reasons, our usual retention periods are:

• Unsuccessful or general enquiries: up to 24 months after the last meaningful contact
• Chat conversations: up to 24 months after the last meaningful contact
• Customer and contract records: for the duration of the relationship and normally up to six years afterwards
• Invoices, payment and accounting records: normally six years after the relevant financial year
• Marketing records and suppression preferences: for as long as needed to respect your communication preferences
• Security and technical logs: for a proportionate period based on operational and security requirements

We may delete or anonymise information earlier where it is no longer needed.

10. How we protect information

We use reasonable technical and organisational measures designed to protect personal information against loss, misuse, unauthorised access, alteration or disclosure.

These measures may include:

• Account access controls
• Multi-factor authentication where available
• Secure cloud platforms
• Restricted administrative access
• Software updates and security monitoring
• Appropriate backup arrangements
• Staff and supplier access limited to legitimate business needs

No internet service is completely secure, and we cannot guarantee absolute security of information transmitted online.

11. Cookies and similar technologies

Our website may use cookies, local storage, scripts and similar technologies for purposes including:

• Delivering essential website functionality
• Maintaining security
• Operating the website chat service
• Remembering cookie choices
• Measuring website use and performance
• Supporting embedded or third-party services

Where required, non-essential technologies will only be activated after you provide consent through our cookie controls.

You can find further information in our Cookie Policy.

12. Your data protection rights

Depending on the circumstances, you may have the right to:

• Ask for access to your personal information
• Ask us to correct inaccurate or incomplete information
• Ask us to delete your information
• Ask us to restrict how we use your information
• Object to processing based on legitimate interests
• Receive certain information in a portable format
• Withdraw consent where processing is based on consent
• Object to direct marketing at any time
• Complain about how your information has been handled

These rights are subject to legal conditions and exemptions.

To exercise a right, contact privacy@corynet.co.uk. We may need to confirm your identity before fulfilling your request.

We normally respond to valid requests within one month.

13. Complaints

Please contact us first if you have concerns about how we use your personal information. We will try to resolve the matter.

You also have the right to complain to the UK Information Commissioner’s Office:

Telephone: 0303 123 1113
Website: ico.org.uk

14. Third-party websites

Our website may contain links to websites operated by other organisations. We are not responsible for the privacy practices or content of third-party websites. You should review their privacy information before providing personal information to them.

15. Children’s information

Our website and services are intended for businesses and adults. They are not directed at children, and we do not knowingly seek to collect personal information from children through the website.

Please contact us if you believe a child has provided personal information to us.

16. Changes to this policy

We may update this Privacy Policy when our services, suppliers or legal obligations change. The latest version will be published on this page. Significant changes may also be communicated through the website or by another appropriate method.

17. Contact us

Questions about this Privacy Policy or our use of personal information can be sent to: