Privacy Policy

CoryNet respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how CoryNet collects, uses, stores and protects personal information when you visit corynet.co.uk, submit an enquiry or otherwise contact us.

1. Who we are

CoryNet builds and looks after bespoke websites, web apps and related digital services for sole traders and small businesses.

For the purposes of UK data protection law, CoryNet is the data controller for the personal information described in this policy.

• Business name: CoryNet
• Business type: Sole trader
• Website: corynet.co.uk
• Privacy contact: privacy@corynet.co.uk
• Business address: 16 Rosedale Gardens, Sutton-in-Ashfield, NG17 1ND

2. Information we collect

We may collect the following personal information.

Information submitted through our contact form

When you submit an enquiry, we may collect:

• Your name
• Your business name, if you give it
• Your email address
• Your telephone number
• The contents of your message
• The date and time of your enquiry
• Information about how your enquiry was submitted

The current CoryNet website does not provide a website chat service.

Technical and website information

When you visit our website, we may automatically receive limited technical information, including:

• Your IP address
• Browser and device type
• Operating system
• Pages viewed
• Referring website or source
• Approximate location derived from your IP address
• Cookie identifiers and similar browser information
• Website interaction and diagnostic information

The precise information collected will depend on the cookies and website services that are enabled. More information is available in our Cookie Policy.

Information collected during our business relationship

If you become a customer or supplier, we may also collect:

• Business and contact details
• Correspondence and support requests
• Service requirements
• Contracts and account records
• Invoices and payment records
• Technical information needed to provide or support your services

We do not normally store complete payment card details. Payments may be processed by an external payment provider where applicable.

3. How we use your information

We may use your personal information to:

• Receive and respond to enquiries
• Provide information about our services
• Arrange consultations, demonstrations or follow-up conversations
• Prepare quotations and proposals
• Provide and manage services you have requested
• Maintain records of customer communications
• Operate and improve our website
• Diagnose technical problems and maintain website security
• Manage contracts, invoices and payments
• Meet our legal, tax and accounting obligations
• Establish, exercise or defend legal claims
• Prevent fraud, misuse and unauthorised access
• Send marketing communications where we have an appropriate lawful basis to do so

We will not sell your personal information.

4. Our lawful bases

UK data protection law requires us to have a lawful basis for using personal information. Depending on the circumstances, we rely on the following lawful bases.

Legitimate interests

We may process information where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights. This includes:

• Responding to business enquiries
• Following up an enquiry about our services
• Managing customer relationships
• Maintaining appropriate business records
• Protecting our website and systems
• Understanding and improving our services

Steps before entering into a contract

Where you ask us for a quotation, proposal or service information, we may process your information to take steps at your request before entering into a contract.

Performance of a contract

Where you become a customer, we process information where necessary to provide the agreed services and manage our contract with you.

Legal obligation

We may retain and use information where required to comply with legal, regulatory, tax or accounting obligations.

Consent

We rely on consent where the law requires it, including for certain non-essential cookies and some forms of electronic marketing.

You may withdraw your consent at any time. Withdrawal does not affect processing that took place before consent was withdrawn.

5. Marketing communications

Submitting an enquiry does not automatically subscribe you to general marketing communications.

We may contact you to respond to your enquiry and to follow up reasonably in relation to the services you asked about.

Where we send separate marketing emails or text messages, we will only do so where permitted by law. You can ask us to stop sending marketing communications at any time by:

• Using the unsubscribe option included in the message, where available; or
• Contacting privacy@corynet.co.uk

Service-related messages, such as communications necessary to provide an agreed service, are not marketing messages.

6. Who we share information with

We may share personal information with trusted service providers where reasonably necessary to operate our business and provide our services.

These may include providers of:

• Website hosting and website-building services
• Customer relationship management systems
• Artificial intelligence services
• Email and communication services
• Cloud storage and IT services
• Website security, diagnostics and analytics
• Accounting, payment and professional services

Our website is hosted by Cloudflare. If you become a customer, invoices and payments are handled by Stripe.

When you use our website contact form, Cloudflare Turnstile helps us check that the submission is not automated, and Resend delivers your enquiry to our business mailbox by email. A copy of your enquiry is also kept in our own enquiry records, hosted by Cloudflare, so that none is missed. We keep it for the periods in section 8, or 12 months if we decide it is not a genuine enquiry. Your IP address is not stored with it.

If you accept analytics cookies, we use Google Analytics, provided by Google, to measure how our website is used. Google Analytics is not used unless you accept analytics cookies.

If something on our website goes wrong, a technical error report is sent to Sentry, which we use to find and fix faults. A report contains the page address, the error, and your browser and device type. It does not include your IP address or anything you type into our forms, and it is stored in the European Union.

We keep encrypted backups of our systems, so that we can recover from a serious failure. They can include the personal information described in this policy. Backups are stored by Cloudflare in the European Union, with a second encrypted copy held in Microsoft OneDrive. Neither provider holds the key needed to read them.

Service providers are only permitted to process personal information for the purposes of providing their services to us or as otherwise permitted by law.

We may also disclose information:

• Where required by law or a court order
• To law enforcement or regulatory authorities where legally required
• To professional advisers where necessary
• In connection with the sale, transfer or restructuring of the business
• Where necessary to protect our rights, systems, customers or other people

We do not share mobile telephone information, messaging opt-in data or messaging consent with third parties or affiliates for their own marketing or promotional purposes.

7. International transfers

Some of our technology providers, including Cloudflare, Microsoft, Resend, Sentry, Stripe and, where you accept analytics cookies, Google, may process personal information outside the United Kingdom.

Where our providers process personal information outside the United Kingdom, appropriate safeguards may include applicable Standard Contractual Clauses, the UK International Data Transfer Addendum, or another legally recognised transfer mechanism provided under the relevant supplier terms.

Further information about the safeguards used by a particular provider may be requested by contacting us.

8. How long we keep information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected.

Unless a longer period is required for legal, contractual or security reasons, our usual retention periods are:

• Unsuccessful or general enquiries: up to 24 months after the last meaningful contact
• Customer and contract records: for the duration of the relationship and normally up to six years afterwards
• Invoices, payment and accounting records: normally six years after the relevant financial year
• Marketing records and suppression preferences: for as long as needed to respect your communication preferences
• Encrypted backups: normally up to 90 days. Information deleted from our live systems can remain in a backup until that backup expires, and backups are only used to recover from a failure
• Security and technical logs: for a proportionate period based on operational and security requirements

We may delete or anonymise information earlier where it is no longer needed.

9. How we protect information

We use reasonable technical and organisational measures designed to protect personal information against loss, misuse, unauthorised access, alteration or disclosure.

These measures may include:

• Account access controls
• Multi-factor authentication where available
• Secure cloud platforms
• Restricted administrative access
• Software updates and security monitoring
• Encrypted backups
• Staff and supplier access limited to legitimate business needs

No internet service is completely secure, and we cannot guarantee absolute security of information transmitted online.

10. Cookies and similar technologies

Our website may use cookies, local storage, scripts and similar technologies for purposes including:

• Delivering essential website functionality
• Maintaining security
• Remembering cookie choices
• Measuring website use and performance
• Supporting embedded or third-party services

Where required, non-essential technologies will only be activated after you provide consent through our cookie controls.

You can find further information in our Cookie Policy.

11. Your data protection rights

Depending on the circumstances, you may have the right to:

• Ask for access to your personal information
• Ask us to correct inaccurate or incomplete information
• Ask us to delete your information
• Ask us to restrict how we use your information
• Object to processing based on legitimate interests
• Receive certain information in a portable format
• Withdraw consent where processing is based on consent
• Object to direct marketing at any time
• Complain about how your information has been handled

These rights are subject to legal conditions and exemptions.

To exercise a right, contact privacy@corynet.co.uk. We may need to confirm your identity before fulfilling your request.

We normally respond to valid requests within one month.

12. Complaints

Please contact us first if you have concerns about how we use your personal information. We will try to resolve the matter.

You also have the right to complain to the UK Information Commissioner’s Office:

Telephone: 0303 123 1113
Website: ico.org.uk (opens in a new tab)

13. Third-party websites

Our website may contain links to websites operated by other organisations. We are not responsible for the privacy practices or content of third-party websites. You should review their privacy information before providing personal information to them.

14. Children’s information

Our website and services are intended for businesses and adults. They are not directed at children, and we do not knowingly seek to collect personal information from children through the website.

Please contact us if you believe a child has provided personal information to us.

15. Changes to this policy

We may update this Privacy Policy when our services, suppliers or legal obligations change. The latest version will be published on this page. Significant changes may also be communicated through the website or by another appropriate method.

16. Contact us

Questions about this Privacy Policy or our use of personal information can be sent to: