Connecton

Privacy Policy

Connecton Ltd — Effective date: 1 June 2025

1. Who We Are and How to Contact Us

Connecton Ltd (“Connecton”, “we”, “us”, “our”) is the data controller for personal data collected through our website and platform at www.connecton.co.uk.

Our UK GDPR representative can be contacted at: info@connecton.co.uk

This Privacy Policy explains how we collect, use, store, and share your personal data when you use our Services, and your rights under UK GDPR and the Data Protection Act 2018.

2. Personal Data We Collect

2.1 Information You Provide

When you register for or use our Services, we collect:

  • Name and contact details (email address, phone number);
  • Billing information (including payment card details processed via our payment provider);
  • Business name and address;
  • Account credentials (username, hashed password);
  • Communications you send to us (e.g. support requests).

2.2 Information We Collect Automatically

When you use our platform or visit our website, we automatically collect:

  • Usage data (pages visited, features used, session duration);
  • Device and browser information (IP address, browser type, operating system);
  • Call and message metadata (call duration, timestamps, number dialled — not call content unless you use voicemail transcription);
  • Cookies and tracking data (see Section 7).

2.3 Information From Third Parties

We may receive information about you from our payment processor, fraud prevention services, and telecommunications providers in connection with delivering our Services.

3. How and Why We Use Your Data

We use your personal data for the following purposes:

  • To provide, operate, and maintain your Connecton account and Services;
  • To process payments and manage your subscription;
  • To send you service-related communications (e.g. billing notifications, service updates);
  • To respond to your support enquiries;
  • To improve and develop our platform through usage analytics;
  • To comply with our legal obligations (e.g. fraud prevention, regulatory compliance);
  • To send you marketing communications where you have opted in to receive them.

4. Legal Bases for Processing

Under UK GDPR, we rely on the following legal bases to process your personal data:

  • Contract performance — to fulfil our obligations to you under our Terms and Conditions;
  • Legitimate interests — to operate and improve our Services, prevent fraud, and ensure network security;
  • Legal obligation — to comply with applicable laws and regulatory requirements;
  • Consent — for marketing communications and non-essential cookies (you may withdraw consent at any time).

5. Who We Share Your Data With

We do not sell your personal data. We share data only with trusted third parties who help us deliver our Services, including:

  • Payment processors — to handle billing and subscription payments securely;
  • Telecommunications providers — to route calls and messages via the UK public telephone network;
  • Cloud hosting providers — to store and process data securely within the UK;
  • Analytics providers — to help us understand how our platform is used;
  • Customer support tools — to manage support communications.

All third-party processors are contractually required to process your data only on our instructions and in accordance with UK GDPR. We do not share your data with third parties for their own marketing purposes.

We may disclose your data where required to do so by law, court order, or regulatory authority.

6. Data Storage, Transfer, and Retention

6.1 Where We Store Your Data

Your personal data is processed and stored in the United Kingdom. We do not routinely transfer your data outside the UK. Where any transfer does occur (for example, via third-party tools with infrastructure outside the UK), we ensure appropriate safeguards are in place in accordance with UK GDPR Chapter V.

6.2 How Long We Keep Your Data

We retain your personal data for as long as necessary to provide the Services and comply with our legal obligations. Specifically:

  • Account data: retained for the duration of your subscription plus 6 years thereafter;
  • Call and message metadata: retained for up to 12 months, unless you request earlier deletion;
  • Billing records: retained for 7 years in accordance with HMRC requirements;
  • Support communications: retained for up to 3 years.

When your data is no longer needed, we securely delete or anonymise it.

7. Cookies and Tracking

We use cookies and similar technologies on our website and platform. These may include:

  • Essential cookies — necessary for the platform to function (no consent required);
  • Analytics cookies — to understand how visitors use our site (e.g. Google Analytics);
  • Preference cookies — to remember your settings and choices.

You can manage your cookie preferences via our cookie consent tool when you first visit our site, or by adjusting your browser settings. Please note that disabling non-essential cookies will not affect your ability to use the core Services.

8. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

  • Right of access — to request a copy of the personal data we hold about you;
  • Right to rectification — to ask us to correct inaccurate or incomplete data;
  • Right to erasure — to request deletion of your data where it is no longer necessary or lawfully held;
  • Right to restriction — to ask us to pause processing of your data in certain circumstances;
  • Right to data portability — to receive your data in a structured, machine-readable format;
  • Right to object — to object to processing based on legitimate interests or for direct marketing;
  • Right to withdraw consent — where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at info@connecton.co.uk. We will respond within one calendar month. You will not be charged for making a request.

If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

9. Children

Our Services are not directed at persons under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with their personal data, please contact us and we will delete it promptly.

10. Security

We take the security of your personal data seriously. We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or disclosure, including encryption of data in transit and at rest, access controls, and regular security reviews.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you in accordance with our obligations under UK GDPR.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by email or by a notice on our website before the changes take effect. The current version will always be available at www.connecton.co.uk.

12. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at: info@connecton.co.uk

Connecton Ltd | www.connecton.co.uk