Review draft: the operator’s legal identity and contact details, supplier retention settings and applicable international-transfer arrangements still need confirmation. This notice is not yet cleared for publication.
How personal data is handled when you use the ConsentTrace public website, send an enquiry or register early access interest.
1. About this notice and how to contact us
ConsentTrace is a pre-launch independent consent assurance platform. This notice covers personal data collected through the public website, enquiries and early access interest registrations.
Privacy enquiries: contactus@consent-trace.com.
The product application and any future customer pilot may involve additional processing. Planned mobile support, internal AI testing and browser-extension collection will also need their own processing review. Their scope, privacy information and any required data processing agreement must be provided before that processing begins. This website notice does not replace them.
2. Information collected through this website
The public forms do not accept evidence-file uploads or payment details. Do not put passwords, API keys, captured browser evidence or unnecessary personal data in an enquiry.
There is no statutory or contractual obligation to complete these forms. Without the required contact details, we may be unable to respond. The early access message and email-updates preference are optional.
- Contact details you submit: name, email address and organisation name.
- Enquiry and demo details: message, topic, role, property count, platforms and testing approach, depending on the form you use.
- Early access preferences: your interest in a pilot, whether you opt in to launch-update emails, and the wording and time recorded with that preference.
- Technical information handled by hosting and form-delivery providers, such as IP address, request time, requested page, browser details and delivery or security events.
3. Purposes and lawful bases
Enquiries and early access requests
We use enquiry information to answer questions, arrange discussions and assess potential pilot opportunities. The basis is legitimate interests in developing the platform and communicating with people who contact us. We do not use an ordinary contact or demo request to sign you up for launch-update emails.
Optional launch-update emails
If you choose the separate email-updates option, we use your email address to send ConsentTrace launch news and early access or pilot announcements on the basis of consent. Registering interest does not require this opt-in. You can withdraw consent at any time; doing so does not affect the lawfulness of earlier processing.
Website operation and security
We use technical and delivery information for legitimate interests in operating the website, delivering messages and preventing abuse. Information may also be retained where necessary to meet an applicable legal obligation or establish, exercise or defend legal claims.
4. Email choices and objections
You can object to direct marketing at any time. Email contactus@consent-trace.com to stop launch updates or use the unsubscribe instructions in a message. You do not need to explain why.
You can also object to processing based on legitimate interests. We will consider your request and the applicable legal requirements.
A minimal record of an opt-out may need to be retained to avoid contacting you again. An opt-out from launch updates does not prevent a reply to a new enquiry you send.
5. Who receives information
Website hosting is provided through Google Firebase App Hosting and Google Cloud. Information submitted through a form is first validated by the website endpoint, then sent from your browser to Web3Forms for processing and email delivery. That request also exposes normal connection information, such as your IP address, to the form service.
Web3Forms and its infrastructure and anti-spam suppliers may process submissions, delivery information and security data. The destination email provider also handles delivered enquiries. Provider details and relevant links are listed below.
Information may be disclosed where required by law or necessary to handle a legal claim. Enquiry details are not offered for sale or used to create third-party marketing lists.
6. Cookies and similar technologies
The current public marketing pages do not include advertising tags or optional analytics scripts. Submitting a form connects to Web3Forms; visiting links to the separate application or supplier websites is subject to the privacy information for those services.
The demonstration workspace has a sidebar preference cookie named sidebar_state, lasting up to seven days, when its sidebar setting is changed. It stores the open or closed preference, not an advertising identifier. The public marketing pages do not use that sidebar.
You can inspect, remove or block cookies using your browser settings. Any future optional tracking will require a review of the notice and applicable consent requirements before it is introduced.
7. Retention
Retention is assessed by the purpose of the record: whether an enquiry is still open, whether a pilot discussion is ongoing, whether updates are still requested, and whether a record is needed for a legal obligation or claim. Withdrawal, objections and deletion requests are considered under the applicable rules.
Copies held by form-delivery and email providers are subject to their configured retention and deletion processes. Deleting an email does not necessarily remove a copy held by a delivery provider. Contact contactus@consent-trace.com with a retention or deletion request.
Product evidence storage and retention are separate from website enquiries and will need to be set out before any pilot or customer evidence is accepted.
8. International processing
The hosting and form-delivery services may process information outside the UK. Web3Forms states that it operates from India and uses infrastructure in multiple regions. Its privacy policy and data processing agreement describe its international processing arrangements.
The applicable processing locations, contractual terms and any UK transfer safeguards need to be confirmed for the supplier accounts used by ConsentTrace. No claim of UK-only storage is made. Contact contactus@consent-trace.com to ask about processing locations and transfer documentation.
9. Your rights and complaints
Depending on the circumstances, you can request access, correction, erasure, restriction or portability of your personal data, object to certain processing, and withdraw consent where it is relied on. Contact contactus@consent-trace.com. We may need information to verify your identity before responding.
You can complain to the UK Information Commissioner’s Office (ICO). You do not have to contact ConsentTrace first. People in other jurisdictions may also have rights to contact their local supervisory authority.
These website forms do not make solely automated decisions about individuals with legal or similarly significant effects. Spam validation may reject a submission, but it does not determine eligibility for a customer contract.
10. Security and changes
The website and form endpoint use HTTPS. Technical and organisational controls must reflect the data and risks involved; this notice does not claim independent security certification or guarantee absolute security.
This notice will be reviewed as the pre-launch website, suppliers and processing change. Materially different purposes will require appropriate information and, where necessary, a new consent choice.