Skip to content
Legal

Privacy Policy

We designed NitroSearch to need as little of your data — and your shoppers’ data — as possible. This is how we handle what we do process.

Last updated 2026-07-20

Pre-launch draft. Items highlighted in amber are placeholders to be confirmed before launch; this document should be reviewed by legal counsel.

Who we are

NitroSearch is operated by [TO BE CONFIRMED: registered company name] , registered in England & Wales, United Kingdom , registered office [TO BE CONFIRMED: registered office address] . For any privacy question, contact [email protected].

This website is cookieless

Our marketing website sets no tracking cookies and runs no third-party analytics or advertising scripts — which is why you saw no consent banner. Your light/dark theme preference is stored locally in your browser (not a cookie, and never sent to us). The only cookie our systems ever set is a strictly-necessary security cookie inside the signed-in customer app, which is exempt from consent.

What we collect, and why

  • Account data (name, email, password hash, plan) — to create and secure your account and to contact you about your service. Legal basis: performance of a contract.
  • Store catalogue data (product titles, prices, images, stock, categories) — copied to our search engine so we can serve fast search. We process this on your behalf as a processor; you remain the controller. See our Data Processing Addendum.
  • Search analytics — cookieless and aggregate (e.g. popular queries, zero-result queries). We do not store shopper personal data, and analytics events carry no shopper identifiers.
  • Contact messages — if you use our contact form or email us, we keep your message and email to reply.

Where your data lives

Hosting and transactional email are EU-based. A current list of the third parties who may process data on our behalf is on our Subprocessors page.

How long we keep it

Account and store data are kept for as long as your account is active, and deleted (with the search index reduced to zero) on request or after account closure, subject to any legal retention we’re required to observe. Raw analytics events are pruned on a rolling schedule; only aggregate rollups are retained.

Your rights

Under the UK GDPR / EU GDPR you have the right to access, rectify, erase, restrict, port, and object to processing of your personal data. To exercise any of these, email [email protected]. You also have the right to complain to your local supervisory authority.

Changes

We’ll post any change here and update the date above. Material changes will be communicated to account holders by email.