Privacy Policy

Who we are

NitroSearch is operated by NitroSearch , a sole trader based in England & Wales, United Kingdom , business address Busbridge Gardens, Godalming, Surrey, GU7 1XQ, United Kingdom . We are the controller of the personal data described here. For any privacy question, contact [email protected].

This website is cookieless

Our marketing website sets no tracking cookies and runs no third-party analytics or advertising scripts — which is why you saw no consent banner. Your light/dark theme preference is stored locally in your browser (not a cookie, and never sent to us). The only cookie our systems ever set is a strictly-necessary security cookie inside the signed-in customer app, which is exempt from consent.

What we collect, and why

• Account data (name, email, password hash, plan) — to create and secure your account and to contact you about your service. Legal basis: performance of a contract.
• Store content you choose to index (product titles, prices, images, stock and categories; and, if you switch it on, the titles, short summaries, categories, featured images and publish dates of your pages and blog posts) — copied to our search engine so we can serve fast search. Indexing pages and posts is off unless you enable it. We never copy full page or post bodies, and we never index content that is private, password-protected, unpublished, or marked noindex. We process this on your behalf as a processor; you remain the controller. See our Data Processing Addendum.
• Search analytics — cookieless measurement of how search performs on connected stores (e.g. popular queries, zero-result queries, which results get clicked). Events carry no persistent shopper identifiers: no cookies, no IP addresses, no fingerprints. A random, short-lived token links a search to its clicks within a single page visit and is deleted with the raw events. Anything a shopper types into the search box is kept at most around three months in raw form and is only ever displayed in aggregate. We process this on the merchant’s behalf to power their analytics dashboards. We also use aggregated, store-unattributable search statistics to improve ranking quality across the service — for that limited purpose NitroSearch acts as the controller.
• Contact messages — if you use our contact form or email us, we keep your message and email to reply.

Where your data lives

Your data is hosted on secure cloud infrastructure in the United Kingdom and/or European Union. Payments for paid plans are processed by Stripe. The third parties that may process data on our behalf are listed on our Subprocessors page.

How long we keep it

Account and store data are kept for as long as your account is active, and deleted (with the search index reduced to zero) on request or after account closure, subject to any legal retention we’re required to observe. Raw search-analytics events are deleted after 90 days and purged within a further week; aggregate rollups are kept for up to 24 months. Residual copies of deleted data may persist in our encrypted operational backups for up to 30 days after deletion, and are then destroyed as those backups rotate; backups are used only for disaster recovery, never to reinstate deleted data.

Your rights

Under the UK GDPR / EU GDPR you have the right to access, rectify, erase, restrict, port, and object to processing of your personal data. To exercise any of these, email [email protected]. You also have the right to complain to your local supervisory authority.

Changes

We’ll post any change here and update the date above. Material changes will be communicated to account holders by email.