Privacy Policy

1. Introduction and Who We Are

This Privacy Policy applies to the website available at COR Analytics and to related pages such as Features, Demo, Use Cases, Integrations, Pricing, and our legal pages including this Privacy Policy and the Terms of Service. COR Analytics Ltd is the data controller for personal data processed in connection with our website and services.

• Legal name: COR Analytics Ltd
• Registered address: 12 Baker Street, London, W1U 3BH, United Kingdom
• General contact: [email protected] | +44 20 3966 8899
• Privacy inquiries (DPO): [email protected]

We operate in accordance with the UK GDPR, the EU GDPR when applicable, and the UK Data Protection Act 2018. If we refer to “you” or “your,” we mean a website visitor, demo user, prospective customer, customer representative, or other individual interacting with us.

2. Personal Data We Collect

We only collect personal data necessary to operate our website, respond to inquiries, improve our platform, and meet legal obligations. Depending on how you interact with us, we may process the following categories of personal data:

• Identity and contact details: full name, business email address, company name, and telephone number.
• Communication content: messages you send via forms on our site, support requests, and related correspondence.
• Usage and interaction data: pages viewed, navigation paths, features clicked, time spent, and referrer information.
• Device and technical data: IP address, approximate geolocation derived from IP, browser type and version, device type, operating system, screen resolution, language preferences, and time zone.
• Cookies and similar technologies: identifiers used to remember preferences, provide security, and analyze site usage.
• Marketing preferences: your choices regarding newsletters, product updates, and remarketing where applicable and consented.
• Server log data: request timestamps, response codes, and error diagnostics necessary for security and reliability.

3. How We Collect Data

We collect data directly from you and automatically through our website and services:

• Web forms: when you send us a message or request information through our contact elements on the site.
• Cookies and local storage: strictly necessary cookies for core site functions and optional analytics/marketing cookies activated only after consent through our cookie banner.
• Analytics tools: Google Analytics 4 for aggregate measurement of traffic and performance (loaded only after consent).
• Advertising pixels: Meta Pixel for measurement and optional remarketing (activated only after express consent).
• Server logs: automatic records maintained by our hosting and security systems to keep the service reliable and safe.

4. Legal Bases for Processing (GDPR Art. 6)

We rely on one or more of the following legal bases depending on the data and context:

• Consent (Art. 6(1)(a)): for optional analytics cookies, marketing cookies, and newsletters. You may withdraw consent at any time via our cookie banner or by contacting [email protected].
• Contract (Art. 6(1)(b)): to provide requested demos, proposals, or pre-contractual communications initiated by you, and to deliver paid services if you become a customer representative.
• Legitimate interests (Art. 6(1)(f)): to secure our website, prevent fraud or abuse, measure and improve performance using aggregated insights (where strictly necessary and privacy-preserving), and communicate with you about service updates relevant to your inquiry. We balance these interests against your rights and expectations.
• Legal obligation (Art. 6(1)(c)): to comply with applicable laws, regulatory requests, and record-keeping requirements.

Examples: We process your name and email to respond to a message you send (contract or legitimate interests). We process usage data for analytics only with your consent when cookies are accepted. We may retain minimal records to comply with legal retention duties.

5. Purposes of Processing

We use personal data for the following purposes:

• Service delivery: to operate our website, provide the demo, prepare proposals, and support potential and existing customers.
• Customer support: to answer questions, investigate issues, and follow up on requests you submit.
• Analytics and product improvement: to understand aggregate usage patterns and improve clarity, performance, and accessibility of our content and features.
• Marketing with consent: to send optional newsletters or product updates and to run remarketing campaigns where you have opted in.
• Security and fraud prevention: to detect, prevent, and respond to malicious activity, spam, or misuse.
• Legal compliance: to maintain records, manage risk, and exercise or defend legal claims.

6. Data Retention

We retain personal data only for as long as necessary for the purposes described in this policy, and in accordance with statutory or contractual requirements. Specific retention periods are as follows:

• Form submissions and email correspondence: retained for 2 years to manage follow-ups and audit trails, unless you ask us to delete earlier where permitted.
• Analytics data (Google Analytics 4): retained for 14 months, stored in aggregated form where possible.
• Marketing lists: retained until you unsubscribe, followed by a 30-day suppression period to ensure no further emails are sent to that address.
• Server logs and security records: retained for 12 months, or longer if needed to investigate incidents.
• Contractual documents and billing records (if applicable): retained for up to 7 years to comply with tax and accounting rules.

When retention periods expire, we securely delete or anonymize the data. If deletion is not immediately feasible (for example, in backups), we isolate and protect the data from further processing until disposal is possible.

7. Data Sharing and Processors

We do not sell personal data. We share personal data only with trusted service providers acting as processors under written contracts that require confidentiality, security, and compliance with data protection laws. Categories of recipients include:

• Hosting and infrastructure: cloud hosting, content delivery networks, and security services needed to run our site.
• Email and communications: providers that route or deliver emails you send or that we send in response.
• Analytics: Google Analytics 4 for aggregated usage analysis (only after you consent via our cookie banner).
• Advertising measurement: Meta Pixel for performance measurement and optional remarketing (loaded only after consent).
• Professional services: legal, accounting, or compliance advisors when necessary.

If we reorganize our business, merge, or transfer assets, personal data may be transferred as part of that transaction under appropriate safeguards. We may also disclose data where required by law or to protect our rights, users, or the public.

8. International Data Transfers

Our primary data handling operations are based in the United Kingdom and the European Economic Area (EEA). Where data is transferred outside the UK or EEA—for example, to service providers in the United States—we rely on one or more of the following safeguards:

• Standard Contractual Clauses (SCCs) approved by the European Commission, supplemented as needed to address local laws.
• UK International Data Transfer Addendum (IDTA) or UK Addendum to the SCCs where required.
• Transfers to countries covered by an adequacy decision (if applicable).

We assess transfer risks and implement technical and organizational measures such as encryption in transit, strict access controls, and data minimization to protect your information.

9. Your Rights

Under the UK GDPR and EU GDPR (where applicable), you have the following rights in relation to your personal data:

• Right of access: request confirmation of whether we process your data and receive a copy.
• Right to rectification: correct inaccurate or incomplete data.
• Right to erasure: request deletion where the data is no longer necessary, you withdraw consent, or processing is unlawful.
• Right to restrict processing: ask us to limit processing in certain circumstances.
• Right to data portability: receive data you provided in a structured, commonly used, machine-readable format and transmit it to another controller where technically feasible.
• Right to object: object to processing based on legitimate interests or to direct marketing at any time.
• Right to withdraw consent: where processing relies on consent, you may withdraw it at any time without affecting prior lawful processing.

To exercise these rights, email [email protected]. We may ask for limited information to verify your identity before fulfilling a request. We will respond within one month, or within three months for complex requests, in which case we will inform you of the delay and reasons.

If you believe your rights have been infringed, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO). You may also complain to your local supervisory authority in the EEA if applicable. We would appreciate the chance to address your concerns first.

10. Cookies and Similar Technologies

We use cookies and local storage to make our website work, to remember your preferences, and—where you consent—to perform analytics and measure marketing. Our cookie banner gives you a clear choice to accept or reject optional cookies at any time.

• Strictly necessary cookies: enable core functionality such as security, load balancing, and consent storage. These are essential and do not require consent.
• Analytics cookies (consent-based): help us understand how visitors interact with pages like Demo and Features so we can improve usability and performance.
• Marketing cookies (consent-based): used for measurement and to show relevant information about our product across Meta properties if you have opted in.

Typical durations: strictly necessary cookies last for the session or up to 12 months; analytics cookies persist up to 14 months; marketing cookies persist up to 6 months. You can manage cookies using our on-page banner or through your browser settings. Rejecting optional cookies will not limit access to core content such as Use Cases or Pricing.

11. Data Security

We implement appropriate technical and organizational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. Measures include encryption in transit (HTTPS/TLS), access controls on a need-to-know basis, server hardening, periodic reviews of permissions, and staff training. While no online service can guarantee absolute security, we continually assess risk and improve safeguards.

12. Children’s Privacy

Our website and services are not directed to individuals under the age of 16, and we do not knowingly collect personal data from minors. If you are a parent or guardian and believe your child has provided personal data to us, please contact [email protected] and we will take appropriate steps to delete the information.

13. Marketing Communications and Preferences

We send marketing emails (such as product updates or newsletters) only with your prior consent. You can unsubscribe at any time by using the link provided in the email or by contacting [email protected]. If you unsubscribe, we will keep a minimal suppression record to respect your choice. We do not use sensitive personal data for marketing.

14. Automated Decision-Making

Our platform provides research support and analytics for currency markets. We do not engage in solely automated decision-making that produces legal or similarly significant effects about you. Where algorithmic processing is used to present insights, it concerns financial market data and not profiling of website visitors or customers for such effects.

15. Third-Party Links

Our website may contain links to pages within our domain and, on occasion, references to third-party resources. This Privacy Policy applies only to COR Analytics. If you navigate away from our site, the other party’s privacy practices will govern their processing. We encourage you to review any applicable privacy notices. For our contractual terms, see the Terms of Service.

16. How to Contact Us

For questions about this Privacy Policy, to exercise your rights, or to file a complaint, please contact our Data Protection Officer (DPO):

• Email: [email protected]
• Mail: COR Analytics Ltd, 12 Baker Street, London, W1U 3BH, United Kingdom
• Phone: +44 20 3966 8899

We will reply within one business day to acknowledge receipt and within one month to resolve your request where it concerns data subject rights.

17. Changes to This Policy

We may update this Privacy Policy from time to time to reflect new services, legal requirements, or improvements to our practices. Material changes will be highlighted on this page and, where appropriate, we will notify you by email or display a banner on our site. The effective date is shown at the top of this page. Last Updated: January 15, 2026.