Contactable Privacy Policy

Effective date: 15 December 2025

This Privacy Policy explains how Contactable.co.uk and Contactable.uk (together, the “Platform”) collect, use, share and protect personal data.

This Privacy Policy should be read alongside our Terms & Conditions. If there is a conflict, the Terms apply to the use of the Platform and this Privacy Policy applies to personal data handling.

1. Who we are

Contactable is operated as a UK sole trader, trading as Contactable.co.uk and Contactable.uk (“Contactable”, “we”, “us”, “our”).

Support contact: support@contactable.co.uk

2. The law we follow

We handle personal data in line with UK data protection law, including the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018. Cookie and electronic marketing rules may also apply under the Privacy and Electronic Communications Regulations (“PECR”).

3. When Contactable is responsible for your data

Contactable is responsible for the personal data we collect and use for running the Platform, such as account setup, billing, security, support, analytics for our service, and platform communications.

If you create a profile page, contact form, booking page, mailing list form, downloadable file page, or similar feature, you may collect personal data from visitors. In those cases:

1. You control what you collect and why you collect it
2. You are responsible for ensuring your own use is lawful and transparent
3. Contactable provides the tools and may process that data to deliver the feature

If you collect personal data from visitors using Contactable tools, you should provide your own privacy information to those visitors where required.

4. Personal data we collect

The personal data we collect depends on how you use the Platform. This may include:

Account and subscription data

1. Name, username, profile details you add to your account
2. Email address, login credentials and security information
3. Billing status, subscription level and transaction references
4. Customer support messages and account-related communications

Profile page and content data

1. Links, text, images, files, embedded media, and other content you publish
2. Profile configuration such as page layout choices and settings
3. Custom domain settings and DNS-related configuration you provide

Visitor and analytics data

1. Approximate location (for example country or city), device type, browser type and referral source
2. Page views, link clicks, and interaction events within your profile pages
3. IP address and timestamps for security, fraud prevention and platform integrity

Data collected through user tools

If you enable features such as contact forms, messaging, appointment booking, event registration, or email capture, we may process the information visitors submit through those tools, which can include:

1. Names
2. Email addresses
3. Messages and enquiry content
4. Booking or event details chosen by the visitor

AI feature data

If you use AI features, we may process the information you submit to generate outputs and to operate and protect the service. This can include prompts, inputs, and generated responses. You should avoid submitting sensitive personal data unless you have a lawful basis and it is necessary.

Payments data

Payments are handled by third-party providers (such as Stripe or PayPal). We do not store full payment card details. We may receive limited information such as payment status, transaction identifiers, plan level, and billing timestamps.

5. How we use personal data and our lawful bases

UK GDPR requires a lawful basis for processing. We use personal data for the following purposes:

To provide and operate the Platform

1. Creating and managing your account
2. Providing profile pages, file hosting, custom domain features, analytics, and other platform tools
3. Providing customer support and responding to enquiries

Lawful basis: Contract (to provide the services you request) and Legitimate Interests (to operate and improve the Platform).

To handle subscriptions and billing

1. Managing plan access and renewals
2. Handling invoices, receipts, and payment status checks

Lawful basis: Contract and Legal Obligation.

To keep the Platform safe and prevent misuse

1. Detecting fraud, abuse, bots, and suspicious activity
2. Protecting accounts, preventing unauthorised access, and securing uploads
3. Enforcing our Terms and Acceptable Use rules

Lawful basis: Legitimate Interests and, where relevant, Legal Obligation.

To improve performance, reliability and features

1. Understanding platform usage trends and feature performance
2. Troubleshooting errors and improving stability

Lawful basis: Legitimate Interests.

To send service communications

1. Important account notices, security alerts, and service updates
2. Emails related to your subscription and platform usage

Lawful basis: Contract and Legitimate Interests.

If we send marketing emails (if offered), we will do so in line with PECR and will provide a clear way to opt out.

6. Cookies and similar technologies

We use cookies and similar technologies to make the Platform work, keep it secure, remember preferences, and measure performance. Some cookies are essential. Others may be used for analytics or to improve the service.

You can find more information in our Cookie Policy.

If you add third-party embeds or links on your profile pages (for example YouTube, TikTok, Instagram, booking tools, or payment links), those third parties may use their own cookies or tracking. Contactable does not control third-party cookies.

7. Sharing personal data

We may share personal data with:

1. Service providers who help us operate the Platform (such as hosting, security, analytics, email delivery, and customer support tools)
2. Payment providers for subscription processing and payment status confirmation
3. Legal or regulatory bodies where required by law, or where we reasonably believe there is a risk of serious harm or unlawful activity

We do not sell personal data.

8. International data transfers

Some of our service providers may process data outside the UK. Where personal data is transferred internationally, we take steps designed to ensure appropriate safeguards are in place, such as contractual protections.

9. Data retention

We keep personal data only for as long as needed for the purposes described in this Privacy Policy, including to provide the Platform, meet legal requirements, resolve disputes, enforce our Terms, and maintain security and backups.

If you delete content or close your account, some information may remain in backups or logs for a limited period where reasonably necessary for security, legal compliance, or system integrity.

10. Security

We take reasonable technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure.

No internet service can be guaranteed 100% secure. You are responsible for keeping your login details confidential and using a strong password.

11. Your rights

You have rights under UK data protection law, which may include:

1. The right to access your personal data
2. The right to correct inaccurate or incomplete personal data
3. The right to delete personal data in certain situations
4. The right to restrict or object to certain processing
5. The right to data portability in certain situations
6. The right to withdraw consent where consent is used

To exercise your rights, contact: support@contactable.co.uk

If your request relates to data collected by a Contactable user through their own profile tools (for example their contact form or mailing list), you may need to contact that user directly because they control their own visitor data.

12. Complaints

If you have a concern about how we handle personal data, please contact us first so we can try to resolve it.

You also have the right to complain to the Information Commissioner’s Office (“ICO”), the UK data protection regulator.

13. Children

The Platform is not intended for children. You must be at least 16 years old to create an account and use Contactable.

We do not knowingly collect personal data from children under 16. If you believe a child has provided personal data to us, contact us at: support@contactable.co.uk

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to the Platform, legal requirements, or how we handle personal data. The latest version will be published on the Platform.

15. Contact

Questions about this Privacy Policy can be sent to:

support@contactable.co.uk