Service providers who help us run CORE X9, as processors under contract — for example Stripe (payments), our email provider (transactional and, if you opt in, marketing email), and our hosting provider. We do not sell your personal data.
Where data is processed outside the UK or EEA, we rely on appropriate safeguards such as Standard Contractual Clauses.
For as long as your account is active, and for a reasonable period afterwards to meet legal, tax and security needs, then we delete or anonymise it.
Subject to law, you can access, correct, delete, export, restrict or object to our use of your data, and withdraw consent. You can delete your account in Settings, change your marketing preference anytime, and unsubscribe from any marketing email in one click. To exercise other rights, contact us. You may also complain to your data protection authority (in the UK, the ICO).
We use strictly necessary cookies to keep you signed in and secure. Published sites may use privacy-friendly, cookie-free analytics. We do not use third-party advertising cookies.
We protect data with encryption in transit, encryption at rest for sensitive credentials, hashed passwords, optional two-factor authentication, and regular backups. No system is perfectly secure, but we take it seriously.
We will post any changes here. Controller: Brendan Smith trading as CORE X9, 201F, 60 Frederick Street, Birmingham, B1 3HS. Privacy contact: privacy@corex9.co.uk.