Privacy Policy
Last updated: 15 June 2026
1. Introduction
Collect Solutions Ltd (company number 16931356), trading as collects.io (“we”, “our”, or “us”), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit the collects.io marketing website.
For the purposes of UK GDPR and EU GDPR, Collect Solutions Ltd is the data controller responsible for the processing of personal data described in this Privacy Policy.
This Privacy Policy is a transparency notice, not a contract. It applies to this website only. If you become a collects.io customer, additional terms and privacy notices may apply to our accounts receivable services.
2. Information We Collect
2.1 Information You Provide
We collect personal information that you voluntarily provide when you:
- Contact us by email or telephone
This information may include:
- Full name
- Email address
- Company name
- Optional message content
- Any information you choose to include when emailing or calling us
We do not operate a customer account system or marketing database on this website.
2.2 Automatically Collected Information
When you visit our website, we automatically collect certain technical information through your browser and, if you accept analytics cookies, through Google Analytics. This may include:
- Browser type and device information
- Operating system
- Pages visited and time spent on pages
- Referring website address
- UTM campaign parameters in the page URL (utm_source, utm_medium, utm_campaign, utm_content, utm_term), where present
- User agent string
- Pseudonymous identifiers assigned by Google Analytics (such as client IDs in analytics cookies)
We do not load Google Analytics unless you accept analytics cookies in our cookie banner. If you decline, we store only your consent choice locally in your browser.
3. How We Use Your Information
We use the information we collect to:
- Respond to enquiries
- Communicate with you about your request
- Understand how visitors use this website so we can improve its content and performance
- Operate, secure, and maintain this website
- Comply with legal obligations
Our lawful bases for processing personal data include:
- Legitimate interests — to respond to enquiries, operate our website, and understand aggregated website usage
- Consent — for non-essential analytics cookies
- Legal obligation — where processing is required to comply with applicable laws
4. Data Storage and Security
Contact enquiries received by email are handled by our team and are not stored in a database on this website. Website hosting is provided by Vercel. We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction.
Security measures include:
- Encryption of data in transit (HTTPS)
- Restricted access to enquiry emails on a need-to-know basis
- Analytics loading only after explicit cookie consent
No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security.
In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay in accordance with our obligations under UK GDPR Article 34.
5. Data Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances.
5.1 Service Providers
We share your information with the following third-party service providers who process data on our behalf, subject to appropriate contractual data protection obligations:
| Provider | Purpose | Data location |
|---|---|---|
| Google Analytics 4 | Website analytics and usage measurement (only after you consent) | United States (UK IDTA and EU Standard Contractual Clauses in place) |
| Postmark | Transactional email delivery for contact enquiries | United States (UK IDTA and EU Standard Contractual Clauses in place) |
| Vercel | Website hosting and content delivery | United States and EU (UK IDTA and EU Standard Contractual Clauses in place) |
5.2 Legal Requirements
We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, government agencies).
5.3 Business Transfers
In the event of a merger, acquisition, or sale of assets, your personal information may be transferred to the acquiring entity.
6. Your Data Rights
Under UK GDPR and EU GDPR, you have the following rights regarding your personal data:
- Access — request access to the personal information we hold about you
- Correction — request correction of inaccurate or incomplete data
- Deletion — request deletion of your personal information
- Portability — request transfer of your data to another service provider
- Objection — object to processing based on legitimate interests
- Restriction — request restriction of processing of your personal information
- Withdraw Consent — withdraw consent at any time where we rely on consent for processing (including analytics cookies), without affecting the lawfulness of processing before withdrawal
To exercise any of these rights, please contact us at privacy@collects.io.
Right to complain.You have the right to lodge a complaint with a supervisory authority. In the United Kingdom, this is the Information Commissioner's Office (ICO) at ico.org.uk. If you are located in the European Union, you may contact your local supervisory authority.
8. Data Retention
| Data type | Retention period |
|---|---|
| Contact enquiries | As long as needed to respond to your request and up to 6 years thereafter for sales and legal record-keeping |
| Website analytics data | Up to 26 months (as configured in Google Analytics) |
| Cookie consent preference | Until you clear your browser storage or change your choice |
When personal data is no longer required, we will securely delete or anonymise it.
9. Third-Party Links
Our website may contain links to third-party websites (for example, accounting platform connect flows or product walkthrough content). We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any third-party sites you visit.
10. Children's Privacy
Our website is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us at privacy@collects.io and we will take steps to delete such information.
11. International Data Transfers
Your information may be transferred to and processed in countries outside the United Kingdom or European Economic Area — in particular the United States, where Google (Google Analytics), Postmark, and Vercel operate. Where such transfers occur, we rely on appropriate safeguards such as the UK International Data Transfer Agreement (IDTA), EU Standard Contractual Clauses, or transfers to jurisdictions with recognised adequacy decisions.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the “Last Updated” date. You are advised to review this Privacy Policy periodically.
13. Contact Us
If you have any questions about this Privacy Policy or to exercise your data rights, please contact us:
Collect Solutions Ltd (trading as collects.io)
Company number: 16931356
Registered address: 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ
Email: privacy@collects.io
Website: collects.io