Privacy policy

This Privacy Policy explains how Serene Stock Online Ltd (“we”, “us”, “our”), the operator of ConverWatch (the “Service”), collects, uses, and protects your personal data. We are based in the United Kingdom and act as a data controller under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Information we collect

We collect the following categories of personal data:

• Account information — your email address and, if you create an account, your password (stored in encrypted form).
• Audit data — the website URLs you submit for auditing, and the reports generated from them.
• Payment information — when you make a purchase, payment is processed by our third-party payment provider (Stripe). We do not store your full card details on our servers.
• Technical data — your IP address, browser type, and basic usage information collected automatically when you use the Service.
• Communications — any information you provide when you contact us.

2. How we use your information

We use your personal data to:

• Provide, operate, and maintain the Service, including generating and delivering audit reports.
• Process your payment and manage your account.
• Send you service-related communications, including email verification and report delivery.
• Prevent abuse, fraud, and misuse of the Service.
• Improve and develop the Service.
• Comply with our legal obligations.

3. Legal bases for processing

Under UK GDPR, we rely on the following legal bases:

• Contract — to provide the Service you have signed up for.
• Legitimate interests — to operate, secure, and improve the Service, and to prevent abuse.
• Consent — where you have given it, for example for certain communications.
• Legal obligation — where we are required to process data by law.

4. Sharing your information

We do not sell your personal data. We share it only with trusted third-party providers who help us operate the Service — for example, payment processing (Stripe), email delivery (Resend), and hosting infrastructure (Hetzner). These providers process your data only on our instructions and under appropriate data protection terms.

We may also disclose information where required by law, to enforce our terms, or to protect the rights, property, or safety of our users or others.

5. Data retention

We retain your personal data for as long as your account is active or as needed to provide the Service. If you close your account, we will delete or anonymise your personal data within a reasonable period, except where we are required to retain it for legal, accounting, or fraud-prevention purposes.

6. Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request erasure of your data (“right to be forgotten”).
• Object to or restrict certain processing.
• Request a copy of your data in a portable format.
• Withdraw consent where processing is based on consent.

To exercise any of these rights, contact us at support@converwatch.com. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk.

7. Cookies and tracking

We use essential cookies to operate the Service, such as keeping you logged in and maintaining your session. We also collect basic, privacy-respecting usage information to understand how the Service is used. We do not use third-party advertising cookies.

8. Data security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. Passwords are stored in encrypted form, and access to personal data is restricted. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. International transfers

Our hosting infrastructure is located within the European Union (Hetzner, Germany), which the UK recognises as providing an adequate level of data protection. Some of our providers, such as our payment and email processors (Stripe and Resend), are based in the United States. Where personal data is transferred outside the United Kingdom, we ensure appropriate safeguards are in place, such as standard contractual clauses or an equivalent approved transfer mechanism, as required by UK GDPR.

10. Children

The Service is intended for businesses and is not directed at children under 18. We do not knowingly collect personal data from children.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “last updated” date at the top of this page. Significant changes will be communicated to you where appropriate.

12. Contact us

If you have any questions about this Privacy Policy or how we handle your data, contact us at support@converwatch.com.

ConverWatch is operated by Serene Stock Online Ltd, a company registered in England and Wales (company number 15624957), with its registered office at 51 Burnham Road, Dagenham, RM9 4RA, United Kingdom.