Privacy policy

1. Who we are

The controller for personal data collected on this site is ConversionVector LTD ("we"). You can contact us at hello@conversionvector.com.

2. What we collect and why

| What | When | Purpose | Lawful basis | | --- | --- | --- | --- | | Name, work email, company, role, message | Contact form, booking questions | Responding to your enquiry and arranging a call | Steps at your request before a contract; legitimate interests | | First name, work email, company (optional), role (optional) | Resource gate forms | Delivering the resource you asked for | Steps at your request; legitimate interests | | Marketing consent, consent text version, timestamp | Any form where you tick the marketing box | Sending new playbooks and occasional insights | Consent (double opt-in) | | UTM parameters, referrer, landing page | Any form submission | Understanding which content brings people to the site | Legitimate interests | | Scorecard scores, band and variant (Phase 2) | Report request on the Agent Readiness Scorecard | Sending your report | Steps at your request | | Server logs (IP address, user agent, timestamps) | Every request | Security, abuse prevention, debugging | Legitimate interests | | Cookieless analytics (aggregated page views and events) | Every page view | Understanding how the site is used | Legitimate interests |

We do not use your details for automated decision-making or profiling that produces legal effects.

We use the following providers to run this site. Each processes data on our instructions under a data-processing agreement.

Vercel Inc. – hosting, serverless functions, logs and file storage.
Brevo (Sendinblue SAS) – transactional and marketing email, double opt-in.
HubSpot, Inc. – customer relationship management (contacts, notes, deals).
Cal.com, Inc. – booking the discovery call. Cal.com's own privacy notice applies to the scheduler.
Plausible Insights OÜ – cookieless, EU-hosted web analytics.
Cloudflare, Inc. – Turnstile anti-spam check on form pages.

4. International transfers

Some providers process data outside the EU/UK. Where they do, we rely on the EU–US Data Privacy Framework, the UK Extension, or Standard Contractual Clauses.

5. How long we keep data

Enquiries and leads: 24 months after our last contact.
Unconfirmed double-opt-in records: 30 days.
Consent logs: for as long as we rely on the consent, plus 3 years.
Server logs: 30 days.

6. Your rights

You can ask us to access, correct, delete or restrict your personal data, object to processing based on legitimate interests, withdraw consent at any time, and receive a copy of data you gave us in a portable format. Email hello@conversionvector.com. Every marketing email includes an unsubscribe link.

You also have the right to complain to the data-protection authority where you live.

7. Changes

We will post changes here and update the date at the top. Material changes to how we use your data will be announced on the affected forms.