LEGAL
Privacy Policy
How we collect, process, and protect your personal data.
Last updated: 3 March 2026
1. Data Controller
The data controller is GateCommerce LTD, a company registered in England and Wales.
Email: info@gatecommerce.com
Website: www.gatecommerce.com
2. Data We Collect
We collect the following categories of personal data:
- Contact data — name, email address, company name, and message content submitted via our contact form or email.
- Technical data — IP address, browser type and version, operating system, referral source, page visit duration, and navigation paths. This data is collected automatically when you visit our website.
- Preference data — theme preference (light/dark mode) and cookie consent choices, stored locally on your device.
3. Purpose and Legal Basis
| Purpose | Legal Basis (GDPR Art. 6) |
|---|---|
| Respond to contact requests | Consent (Art. 6(1)(a)) / Legitimate interest (Art. 6(1)(f)) |
| Website functionality and security | Legitimate interest (Art. 6(1)(f)) |
| Technical cookies (strictly necessary) | Legitimate interest (Art. 6(1)(f)) |
| Analytics and performance cookies | Consent (Art. 6(1)(a)) |
| Legal compliance | Legal obligation (Art. 6(1)(c)) |
4. Data Retention
- Contact form data — retained for 24 months from the last communication, then deleted.
- Technical logs — retained for a maximum of 12 months.
- Local storage data — remains on your device until you clear it.
5. Data Sharing
We do not sell your personal data. We may share data with:
- Hosting provider — Cloudflare, Inc. (USA), which processes technical data to serve our website. Cloudflare operates under EU-US Data Privacy Framework adequacy provisions.
- Font provider — Google Fonts (Google LLC, USA), which may receive your IP address when loading fonts. Data transfer is covered by Google's EU-US Data Privacy Framework certification.
- Calendly — Calendly LLC (USA), if you choose to schedule a meeting via the embedded widget. Data transfer is governed by Calendly's DPA and Standard Contractual Clauses.
6. International Data Transfers
Some of our service providers are based in the United States. Data transfers outside the EEA are protected by:
- EU-US Data Privacy Framework (adequacy decision, July 2023)
- Standard Contractual Clauses (SCCs) approved by the European Commission
7. Your Rights
Under the GDPR (Articles 15-22), you have the following rights:
- Right of access — obtain a copy of your personal data.
- Right to rectification — correct inaccurate or incomplete data.
- Right to erasure — request deletion of your data ("right to be forgotten").
- Right to restriction — restrict the processing of your data.
- Right to data portability — receive your data in a structured, machine-readable format.
- Right to object — object to processing based on legitimate interest.
- Right to withdraw consent — withdraw consent at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, contact us at info@gatecommerce.com. We will respond within 30 days.
8. Right to Lodge a Complaint
If you believe your data protection rights have been violated, you have the right to lodge a complaint with:
- UK: Information Commissioner's Office (ICO) — ico.org.uk
- Italy: Garante per la protezione dei dati personali — garanteprivacy.it
- Or the supervisory authority in your country of residence within the EU/EEA.
9. Cookies
This website uses cookies and similar technologies. For detailed information about which cookies we use, their purpose, and how to manage your preferences, please see our Cookie Policy.
10. Security Measures
We implement appropriate technical and organisational measures to protect your personal data, including:
- HTTPS encryption (TLS 1.3) for all communications
- Strict Content Security Policy (CSP) headers
- Regular security reviews and updates
- Access controls and data minimisation principles
11. Children's Privacy
Our services are not directed at individuals under 16 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us immediately.
12. Changes to This Policy
We may update this privacy policy from time to time. The "Last updated" date at the top of this page indicates the most recent revision. We encourage you to review this page periodically.
13. Contact
For any questions or requests regarding this privacy policy or your personal data:
GateCommerce LTD
Email: info@gatecommerce.com