Legal
Privacy policy
TODO — placeholder
Replace with finalised privacy policy reviewed by counsel before launch. Should cover: data collected via the wizard (email, venue, volume, current provider, needs), where we store it (ActiveCampaign + PostHog), basis for processing (legitimate interest + consent), retention, third parties, your rights under UK GDPR, and how to contact us.
What we collect
When you complete the comparison wizard we may collect: your email address, the venue type and approximate monthly volume you entered, your current card payment provider, the features you indicated you need, and standard analytics (page views, referring domain, session id).
Where it lives
Your contact details and lifecycle state are held in ActiveCampaign. Anonymous and identified analytics events are held in PostHog. We do not run our own database.
Your rights
Under UK GDPR you have the right to access, rectify, or erase the personal data we hold about you. Email hello@cardrate.co.uk.