Legal

Privacy Policy

Last updated: 8 October 2026

This policy explains what personal data Cortessian ("we", "us") collects through cortessian.com, why, and what rights you have over it.

Who we are

Cortessian is a trading name of Strategic Flow Ltd, registered in England & Wales under company number 16635873, VAT number GB 498 9816 01, registered office at 32 The Crescent, Spalding, Lincolnshire, PE11 1AF. For any privacy question, contact us at hello@cortessian.com.

What we collect

  • Contact form submissions: name, work email, company, role, and any message you write.
  • Basic technical data: standard server logs (IP address, browser type, pages visited) collected by our hosting provider for security and performance.
  • Privacy-friendly web analytics: via Ahrefs Web Analytics, which measures aggregated traffic without cookies or persistent identifiers. Ahrefs processes page URLs, referrers, browser/device information, language and approximate location; raw IP addresses are discarded rather than stored.
  • Optional website analytics: if you accept analytics, Google Analytics 4 (GA4) measures visits and interactions with our pages, including page views, approximate location, device/browser details and referral sources. Google may set analytics cookies to distinguish visits and visitors. We do not enable Google advertising features through this integration.
  • Optional behavioural analytics: if you accept analytics, Microsoft Clarity records how visitors navigate the site — including pages viewed, clicks, scrolling and mouse movement — together with device/browser information and approximate location. Form fields where you might enter personal information are masked so their content is not captured.
  • We do not sell personal data to third parties.

Why we collect it

We use contact form data solely to respond to your enquiry and, where relevant, to deliver a proposed engagement. The lawful basis is legitimate interest (responding to a business enquiry you initiated) or, where we go on to contract with you, performance of that contract.

How long we keep it

Enquiry data is retained for as long as reasonably needed to respond and follow up — typically no more than 24 months from your last contact with us — after which it is deleted, unless we're required to keep it for a longer legal or accounting purpose.

Who we share it with

We use third-party infrastructure to run this site and handle enquiries. Cloudflare provides hosting and spam protection (Turnstile) — it processes data only on our instructions and is bound by its own data protection commitments. Contact form notifications are sent via Proton's email service. Ahrefs provides privacy-friendly web analytics. If you accept optional analytics, Google processes website analytics through GA4 and Microsoft processes behavioural analytics through Clarity. Their handling of data is governed by their respective privacy and service terms.

Your rights

Under UK GDPR you can ask us to access, correct, delete, or export the personal data we hold about you, and you can object to or restrict certain processing. To exercise any of these rights, email hello@cortessian.com. If you're unsatisfied with our response, you can complain to the UK Information Commissioner's Office (ico.org.uk).

Cookies and analytics

Ahrefs Web Analytics runs without cookies or persistent identifiers. We use it to understand aggregated site traffic, such as page views, referrers, device/browser types and broad location. Ahrefs states that raw IP addresses are discarded rather than stored.

Google Analytics 4 is optional and is not loaded unless you select Accept analytics. It uses cookies including _ga and _ga_* to distinguish users and sessions and report website usage. The usual expiration period for these cookies is up to two years, subject to browser restrictions and Google settings. Google may process analytics information outside the UK. See Google’s privacy policy for further information.

Microsoft Clarity is optional. It does not load unless you select Accept analytics. If you accept, Clarity may set analytics cookies and collect information about how you use the site, including pages viewed, clicks, scrolling, mouse movement, device/browser details and approximate location. Form fields where you might enter personal information are masked so their content isn't captured in Clarity recordings.

We store your analytics choice in your browser's local storage so we can remember it on later pages and visits. You can change your choice at any time using Cookie settings in the site footer. If you withdraw consent, we tell Clarity to withdraw consent, attempt to remove GA4 analytics cookies and reload the page to stop further GA4 tracking. Neither Google Analytics nor Clarity is loaded on subsequent visits unless you accept again. Withdrawing consent does not delete data already collected; contact us about your privacy rights.

Changes to this policy

We'll update this page if how we handle data changes, and update the date at the top when we do.