Your privacy is important to us. It is our policy to respect your privacy and comply with any applicable law and regulation regarding any personal information we may collect about you when you visit our marketing website at www.costctrl.com.
This policy covers the www.costctrl.com marketing website only. Our software application (app.costctrl.com) is governed by separate application terms and a data processing agreement, which we provide to customers. If you are a customer using the application, those documents describe how data you put into the application is handled.
Personal information is any information about you which can be used to identify you, such as your name and email address.
In the event our site contains links to third-party sites and services, please be aware that those sites and services have their own privacy policies. After following a link to any third-party content, you should read their posted privacy policy information about how they collect and use personal information. This privacy policy does not apply to any of your activities after you leave our site.
This policy is effective as of 1 January 2026.
Last updated: 17 June 2026.
Information we collect
Information we collect falls into one of two categories: "voluntarily provided" information and "automatically collected" information.
"Voluntarily provided" information refers to any information you knowingly and actively provide us when using our website.
"Automatically collected" information refers to any information automatically sent by your devices in the course of accessing our website.
Personal information you provide
The only personal information we ask for on this website is collected through our contact form. This may include:
- Name
- Email address
We use this information solely to respond to your enquiry and to communicate with you about it.
Analytics
We use privacy-friendly, cookieless analytics to understand how our website is used in aggregate (for example, which pages are visited and roughly how many people visit). This analytics service does not set cookies, does not track you across other websites, and does not collect information that personally identifies you.
Log and error data
When you visit our website, our servers and operational tools may automatically log standard technical data such as your device's Internet Protocol (IP) address, browser type and version, the pages you visit, and the time and date of your visit. If you encounter an error while using the site, we may automatically collect technical details about the error so that we can diagnose and fix it.
This information is used for security and to operate and maintain the website. While this information may not be personally identifying by itself, it may be possible to combine it with other data to identify individual persons.
Legitimate reasons for processing your personal information
We only collect and use your personal information when we have a legitimate reason for doing so. We only collect personal information that is reasonably necessary to respond to you and to operate our website.
How we use information
We may collect, hold, use, and disclose information for the following purposes, and personal information will not be further processed in a manner that is incompatible with these purposes:
- to respond to enquiries you send us through our contact form
- to operate, maintain, and secure our website
- to understand, in aggregate, how our website is used so we can improve it
- for internal record keeping and administrative purposes
- to comply with our legal obligations
Security of your personal information
When we collect and process personal information, and while we retain this information, we will protect it within commercially acceptable means to prevent loss and theft, as well as unauthorised access, disclosure, copying, use, or modification.
Although we will do our best to protect the personal information you provide to us, we advise that no method of electronic transmission or storage is 100% secure and no one can guarantee absolute data security.
How long we keep your personal information
We keep your personal information only for as long as we need to. Where you have contacted us through our website, we retain your enquiry and contact details for as long as necessary to deal with your enquiry and for a reasonable period afterwards for our records, after which we will delete it or make it anonymous.
However, if necessary, we may retain your personal information for compliance with a legal, accounting, or reporting obligation.
Children's privacy
We do not aim any of our products or services directly at children, and we do not knowingly collect personal information about children.
Your rights and controlling your personal information
Your choice: By providing personal information to us, you understand we will collect, hold, use, and disclose your personal information in accordance with this privacy policy. You do not have to provide personal information to us; however, if you do not, it may affect your ability to contact us through the website.
Information from third parties: If we receive personal information about you from a third party, we will protect it as set out in this privacy policy. If you are a third party providing personal information about somebody else, you represent and warrant that you have such person's consent to provide the personal information to us.
Marketing permission: If you have agreed to us using your personal information for direct marketing purposes, you may change your mind at any time by contacting us using the details below.
Access: You may request details of the personal information that we hold about you.
Correction: If you believe that any information we hold about you is inaccurate, out of date, incomplete, irrelevant, or misleading, please contact us using the details provided in this privacy policy. We will take reasonable steps to correct any information found to be inaccurate, incomplete, misleading, or out of date.
Opt out of communications: You may opt out of receiving communications from us at any time, for example by using the "unsubscribe" link in any marketing email we send you, or by contacting us using the details below.
Non-discrimination: We will not discriminate against you for exercising any of your rights over your personal information.
Notification of data breaches: We will comply with laws applicable to us in respect of any data breach.
Complaints: If you believe that we have breached a relevant data protection law and wish to make a complaint, please contact us using the details below and provide us with full details of the alleged breach. We will promptly investigate your complaint and respond to you in writing, setting out the outcome of our investigation and the steps we will take to deal with your complaint. You also have the right to contact a regulatory body or data protection authority in relation to your complaint.
Use of cookies
Our website uses only strictly necessary cookies and uses cookieless analytics, so we do not display a cookie consent banner. Please refer to our Cookie Policy for more information.
Business transfers
If we or our assets are acquired, or in the unlikely event that we go out of business or enter bankruptcy, we would include data, including your personal information, among the assets transferred to any parties who acquire us. You acknowledge that such transfers may occur, and that any parties who acquire us may, to the extent permitted by applicable law, continue to use your personal information according to this policy.
Limits of our policy
Our website may link to external sites that are not operated by us. Please be aware that we have no control over the content and policies of those sites, and cannot accept responsibility or liability for their respective privacy practices.
Changes to this policy
At our discretion, we may change our privacy policy to reflect updates to our business processes, current acceptable practices, or legislative or regulatory changes. If we decide to change this privacy policy, we will post the changes here at the same link by which you are accessing this privacy policy.
Additional disclosures for General Data Protection Regulation (GDPR) compliance (EU)
Data controller
The GDPR distinguishes between organisations that process personal information for their own purposes (known as "data controllers") and organisations that process personal information on behalf of other organisations (known as "data processors"). With respect to personal information collected through this marketing website, CostCtrl Limited is a Data Controller.
Legal bases for processing your personal information
We will only collect and use your personal information when we have a legal right to do so. Our lawful bases depend on how you use our website:
Consent
Where you give us consent to collect and use your personal information for a specific purpose, such as providing your email address to receive marketing emails from us. You may withdraw your consent at any time using the facilities we provide; however, this will not affect any use of your information that has already taken place.
Performance of a contract or steps prior to a contract
Where you contact us with an enquiry, we may require personal information such as your name and contact details in order to respond.
Our legitimate interests
Where we assess it is necessary for our legitimate interests, such as to operate, secure, improve, and communicate about our services, and to understand our audience in aggregate.
Compliance with the law
In some cases, we may have a legal obligation to use or keep your personal information, such as in response to court orders, government requests, and regulatory obligations.
International transfers outside of the European Economic Area (EEA)
We will ensure that any transfer of personal information from countries in the European Economic Area (EEA) to countries outside the EEA will be protected by appropriate safeguards, for example by using standard data protection clauses approved by the European Commission, or other legally accepted means.
Additional rights under the GDPR
In addition to the rights set out above, if you are in the EEA you have the right to request that we restrict processing of your personal information, the right to object to processing based on our legitimate interests, the right to data portability, and the right to request deletion of the personal information we hold about you. There may be exceptions to these rights for specific legal reasons which, if applicable, we will set out for you in response to your request.
Contact us
For any questions or concerns regarding your privacy, you may contact us using the following details:
Sam Galloway
https://www.costctrl.com/contact