Privacy Policy

Effective Date: 15/09/2026

Introduction

Welcome to Contengro.com (the “Website”), owned and operated by Contengro Group Ltd, a business growth agency and platform provider registered in the United Kingdom. At Contengro Group Ltd, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data in compliance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable data protection laws.

This Privacy Policy (“Policy”) explains how Contengro Group Ltd (“we”, “our”, or “us”) processes Personal Data of individuals who use our services, including our platform, websites (e.g. contengro.com), mobile applications where applicable, and other online services (together, the “Services”). This Policy also explains your rights and choices about how we use your Personal Data, including how you can access, update, or request deletion of certain information about you.

In this Policy, “Personal Data” means any information relating to an identified or identifiable individual, such as an individual’s name, address, telephone number, email address, IP address, or business-related contact details.

Where we provide services to clients that involve processing personal data on their behalf, we may act as a service provider or data processor, and our use of that data will be governed by the relevant customer agreements. In such cases, the customer remains responsible for their own data handling, data collection practices, and legal compliance as data controller unless otherwise agreed in writing.

Categories of Personal Data We Collect

(a) Personal Data You Provide to Us

Contact Details:

To enquire about or register for our services, we may require you to provide contact details such as your name, email address, phone number, business name, address, and communication preferences. These details help us manage your enquiry, account, and service delivery.

Business Information:

When you engage with us for website development, CRM setup, system builds, automation, AI projects, ad campaigns, lead generation, or related services, we may collect detailed information about your business. This may include your company’s sector, size, target market, current systems, project goals, operational challenges, and service requirements.

Feedback / Communications:

When you communicate with us directly or express interest in our services, we may collect information such as your name, email address, phone number, the contents of your messages, any attachments you send, and any other information you choose to provide. This helps us respond to your requests and improve our service offering.

Payment and Bank Details:

For ongoing or subscription services paid by Bacs Direct Debit, we collect your bank account name, sort code, and account number, along with your name, email address, and billing address. This information is collected and processed on our behalf by Stripe Payments UK Ltd, our third-party payment processor, and is used solely to set up and manage your Direct Debit mandate and collect agreed payments.

We do not store your full bank account or sort code details on our own systems. Stripe stores and processes this information in accordance with its own security standards and privacy policy, available at stripe.com/gb/privacy. For one-off payments or other services, Stripe may also collect and process debit card, credit card, or equivalent payment method information.

We retain records of the mandate reference, payment amounts, and payment dates for accounting, tax, and dispute-resolution purposes, in line with the retention periods set out in the “Data Retention” section below.

Campaign Data:

When you use our services to run marketing or advertising campaigns, we may collect and process campaign-related data, including performance metrics such as click-through rates, conversion rates, audience engagement, attribution data, and related reporting information. This helps us evaluate and improve campaign performance.

Lead Generation Data:

For services aimed at generating leads, we may collect and process data relating to lead enquiries, such as contact details, service interests, communication history, form submissions, and demographic or business information that is relevant to your campaign objectives.

Account and Platform Data:

Where our services include access to a platform, portal, CRM, or system environment, we may collect account credentials, login history, permissions, activity logs, user preferences, and records relating to account usage.

Project Data:

Where relevant, we may collect and process documents, creative briefs, system specifications, website content, media assets, integration details, and project communications required to deliver our services.

(b) Personal Data We Collect Automatically From You and/or Your Device

Location Information:

When you use our Services, we may infer your general location information, for example by using your internet protocol (IP) address.

Device Information:

We may receive Personal Data about the device and software you use to access our Services, including IP address, browser type, operating system, device type, device identifiers, screen resolution, language settings, and other technical information.

Usage Information:

We may receive Personal Data about your interactions with our Services, such as the pages you view, the content you access, the actions you take, the links you click, the features with which you interact, referral URLs, and the dates and times of your visits.

Information from Cookies and Similar Technologies:

We and our third-party partners may collect information using cookies, pixel tags, scripts, SDKs, or similar technologies. These technologies may collect information about your online activities over time and across different services. Cookies are small text files containing a string of alphanumeric characters. Where the term “Cookies” is used in this Policy, this includes similar technologies where applicable.

We may use both session cookies and persistent cookies. A session cookie disappears after you close your browser. A persistent cookie remains after you close your browser and may be used during subsequent visits to our Services.

The information collected through cookies may include unique identifiers, system information, IP address, browser type, device type, pages visited before or after visiting our Services, usage activity, and the date and time of access.

Strictly Necessary Cookies:

Some cookies are strictly necessary to make our Services available to you, for example to support navigation, security, form submissions, user authentication, load balancing, and bot protection. We may not be able to provide certain aspects of our Services without these cookies.

Analytics Cookies:

We may use analytics cookies to understand website and platform performance, user behaviour, and engagement patterns, and to operate, maintain, and improve our Services. We may use our own analytics tools or third-party providers such as Google Analytics. Google Analytics helps us understand how visitors engage with our Services. You can learn more about how Google processes data through its own privacy materials.

Marketing Cookies:

We and our third-party partners may use cookies and similar technologies to help deliver advertising that is more relevant to your interests, to measure campaign effectiveness, and to show you advertising on websites that are not owned or operated by us.

(c) Personal Data We Collect from Third Parties

Information from Third Parties:

We may collect publicly available information from third-party websites, platforms, directories, advertising channels, integrations, and other lawful sources where relevant to our services, business operations, research, training of internal systems, or client project delivery.

Third-Party Logins and Integrations:

If you choose to register or log in to our Services using a third-party account, or connect third-party platforms and integrations, we may receive Personal Data about you from those services, such as your name, email address, profile image, username, integration metadata, or other information that you authorise them to share with us.

In some cases, we need to collect Personal Data to provide our Services. If you choose not to provide requested Personal Data, you may not be able to use some or all of our Services. Where required, we will tell you if providing Personal Data is necessary by law or under a contract and what the consequences of not providing that information may be.

Purposes and Legal Basis for Processing

Depending on where you are located, we will only process your Personal Data where we have a valid legal basis to do so. The purposes for which we process Personal Data and the legal grounds we rely on may include the following:

Providing the Services

We may process your Personal Data to provide the Services you request from us, including websites, system builds, CRM setup, automation, marketing support, AI services, onboarding, and related support.

Legal basis: Processing is necessary for entering into, or performance of, a contract.

Personalising Your Experience

We may process your Personal Data to personalise your experience when you access our Services, including suggesting features, services, or content that may be relevant to you.

Legal basis: Legitimate interests.

Communicating with You

We may process Personal Data to communicate with you, provide updates, respond to your comments and questions, send service notices, and share information you request.

Legal basis: Contractual necessity and/or legitimate interests.

Billing, Direct Debit Collection, and Accounting

We may process Personal Data, including bank account details, to set up and manage Bacs Direct Debit mandates via Stripe, handle payments, invoicing, subscriptions, refunds where applicable, and accounting records.

Legal basis: Contractual necessity and legal obligation.

Preventing Fraud

We may process Personal Data to protect against fraud, abuse, unauthorised access, malicious activity, and other illegal or harmful conduct.

Legal basis: Legitimate interests.

Safety and Security

We may process Personal Data to safeguard our platform, website, clients, users, systems, and business operations.

Legal basis: Legitimate interests.

Providing Technical Support

We may use Personal Data to provide technical support, diagnose issues, investigate reported problems, and resolve service-related matters.

Legal basis: Contractual necessity.

Understanding Usage

We may process Personal Data to understand how our Services are used, identify trends and preferences, improve user experience, repair errors, and develop new products, services, features, and functionality.

Legal basis: Legitimate interests.

Aggregated Data Generation

We may process Personal Data to create anonymised, pseudonymised, or aggregated datasets for lawful business purposes, such as internal reporting, planning, service development, case study analysis, or benchmarking.

Legal basis: Legitimate interests.

Administrative and Legal Matters

We may use Personal Data to address legal, regulatory, contractual, administrative, brand protection, intellectual property, rights of privacy, misuse of services, or dispute-related matters, and to establish, exercise, or defend legal rights.

Legal basis: Legitimate interests and/or legal obligation.

Compliance

We may process Personal Data for compliance with legal obligations to which we are subject, including tax, accounting, anti-fraud, court orders, regulatory requirements, and law enforcement requests.

Legal basis: Legal obligation.

Research and Development of AI, Automation, and Systems

We may process Personal Data to research, test, develop, improve, and maintain AI-supported tools, automation systems, workflows, and related services, subject to applicable law and client agreements.

Legal basis: Legitimate interests, contractual necessity, or consent where required.

Other Purposes

If we intend to use Personal Data for a purpose not described in this Policy, we will provide additional notice where required.

Legal basis: As specified in the relevant notice.

Where we rely on legitimate interests, we do so only where we believe those interests are not overridden by your rights and freedoms. You may have the right to object to such processing in certain circumstances.

Data Recipients

Your Personal Data may be shared with:

Affiliates:

We may share Personal Data with our current or future affiliated businesses for purposes consistent with this Privacy Policy and where lawful to do so.

Vendors and Service Providers:

We may share Personal Data with third-party vendors and service providers who assist us with services such as website hosting, cloud infrastructure, CRM systems, data storage, payment processing, analytics, communications, customer support, ad platforms, software integrations, security, auditing, and IT support.

Other Users or Third Parties at Your Direction:

We may share Personal Data with other users, team members, contractors, or third parties where you instruct or authorise us to do so. For example, where you request collaboration access, account sharing, or consent to be featured as a case study or testimonial.

As Required by Law:

We may access, preserve, and disclose Personal Data if we believe doing so is required or appropriate to comply with the law, legal process, regulatory obligations, law enforcement requests, or to protect rights, property, safety, or security.

Corporate Transactions:

We may disclose Personal Data in connection with a merger, acquisition, financing, due diligence, reorganisation, asset sale, or other corporate transaction, subject to appropriate confidentiality measures.

With Your Consent:

We may also disclose your Personal Data where you have given us consent to do so.

Payment Processors

We use Stripe Payments UK Ltd to process payments, including Bacs Direct Debit collections, on our behalf. Stripe acts as a data processor for this purpose. When you provide your bank details to set up a Direct Debit, that information is transmitted directly to Stripe’s secure systems, and Stripe handles the collection of payments in accordance with the Bacs Direct Debit scheme rules and the Direct Debit Guarantee. For more information on how Stripe handles your data, see Stripe’s privacy policy at stripe.com/gb/privacy.

Data Transfers

Our Services and those of our providers may involve storage or processing of Personal Data outside the United Kingdom. In particular, some infrastructure, software providers, and support tools — including Stripe — may operate from or store data in countries including the United States and other jurisdictions.

If you are located in the UK, EEA, or Switzerland, and we transfer your Personal Data internationally, we will take steps designed to ensure that appropriate safeguards are in place. These may include reliance on adequacy regulations, standard contractual clauses, or other lawful transfer mechanisms recognised under applicable data protection law.

For more information about international transfers or the safeguards we use, you may contact us using the details in the “Contact Us” section below.

Data Retention

We take steps to delete Personal Data or keep it in a form that does not permit identification when that information is no longer necessary for the purposes for which we process it, unless we are required or permitted by law to retain it for longer.

When determining retention periods, we consider factors such as the type of service provided, the nature of our relationship with you, contractual obligations, legal requirements, dispute resolution needs, security considerations, and applicable limitation periods.

Where required for accounting, tax, and legal purposes, including records relating to Direct Debit mandates and payment collection, we may retain relevant records for up to 6 years or longer where legally necessary.

Your Rights

Depending on where you are located, you may have rights regarding the Personal Data we hold about you and choices about how we collect, use, and communicate with you.

These rights may include:

• the right to request access to the Personal Data we hold about you
• the right to request correction of inaccurate or incomplete data
• the right to request deletion of your Personal Data
• the right to object to or restrict certain processing
• the right to request portability of your data
• the right to withdraw consent where processing is based on consent
• the right to lodge a complaint with a relevant supervisory authority

You may request access to, correction of, or deletion of Personal Data by contacting us using the details below. Where you maintain an account with us, some information may also be accessible or editable through your account or platform settings.

You may opt out of marketing emails at any time by using the unsubscribe link in the email or by contacting us directly.

Please note that even if you opt out of promotional communications, we may still send service-related or administrative messages where necessary, including notices relating to your Direct Debit mandate and payment collection.

Before fulfilling certain requests, we may ask you to verify your identity. Applicable law may provide for exceptions and limitations to these rights.

To exercise your rights, please contact:

Email: info@contengro.com

Your Cookie Choices

Depending on your location, you may be asked to provide consent for our use of non-essential cookies.

You may also manage your cookie preferences through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that blocking some cookies may affect the functionality of our Services.

If we use Google Analytics or similar tools, you may also be able to use relevant opt-out tools made available by those providers.

If we work with third-party advertising partners, you may be able to opt out of certain personalised advertising through settings offered by your browser, device, or those third parties.

Cookie Policy

This Cookie Policy explains how Contengro Group Ltd (“we”, “us”, or “our”) uses cookies and similar technologies on contengro.com (the “Website”).

By using our Website, you agree to the use of cookies in accordance with this policy, unless you disable them via your browser or preferences.

Cookies are small text files stored on your device when you visit a website. They help websites function properly, improve user experience, and provide insights into how the website is used.

Types of Cookies We Use

Strictly Necessary Cookies

These cookies are essential for the operation of our Website. They enable core functionality such as:

• Page navigation
• Security features
• Form submissions
• Protection against fraudulent activity

Without these cookies, the Website may not function correctly.

Analytics Cookies

These cookies help us understand how visitors interact with our Website. They may collect information such as:

• Pages visited
• Time spent on pages
• Traffic sources
• User behaviour

We may use tools such as Google Analytics to analyse this data and improve our services.

Marketing Cookies

These cookies are used to:

• Deliver relevant advertising
• Measure campaign performance
• Track user interactions across websites

They may be set by us or by third-party advertising partners.

Third-Party Cookies

We may allow third-party services to place cookies on your device, including:

• Analytics providers
• Advertising platforms
• CRM and tracking systems

These providers have their own privacy and cookie policies.

How to Manage Cookies

You can control and manage cookies in several ways:

• Adjust your browser settings to block or delete cookies
• Use cookie preference tools on our website (where available)

Please note: disabling cookies may impact the functionality of our Website.

Legal Basis for Using Cookies

We use cookies based on:

• Consent (for analytics and marketing cookies)
• Legitimate interest (for essential cookies required for website functionality)

Where required, we will request your consent before placing non-essential cookies.

Updates to This Policy

We may update this Cookie Policy from time to time. Any changes will be posted on this page.

Third Parties

Our Services may contain links to third-party websites, products, or services that we do not own or operate. We are not responsible for the privacy practices of those third parties. This Privacy Policy does not apply to your activities on third-party sites or services. We encourage you to review their privacy policies before providing any information.

Security

We implement reasonable technical and organisational measures designed to protect Personal Data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.

These measures may include access controls, encryption where appropriate, secure cloud infrastructure, authentication processes, monitoring, and internal procedures designed to support security and confidentiality.

However, no method of transmission over the internet or method of electronic storage is completely secure. To the extent permitted by law, we cannot guarantee absolute security.

Where appropriate for particular client projects or higher-risk processing, we may carry out Data Protection Impact Assessments (DPIAs) as part of our compliance and risk review processes.

Children’s Privacy

Our Services are not directed to children under the age of 18, and we do not knowingly collect, maintain, or use Personal Data from children under 18 years of age. If you believe that a child has provided us with Personal Data, please contact us so that we can take appropriate action.

Updates to this Policy

We may periodically update this Privacy Policy to reflect changes in our practices, technologies, legal requirements, or other operational reasons. Where required by law, we will notify you of material changes in an appropriate manner.

Any updated version will be posted on this page with a revised effective date.

Contact Us

For any questions regarding this Policy, or to exercise your rights, please contact:

Contengro Group Ltd Grosvenor House 3 Chapel Street Congleton Cheshire CW12 4AB

Email: info@contengro.com Phone: 0161 327 5033

Additional Information: U.S. States

If you are a resident of certain U.S. states, there may be additional disclosures and rights available to you under applicable state privacy laws. The exact rights available will depend on the state in which you reside.

Sale of Personal Data, Sharing for Cross-Context Behavioural Advertising, and Targeted Advertising

When we share Personal Data through marketing cookies or with vendors that provide advertising services, that may be considered a “sale”, “sharing”, or processing for targeted advertising under certain U.S. state laws.

You may be able to opt out of such processing by adjusting cookie preferences, using browser-based privacy tools, or contacting us at:

info@contengro.com

The categories of Personal Data that may be processed for targeted advertising may include:

• Online identifiers, such as IP address
• Cookie identifiers
• Device identifiers
• Browsing and usage data

These categories may be disclosed to advertising vendors, analytics providers, or parties involved in a corporate transaction where lawful.

We do not knowingly sell or share the Personal Data of individuals under the age of 16.

Do Not Track:

Our website may not be configured to respond to browser “Do Not Track” signals.

Deidentified Information:

Where we process deidentified information, we will take reasonable measures to maintain it in deidentified form and not attempt to reidentify it except where permitted by law.

Sensitive Personal Information:

Where relevant U.S. laws apply, we may process limited categories of information that could be considered sensitive where necessary to provide services, maintain security, comply with law, or as otherwise permitted.

Your U.S. Privacy Rights

Depending on applicable law, you may have rights such as:

• the right to know what Personal Data we collect and how we use it
• the right to request deletion
• the right to correct inaccurate data
• the right to opt out of targeted advertising or certain sharing
• the right to appeal a decision on a privacy request
• the right not to be discriminated against for exercising your rights

To exercise such rights, contact:

info@contengro.com

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for operational, legal, or regulatory reasons. Any changes will be posted on this page, and the revised Privacy Policy will be effective from the updated date shown above.

By using our Website or Services, you acknowledge that you have read and understood this Privacy Policy.