Privacy Policy

This Privacy Policy explains how Core70 collects, uses, and protects personal data when you visit our website (core70.com) or submit information through our contact forms. It is written to comply with the UK GDPR, the EU GDPR, and similar data protection regulations.

Core70 is a brand and trading name of Shinetech Software, a global software services company. This policy covers data we collect through the core70.com website. It does not cover the separate contractual data processing arrangements that apply once you become a Core70 client — those are governed by your Master Services Agreement and a separate Data Processing Agreement, available on request.

1. Who we are

The data controller for personal data collected through this website is:

Shinetech Software (a Singapore-headquartered group of companies operating the Core70 brand)
Contact: hello@core70.com

For data protection matters concerning EU or UK residents, our UK operating entity (Shinetech Software UK Ltd) acts as our primary point of contact within the UK and can be reached at the same address.

2. What personal data we collect

We collect personal data in two ways:

2.1 Data you provide directly

When you submit a contact form on our website, we collect:

• Your name
• Your email address
• Your phone number (optional)
• The content of your message (which may include details about your business, your project, and your team)

2.2 Data collected automatically

When you browse our website, we automatically collect:

• Technical data via Google Analytics 4 (anonymised IP address, browser type, operating system, device type, referring URL, pages visited, time spent on pages)
• Advertising data via Google Ads (conversion events, click identifiers if you arrived from a paid advertisement)

We do not use behavioural advertising trackers, social-media pixels, or third-party advertising networks beyond Google Ads.

3. Why we process your data, and our legal basis

We process personal data on the following legal bases under UK GDPR Article 6 and EU GDPR Article 6:

3.1 Responding to enquiries

Purpose: To respond to your contact form submission, schedule introductory conversations, and provide information about our services.
Legal basis: Legitimate interest (UK GDPR Article 6(1)(f)) — specifically, our interest in responding to people who have actively contacted us about our services. You can object to this processing at any time by emailing us; we will then delete your enquiry data.

3.2 Website analytics

Purpose: To understand how visitors use our website so we can improve content and identify which pages are useful.
Legal basis: Legitimate interest (UK GDPR Article 6(1)(f)) — our interest in operating an effective website. We use Google Analytics with IP anonymisation enabled.

3.3 Advertising performance

Purpose: To measure the performance of paid advertising campaigns (Google Ads) and improve them.
Legal basis: Legitimate interest (UK GDPR Article 6(1)(f)).

4. Who we share data with

We do not sell personal data. We share limited personal data with the following categories of recipients:

• Formspree (form processing service, US-based) — receives contact form submissions and forwards them to us by email.
• Google (Google Analytics, Google Ads) — receives anonymised analytics and advertising data.
• Netlify (US-based) — hosts our website. Receives standard web server log data.
• Our internal team — sales and account managers at Core70 / Shinetech who follow up on your enquiry.

All third-party processors operate under their own data protection terms, which we have reviewed for adequacy. We do not authorise them to use your data for their own marketing.

5. International data transfers

Core70 operates internationally. Your personal data may be transferred to and processed in:

• Singapore — our headquarters
• United Kingdom — Shinetech UK Ltd
• United States — Formspree (form processor), Google (analytics, ads), Netlify (hosting)
• China — our Operations Center, only when relevant to a client engagement you initiate

Where data is transferred outside the UK or EEA, we rely on appropriate safeguards including the UK International Data Transfer Agreement, EU Standard Contractual Clauses, or adequacy decisions where they exist. For client engagements specifically, additional safeguards are addressed in our Data Processing Agreement.

6. How long we keep your data

• Contact form submissions: Retained for up to 24 months after our last meaningful exchange with you, then deleted, unless we have a continuing business relationship or a specific legal obligation to retain longer.
• Website analytics data: Retained according to Google Analytics 4 default settings (currently 14 months) and then automatically deleted.
• Advertising data: Retained according to Google Ads default settings.

If you ask us to delete your data earlier, we will do so (see Section 7).

7. Your rights

Under UK GDPR and EU GDPR, you have the following rights regarding your personal data:

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — ask us to correct inaccurate or incomplete data
• Right to erasure ("right to be forgotten") — ask us to delete your data, subject to exceptions
• Right to restrict processing — ask us to stop processing your data while a question is resolved
• Right to data portability — receive your data in a portable format
• Right to object — object to processing based on legitimate interest
• Right to withdraw consent — where processing is based on consent, you can withdraw it at any time
• Right to complain — see Section 9

To exercise any of these rights, email hello@core70.com. We will respond within one month (extendable to three months for complex requests, with notice).

8. Cookies and tracking

Our website uses a small number of cookies and similar technologies:

• Google Analytics (GA4) — sets analytics cookies (_ga, _ga_*) to measure visitor behaviour. IP anonymisation is enabled.
• Google Ads — sets conversion-tracking cookies if you arrive from a paid advertisement.

We do not use marketing cookies from social media platforms, retargeting pixels, or third-party advertising networks beyond Google Ads. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on, and you can manage Google advertising cookies via your Google Ad Settings.

9. Complaints

If you believe we have not handled your data appropriately, please contact us first at hello@core70.com — we will investigate and respond. We aim to acknowledge complaints within 30 days.

You also have the right to complain directly to a supervisory authority:

• United Kingdom: Information Commissioner's Office (ICO) — ico.org.uk
• European Union: Your local national data protection authority
• Other regions: Your relevant data protection regulator

10. Automated decision-making

We do not use automated decision-making or profiling that produces legal or similarly significant effects on you.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you directly. The current version is always available at core70.com/privacy.