Privacy Policy

Last updated: 31 October 2026

1. Introduction

SourceSignal (“we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you use our website and services.

2. Information We Collect

We may collect personal information that you provide directly to us, such as your name, email address, organisation name, and billing information when you create an account or purchase a subscription.

We also automatically collect certain information about your use of the Service, including IP addresses, browser type, pages visited, and interaction data, through cookies and similar tracking technologies as described in our Cookie Banner.

3. How We Use Your Information

We use the information we collect to:

Provide, operate, and maintain our Service
Improve, personalise, and expand our Service
Communicate with you, including for customer service
Send you marketing and promotional communications
Prevent, detect, and investigate potentially illegal activities

4. Sharing Your Information

We do not sell or rent your personal information to third parties. We may share your information with service providers who perform services on our behalf, such as payment processing (Stripe), email delivery, and data hosting. These service providers are permitted to use your data only as necessary to perform services for us.

5. Data Storage and Security

Your personal information is stored securely in our database. We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction, including encryption of data in transit and at rest, access controls, and regular security reviews.

No method of transmission over the internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of enforcing our agreements, resolving disputes, and complying with legal obligations. When you request deletion, we will delete your personal data unless we are required to retain it by law.

7. Your Rights (UK GDPR)

You have the right to:

Access the personal information we hold about you
Correct inaccurate or incomplete personal information
Delete your personal information (the “right to be forgotten”)
Object to or restrict our processing of your data
Receive your personal information in a portable format
Withdraw consent at any time, where processing is based on consent

To exercise these rights, or to request deletion of your account and all associated data, please contact us at privacy@sourcesignal.example. We will respond to requests within one month.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our Service and hold certain information. Cookies are files with a small amount of data that may include an anonymous unique identifier. You may refuse to accept cookies by activating the setting on your browser that allows you to refuse the setting of cookies. However, if you select this setting you may be unable to access certain parts of our Service. For more information, see our Cookie Banner on the website.

9. Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include encryption of data in transit using TLS, access controls, and regular security reviews. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

10. International Data Transfers

Your personal information may be transferred to, stored, and processed in countries other than the United Kingdom, including the United States (e.g., via Stripe for payment processing). Where we transfer your data outside the UK, we ensure appropriate safeguards are in place, such as standard contractual clauses or reliance on adequacy decisions.