Privacy notice

Last updated: 12 August 2026. This notice explains how Corravo handles personal information from website enquiries, client projects and relevant business-to-business prospecting.

Who is responsible

Corravo is the controller of the personal information described in this notice. For privacy questions or requests, email [email protected].

Information you provide

When you request a quote, start a project, contact Corravo or complete client onboarding, the information may include your name, role, business name, email address, telephone number, website address, business type, project goals, services, indicative budget, public business details, domain or platform providers, content and asset status, shared-folder links, access readiness, target dates, approvals and the messages you provide.

Do not submit passwords, recovery codes, payment-card information, customer databases or unnecessary personal information through Corravo forms.

Business prospecting information

Corravo may collect limited information about relevant UK businesses and their business contacts. This may include a business name, company number and status, website and social links, published business contact details, a contact's name and role where relevant, public information about the business's services, observations about its website or enquiry journey, the source of the information and a record of contact, replies or opt-out preferences.

Prospecting information is obtained from publicly accessible business sources such as Companies House, the business's own website, public business directories, search-engine business listings and public professional or business social-media pages. Corravo does not buy marketing lists or intentionally collect private, special-category or unrelated personal information for this purpose.

How and why information is used

Enquiries and client work

Information is used to respond to enquiries, prepare quotes and proposals, assess project readiness, plan and deliver agreed services, communicate about the project and maintain necessary business records. The lawful bases are taking steps at your request before a contract, performing a contract, complying with legal obligations and Corravo's legitimate interests in responding to genuine enquiries and administering its work.

Relevant business-to-business outreach

Limited public business information may be used to assess whether Corravo's services are relevant to a corporate business, prepare a specific and proportionate message, manage replies and avoid contacting businesses or people who have opted out. Corravo relies on its legitimate interests in developing relevant commercial relationships and promoting its services to suitable corporate businesses. Corravo balances those interests against the rights and reasonable expectations of business contacts, restricts outreach to relevant business contexts and applies human review before messages are sent.

Service providers and sharing

Information may be processed by providers that support website hosting and forms, transactional email delivery, business email, file storage, project administration, security and professional advice. This includes Cloudflare for website hosting and request handling, Resend for secure form-email delivery and Google Workspace for business email and productivity. Information may also be disclosed where required by law or necessary to establish, exercise or defend legal claims. Corravo does not sell personal information.

International processing

Some service providers may process information outside the United Kingdom. Where required, Corravo uses providers and arrangements that support lawful international transfers, such as UK adequacy regulations or approved contractual safeguards. You can request further information using the contact details above.

How long information is kept

• Enquiries that do not become client work are normally kept for up to 12 months after the last meaningful contact.
• Prospecting records for businesses that do not engage are normally kept for up to six months after the last contact.
• Core client, contract and financial records are normally kept for up to six years after the relevant relationship or accounting period ends.
• Minimal suppression records are kept for as long as reasonably necessary to ensure an opt-out is respected.

Information may be kept for longer where a legal obligation, dispute or security requirement makes this necessary, and deleted sooner when it is no longer needed.

Automated processing and tracking

Corravo may use software to organise and score public business information, but it does not make solely automated decisions that have legal or similarly significant effects on people. Prospecting messages are subject to human review. Corravo does not use tracking pixels in prospecting emails.

Your data protection rights

Depending on the circumstances, you may have rights to access, correct, erase or restrict the use of your personal information, and to object to processing based on legitimate interests. You may also ask Corravo to provide certain information in a portable format where that right applies. To exercise a right, email [email protected]. Corravo may need to verify your identity before acting on a request.

Complaints

Please contact Corravo first so the issue can be reviewed. You also have the right to complain to the Information Commissioner's Office through its complaints service or by calling 0303 123 1113.

Providing information

You are not generally required to provide personal information to Corravo. However, Corravo may be unable to respond fully, prepare a proposal or deliver agreed work if necessary contact or project information is not provided.