Privacy Policy

Armstrong Laing Group Limited (trading as FunnelCore) is committed to protecting your personal data. This policy explains what we collect, why we collect it, and what your rights are.

1. Who we are

The data controller is Armstrong Laing Group Limited, registered in England and Wales, trading as FunnelCore. Our registered address is 40 Water Street, Birkenhead, United Kingdom, CH41 5ED.

Contact us about data matters at: support@funnelcore.io

2. Data we collect

When you make a purchase or interact with funnelcore.io, we may collect the following personal data:

• Name and email address (provided at checkout)
• Billing address and payment information (processed securely by Shopify Payments — we do not store card details)
• Order history and download activity
• IP address, browser type, and device information (collected automatically via Shopify and analytics tools)
• Any information you voluntarily provide when contacting our support team

We do not collect sensitive personal data such as racial or ethnic origin, health data, or financial account numbers beyond what is necessary to process payments.

3. How we use your data

We use your personal data for the following purposes:

• Processing and fulfilling your order, including delivering download links by email
• Sending order confirmation and support communications
• Responding to customer service enquiries
• Preventing fraud and maintaining the security of our store
• Complying with legal obligations (e.g. tax records)
• Improving our website and products through anonymised analytics

We do not sell your personal data to third parties. We do not use your data for automated decision-making or profiling.

4. Legal basis for processing

We process your personal data on the following legal bases under UK GDPR:

• Contract performance — processing your order and delivering your purchase.
• Legal obligation — retaining financial records as required by UK law.
• Legitimate interests — fraud prevention, website security, and improving our products.
• Consent — sending marketing emails, where you have opted in. You may withdraw consent at any time.

5. Who we share data with

We share your data only with trusted third-party service providers who help us operate our store:

• Shopify Inc. — our ecommerce platform and payment processing infrastructure. Shopify is certified PCI DSS Level 1 compliant. Shopify Privacy Policy
• Email delivery providers — used to send order confirmations and support replies.
• Analytics providers — anonymised traffic data only (no personally identifiable information).

All third parties are required to handle your data in accordance with applicable data protection law. We do not transfer your data outside the UK or EEA without appropriate safeguards in place.

6. How long we keep your data

• Order and transaction records: 7 years (required by UK tax law)
• Customer support communications: 2 years from the date of last contact
• Marketing consent records: until you withdraw consent or request deletion
• Analytics data: as per our analytics provider's retention policy (anonymised)

7. Cookies

Our website uses cookies to function correctly and improve your experience. These include:

• Essential cookies — required for the shopping cart, checkout, and session management. These cannot be disabled.
• Analytics cookies — used to understand how visitors use our site. You can opt out via your browser settings.
• Preference cookies — remember your settings and choices across visits.

You can manage cookies through your browser settings at any time. Disabling essential cookies may prevent checkout from functioning correctly.

8. Your rights

Under UK GDPR, you have the following rights regarding your personal data:

• Right of access — request a copy of the personal data we hold about you.
• Right to rectification — ask us to correct inaccurate or incomplete data.
• Right to erasure — request deletion of your data, subject to legal retention requirements.
• Right to restrict processing — ask us to limit how we use your data in certain circumstances.
• Right to data portability — receive your data in a structured, machine-readable format.
• Right to object — object to processing based on legitimate interests or for direct marketing.
• Right to withdraw consent — withdraw consent for marketing at any time with no penalty.

To exercise any of these rights, email us at support@funnelcore.io. We will respond within 30 days.

9. Contact & complaints

For any data protection queries, contact us at support@funnelcore.io or write to us at 40 Water Street, Birkenhead, United Kingdom, CH41 5ED.

If you are not satisfied with our response, you have the right to lodge a complaint with the UK's data protection authority:

Last updated: May 2025 · Armstrong Laing Group Limited (trading as FunnelCore) · Registered in England and Wales