Skip to content
    ProsperaCore logo

    Privacy Policy

    Knight eCommerce & Consultancy Ltd, trading as ProsperaCore ("we", "us", or "our"), is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our website and services.

    This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

    1. Data Controller Information

    Company Name: Knight eCommerce & Consultancy Ltd (trading as ProsperaCore)

    Company Number: 16490422 (England & Wales)

    VAT Number: 494638737

    ICO Registration Number: ZB956239

    Contact: Use our contact form

    2. Information We Collect

    2.1 Information You Provide Directly

    When you use our contact form or engage with our services, we may collect:

    • Contact information: Name, email address
    • Professional information: Organisation name, role/position (optional)
    • Service information: Service of interest, enquiry details
    • Communication content: Messages and correspondence you send to us
    • Parental Information: Where a service is intended for family use, we collect the contact details of the parent or guardian as the primary account holder.

    2.2 Information Collected Automatically

    When you visit our website, we may automatically collect:

    • Technical information: IP address, browser type, operating system
    • Usage data: Pages visited, time spent on pages, referral source
    • Device information: Screen size, device type, unique device identifiers

    2.3 Data We Collect From Third-Party Sources

    In addition to data you provide directly, we also collect and process personal data obtained from publicly available and licensed third-party sources. This is disclosed under Article 14 of the UK GDPR, which applies when personal data is not collected directly from you.

    We may collect your name, job title, company name, business address, email address, and telephone number from the following sources:

    • Business directory websites (such as construction.co.uk, Yell, and similar trade directories) where business contact information is publicly listed
    • LinkedIn and professional social media platforms where profile information is publicly visible
    • Companies House (the UK public register of companies), from which we may obtain director names and registered business addresses
    • Purchased or licensed data lists from reputable data providers, where contacts have been collected in compliance with applicable data protection law
    • The business's own website, where contact information is publicly published
    • Google Maps and Google Business Profile listings

    We use this information to identify and contact businesses that may benefit from our services, and to maintain accurate records in our CRM system. Our lawful basis for this processing is Legitimate Interests (Article 6(1)(f) UK GDPR). We have assessed that our interests in conducting business outreach do not override your rights and freedoms, particularly as this activity is directed at businesses and business contacts rather than private individuals.

    We may contact you by email, telephone, or SMS. Telephone numbers are screened against the Telephone Preference Service and Corporate Telephone Preference Service before any marketing call is made.

    You have the right to object to this processing at any time. If you do, we will stop contacting you and remove your details from our systems. See Section 8 — Your Rights Under GDPR for details, or contact us using the details in Section 9 — Exercising Your Rights.

    If we contact you using data sourced from a third party, we will inform you of the source at the point of first contact.

    3. Legal Basis for Processing

    We process your personal data under the following legal bases:

    • Consent: When you submit our contact form or request information
    • Legitimate interests: To improve our website, respond to enquiries, provide requested services, and to identify and contact businesses that may benefit from our services.
    • Legal obligation: To comply with applicable laws and regulations
    • Contract performance: To deliver services you have engaged us to provide

    4. How We Use Your Information

    We use your personal data for the following purposes:

    • Responding to your enquiries and providing customer support
    • Delivering the services you have requested
    • Sending service-related communications and updates
    • Improving our website, services, and user experience
    • Complying with legal and regulatory requirements
    • Protecting against fraud, abuse, and security threats
    • Identifying and contacting businesses that may benefit from our services

    5. Cookies and Tracking Technologies

    5.1 What Are Cookies?

    Cookies are small text files stored on your device when you visit our website. They help us provide a better user experience and understand how our site is being used.

    5.2 Types of Cookies We Use

    Essential Cookies (Required)

    These cookies are necessary for the website to function properly. They enable basic features like page navigation and secure access to areas of the website.

    Analytics Cookies (Optional)

    These cookies help us understand how visitors interact with our website by collecting anonymous information about page visits, traffic sources, and user behavior.

    5.3 Managing Cookies

    You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies or delete existing cookies. However, disabling essential cookies may affect website functionality.

    6. Data Storage and Security

    6.1 Where We Store Your Data

    Your personal data is stored securely using Supabase, a trusted cloud database provider. Data is stored within the European Economic Area (EEA) or in countries with adequate data protection standards.

    6.2 Security Measures

    We implement appropriate technical and organizational measures to protect your data, including:

    • Encryption of data in transit and at rest
    • Secure authentication and access controls
    • Regular security assessments and updates
    • Staff training on data protection
    • Incident response and breach notification procedures

    6.3 Data Retention

    We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, typically:

    • Contact form submissions: Up to 2 years from last contact
    • Service engagement records: Duration of engagement plus 6 years (legal requirement)
    • Marketing communications: Until you withdraw consent
    • Business prospect data obtained from third-party sources: up to 12 months from the date of last contact, unless you become a client or ask us to remove your details sooner, in which case they are removed immediately and added to a suppression list to prevent further contact.

    7. Third-Party Services & Data Processors

    We use the following third-party services to operate our website and deliver our services:

    Supabase (Database & Authentication)

    Used to store contact form submissions securely. Data processing complies with GDPR standards.

    Resend (Email Service)

    Used to send email notifications and confirmations. Only necessary contact information is shared.

    Gumroad (Digital Product Checkout)

    Where you purchase a PDF or other digital product, the transaction is handled by Gumroad, who acts as the merchant of record. Gumroad collects the information needed to process your payment, deliver the file, and meet their own tax and compliance obligations (such as name, email address, billing country, and payment details). ProsperaCore receives only limited order information (such as the product purchased and the buyer's email address) and does not receive full payment card details. Gumroad processes this data as an independent controller under their own terms. For details of how they handle buyer data, see the Gumroad Privacy Policy.

    Brevo (Email Marketing)

    We use Brevo (formerly Sendinblue), operated by Sendinblue SAS, a French company regulated under EU GDPR by the CNIL, to manage our mailing list and send marketing communications. Your name and email address may be stored on Brevo's servers, located within the European Union (France and Belgium). Brevo acts as a data processor under a Data Processing Agreement. You can unsubscribe at any time using the unsubscribe link in any email we send, or by contacting us directly.

    Cloudflare

    Cloudflare protects this website from attacks and filters automated form submissions. It processes visitor IP addresses and browser information for that purpose. Cloudflare operates a global network, so this may take place outside the UK under its standard transfer safeguards.

    Vercel

    Vercel hosts this website. It processes visitor IP addresses and request logs in order to serve pages. Vercel is US-based and transfers are covered by Standard Contractual Clauses and the UK Addendum.

    MoreMins

    Telephone and messaging services for the business number. Where a call or message is made to a customer, that number is handled by MoreMins under its own privacy policy, as MoreMins states that it acts as a data controller in its own right. Data is stored within the UK and EEA. See moremins.com/en/terms-privacy.

    Stripe (Payment Processing)

    We use Stripe to process payments securely. When you make a purchase, your payment details are submitted directly to Stripe and are not stored by us. Stripe is a US-based company and transfers are protected by Standard Contractual Clauses and the EU-US and UK-US Data Privacy Frameworks. Stripe's privacy policy is available at stripe.com/gb/privacy.

    PayPal (Payment Processing)

    We use PayPal as an alternative payment method. When you pay via PayPal, your transaction is processed directly by PayPal and subject to their privacy policy. PayPal is a US-based company and transfers are protected by Standard Contractual Clauses. PayPal's privacy policy is available at paypal.com/uk/legalhub/privacy-full.

    8. Your Rights Under GDPR

    Under UK GDPR, you have the following rights regarding your personal data:

    Right to Access

    You can request a copy of the personal data we hold about you.

    Right to Rectification

    You can request correction of inaccurate or incomplete personal data.

    Right to Erasure ("Right to be Forgotten")

    You can request deletion of your personal data in certain circumstances.

    Right to Restrict Processing

    You can request that we limit how we use your personal data.

    Right to Data Portability

    You can request a copy of your data in a structured, machine-readable format.

    Right to Object

    You can object to processing based on legitimate interests or direct marketing.

    Right to Withdraw Consent

    Where processing is based on consent, you can withdraw it at any time.

    9. Exercising Your Rights

    To exercise any of your data protection rights, please contact us using our contact form, or write to us at infoprosperacore.com. We will respond to your request within one month.

    You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection supervisory authority, if you believe your data protection rights have been violated.

    9a. Data Protection Complaints

    If you have a concern about how we handle your personal data, please use our contact form or write to infoprosperacore.com with the subject line "Data Protection Complaint". We will acknowledge your complaint within 30 days and aim to resolve it without undue delay.

    If you remain unsatisfied, you can escalate to the ICO at ico.org.uk.

    10. Data Sharing and Disclosure

    We do not sell, rent, or trade your personal data. We may share your information only in the following circumstances:

    • With service providers who help us operate our website and deliver services (under strict data processing agreements)
    • When required by law or to protect our legal rights
    • In connection with a business transfer, merger, or acquisition (with notification to affected individuals)
    • With your explicit consent for specific purposes

    11. Children's Privacy

    Our website and services are not intended for children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected information from a child, please contact us immediately so we can delete it.

    12. International Data Transfers

    While we primarily store data within the EEA, some third-party services may process data outside the EEA. In such cases, we ensure appropriate safeguards are in place, such as the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, as issued by the Information Commissioner's Office.

    13. Changes to This Privacy Policy

    We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting a notice on our website or sending you an email. The "Last Updated" date at the bottom of this policy indicates when it was last revised.

    14. Contact Us

    If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

    Use our contact form and select "General Enquiry" or specify "Privacy Enquiry" in your message.

    Last Updated: August 2026

    This Privacy Policy applies to the ProsperaCore website (prosperacore.com) operated by Knight eCommerce & Consultancy Ltd.