Privacy policy
This explains what personal information Coretonomy handles, why, who else sees it and what you can ask us to do about it. It covers two different things: this website, and Compass, the order-capture app we build for wholesalers.
Last updated 21 September 2026.
Who we are
Coretonomy Ltd, Unit 1 Kemble Business Park, Crudwell, Wiltshire SN16 9SH. Registered in England and Wales, company number 12377485. You can reach us at enquiries@coretonomy.com or 01285 655455.
For this website, we are the data controller. For information inside a customer’s Compass app or commerce platform we are usually a processor acting for that customer — the section on Compass below explains the difference and why it matters to you.
This website
When you contact us
Our enquiry form asks for your name, company, email address and your message. We use them to reply to you and, if it goes further, to discuss work with you. The legal basis is our legitimate interest in responding to people who ask us to.
The form is delivered by Web3Forms, a third-party form service, which receives what you submit and passes it to us by email. We keep enquiry correspondence for as long as it is useful to the relationship, and review it periodically.
Analytics and cookies
We use Google Tag Manager to load measurement tags, which set cookies and collect information about how pages are used — for example which pages were visited and which links were clicked. We use it to understand what is useful on the site and whether our marketing works.
You can block or delete cookies in your browser, and doing so will not stop you using the site. Google’s own privacy information explains what it collects through these tags.
Hosting
This site is hosted on Microsoft Azure, which keeps standard server logs including IP addresses, for security and reliability.
The Compass app
Compass is a business application issued by a company — a merchant — to its own sales staff, who use it to take trade orders at exhibitions, in showrooms and on customer visits. Two different groups of people appear in it, and the distinction decides who you should talk to:
- Users — the merchant’s staff, who sign in with an account their employer created for them.
- Buyers — the merchant’s trade customers, whose contact and account details appear in the app so an order can be placed for them.
For buyer information the merchant is the data controller and we act as their processor. The information originates in the merchant’s own systems and we handle it on their instructions. If you are a buyer and want to know what is held about you, or want it corrected or erased, contact the merchant you trade with — they can action it, and we support them in doing so.
What the app holds
About buyers, supplied by the merchant from their own records: name, company, email address and telephone number; delivery and billing addresses; trade account information such as credit terms, balance, invoices and items on back order; order history; orders placed through the app, including any notes a rep adds; and a signature, where a buyer signs to approve an order.
About the merchant’s staff: the account their employer issued, and an identifier for the device generated by the app. The app also collects crash reports and technical diagnostics.
What we do with it
Only what the app is for: showing a rep the catalogue, prices and stock for the merchant they work for; letting them place an order on a buyer’s account; signing up a new buyer at a trade stand, where the merchant’s configuration allows it; sending completed orders to the merchant’s commerce platform and on to their ERP; and keeping the app working.
We do not sell personal information, and we do not share it with advertisers or data brokers. Compass contains no advertising software and does not track you across other apps or websites.
Where it goes
Orders and newly captured buyers go to the merchant’s own commerce platform and from there to their ERP — their data returning to them. Crash reports and technical events go to Sentry, our error-reporting provider, and deliberately carry no personal information: the app removes it before sending, both by stripping fields named for personal information whatever they contain, and by removing anything that looks like an email address or a long number wherever it appears, including inside error messages. We keep only record identifiers, which let us trace a failure without knowing whose order it was. We do not record sessions and do not capture screens.
How it is protected, and why it is on the device at all
Compass is built to work with no connectivity, because trade shows have bad signal. To do that it keeps a copy of the catalogue, and of the buyer records a rep needs, on the device. Application data on the device is stored in an encrypted database, with the key generated on the device and held in the operating system’s own secure keystore. All communication uses HTTPS.
A device that is lost still holds information until it is wiped. That is why the database is encrypted, and why merchants should use device management to enforce a passcode and enable remote wipe on any device Compass is installed on.
Permissions
Compass asks for access to the camera, to scan product barcodes. Images are decoded on the device and are never stored or transmitted. It does not request location, contacts, photo library or microphone access.
International transfers
Some of the providers above operate outside the UK. Where personal information is transferred internationally we rely on the safeguards those providers offer, such as the UK addendum to the EU standard contractual clauses.
Your rights
If you are in the UK or EU you have rights over information about you: access, correction, erasure, restriction, portability and objection.
- Website enquiries and general questions — contact us at enquiries@coretonomy.com.
- Buyers — contact the merchant you trade with. They control the information and can action your request; we assist them.
- A merchant’s staff — contact your employer, who issued your account.
You can also complain to the Information Commissioner’s Office at ico.org.uk.
Children
Our website and our software are for businesses. They are not directed at children and we do not knowingly collect information about them.
Changes
We update this policy when what we handle changes, and we change the date at the top when we do. If you want to raise anything in it with us, email enquiries@coretonomy.com.