Privacy Policy
We designed NitroSearch to need as little of your data — and your shoppers’ data — as possible. This is how we handle what we do process.
Last updated 2026-07-26
Who we are
NitroSearch is operated by NitroSearch , a sole trader based in England & Wales, United Kingdom , business address Busbridge Gardens, Godalming, Surrey, GU7 1XQ, United Kingdom . We are the controller of the personal data described here. For any privacy question, contact [email protected].
This website is cookieless
Our marketing website sets no tracking cookies and runs no third-party analytics or advertising scripts — which is why you saw no consent banner. Your light/dark theme preference is stored locally in your browser (not a cookie, and never sent to us). The only cookie our systems ever set is a strictly-necessary security cookie inside the signed-in customer app, which is exempt from consent.
What we collect, and why
- Account data (name, email, password hash, plan) — to create and secure your account and to contact you about your service. Legal basis: performance of a contract.
- Store catalogue data (product titles, prices, images, stock, categories) — copied to our search engine so we can serve fast search. We process this on your behalf as a processor; you remain the controller. See our Data Processing Addendum.
- Search analytics — cookieless and aggregate (e.g. popular queries, zero-result queries). We do not store shopper personal data, and analytics events carry no shopper identifiers.
- Contact messages — if you use our contact form or email us, we keep your message and email to reply.
Where your data lives
Your data is hosted on secure cloud infrastructure in the United Kingdom and/or European Union. Payments for paid plans are processed by Stripe. The third parties that may process data on our behalf are listed on our Subprocessors page.
How long we keep it
Account and store data are kept for as long as your account is active, and deleted (with the search index reduced to zero) on request or after account closure, subject to any legal retention we’re required to observe. Raw analytics events are pruned on a rolling schedule; only aggregate rollups are retained.
Your rights
Under the UK GDPR / EU GDPR you have the right to access, rectify, erase, restrict, port, and object to processing of your personal data. To exercise any of these, email [email protected]. You also have the right to complain to your local supervisory authority.
Changes
We’ll post any change here and update the date above. Material changes will be communicated to account holders by email.