Privacy Policy

This Privacy Policy explains how Migr8 ("we", "us", or "our") collects and uses information when you visit our website, use our dashboard, or interact with our services. We provide regulatory monitoring and compliance information for businesses trading between the United Kingdom and the European Union.

We act as the controller of personal information processed through the service. This policy applies to the website, the web dashboard, and any companion mobile application that links to this policy.

Depending on how you use the service, we may collect:

• Account details, such as your email address and authentication records.
• Business details and product information that you choose to enter for monitoring or HS code matching.
• Subscription and transaction details. Payment card information is handled by our payment provider and is not stored by us.
• Support messages and other information you provide when contacting us.
• Technical information, such as IP address, browser type, device information, and service activity logs.
• Marketing and attribution information, such as the page visited, referral information, campaign parameters (including UTM parameters), and interactions such as selecting a plan or starting checkout.

We do not intentionally collect sensitive personal data unless you choose to include it in a message or submission. Please do not submit information that is not needed to use the service.

We use information to:

• Provide, operate, and maintain the service and your account.
• Deliver regulatory alerts, summaries, and other requested features.
• Process subscriptions, payments, and customer support requests.
• Authenticate users, prevent misuse, and protect the security of our systems.
• Understand usage, troubleshoot issues, and improve the service.
• Measure the effectiveness of our LinkedIn advertising and understand whether campaign visitors progress through our website and subscription funnel.
• Meet legal, regulatory, accounting, and record-keeping obligations.

We do not sell personal information. We do not use account or business information to make decisions about your eligibility for credit, employment, housing, or insurance.

Where UK or EU data protection law applies, we process personal information where it is necessary to perform our contract with you, where we have a legitimate interest in operating and improving the service, where you have given consent, or where processing is required by law. When we rely on consent, you may withdraw it at any time; this does not affect processing that took place before withdrawal.

We share information only when needed to provide the service, comply with the law, or protect our rights. This may include trusted providers for hosting and databases, authentication, payments, email or mobile notifications, analytics, and infrastructure security. These providers may process information only under our instructions and subject to appropriate confidentiality and security obligations.

We may also disclose information to professional advisers, law enforcement, regulators, or a successor to all or part of our business where legally permitted or required. We do not disclose your information to advertisers for their independent marketing purposes, and we do not sell personal information.

We use the LinkedIn Insight Tag supplied by LinkedIn to measure advertising performance and website conversions. When the tag is enabled, LinkedIn may receive information such as the page URL, referring URL, IP address, browser and device characteristics, timestamp, and actions taken on our website. LinkedIn may use this information in accordance with its own privacy terms, including to provide aggregated campaign reporting and, where enabled by LinkedIn, audience measurement.

We do not intentionally send names, email addresses, Supabase authentication details, Stripe identifiers, payment information, invoice contents, product descriptions, or commodity classifications to LinkedIn as custom conversion metadata. You can read the LinkedIn Privacy Policy for more information about how LinkedIn processes data.

Some service providers may process information in countries outside the UK or European Economic Area. When this happens, we use an appropriate legal safeguard, such as an adequacy decision or approved contractual clauses, and take reasonable steps to protect the information.

We keep personal information only for as long as it is needed for the purposes described here, including to provide the service, resolve disputes, enforce agreements, and meet legal requirements. We use reasonable technical and organisational measures to protect information, including access controls and encrypted connections. No internet service can be guaranteed to be completely secure, so please use a strong password and notify us promptly if you believe your account has been compromised.

Subject to applicable law, you may ask us to access, correct, update, delete, or restrict the processing of your personal information. You may also object to processing based on legitimate interests, request a portable copy of certain information, and withdraw consent where processing is based on consent.

To exercise a right, contact us using the contact details published on this website. We may need to verify your identity before responding. You also have the right to complain to the data protection authority in the country where you live or work, or where you believe a breach occurred.

We use essential cookies and similar technologies where needed to keep you signed in, secure the service, and remember your preferences.

We also use the LinkedIn Insight Tag as a non-essential advertising measurement technology. It helps us understand visits and conversion actions associated with LinkedIn campaigns, including article visits, product-interest interactions, plan selections, and checkout starts. LinkedIn may set or read cookies and use similar device technologies when the tag loads. The tag is not the source of truth for subscription access or payment processing.

Where campaign parameters are present in the address of the page you first visit, we may store the UTM source, medium, campaign, content and term, together with the landing path and capture time, in your browser's local storage. This first-touch record is used for campaign attribution and does not include information entered into Migr8 forms.

You can restrict or delete cookies and local storage through your browser settings and manage advertising preferences through LinkedIn. Blocking these technologies may limit our ability to measure campaign performance but will not prevent you from using the core service. More detail is available in LinkedIn's Cookie Policy.

The service is intended for businesses and is not directed to children. We do not knowingly collect personal information from anyone under the age of 13, or the higher minimum age required in the relevant jurisdiction. If you believe a child has provided us with personal information, please contact us so that we can remove it.

We may update this Privacy Policy from time to time to reflect changes to the service, the law, or our practices. We will post the updated version on this page and update the effective date. If a change is material, we will provide any additional notice required by law.