The short version
- We only collect personal data you give us directly through the contact form.
- We use it to reply to you and, where you opt in, to send you the 4Cori clinician-led video guide or product updates.
- We don't sell your data, and we don't share it with anyone outside the operational tools we use to run this site.
- You can ask us at any time to see, correct or delete the data we hold on you.
Who we are
4Cori Ltd (“4Cori”, “we”, “us”) is a company registered in England and Wales. We are the data controller for personal information submitted through www.4cori.com. The 4Cori platform application at video.4cori.com is governed by a separate data processing agreement between 4Cori and each enterprise or clinician customer.
For data protection enquiries, write to us at info@4cori.com.
What we collect
- Information you submit through the contact form: your name, email, speciality, practice setting, the message you send us and whether you opted in to receive the 4Cori clinician-led video guide.
- Operational logs from our hosting provider: IP address, browser headers, referrer and timestamps. These are recorded only for site security and reliability.
- Cookies: the marketing site does not currently set analytics or tracking cookies of its own. See our Cookie Policy for detail and for what is likely to change as the site grows.
How we use your data, and why we're allowed to
Under UK GDPR and the Data Protection Act 2018, we need a lawful basis for every use of your data. Ours are:
- To respond to your enquiry. Lawful basis: legitimate interests in running our business and replying to people who get in touch.
- To send you the 4Cori clinician-led video guide, if you submitted your email for the download. Lawful basis: consent. You can withdraw at any time by replying “unsubscribe” or emailing info@4cori.com.
- To send you product updates and marketing about 4Cori, only if you opted in. Lawful basis: consent.
- To keep the site secure and operational. Lawful basis: legitimate interests.
- To comply with the law, for example tax, accounting and statutory record-keeping. Lawful basis: legal obligation.
Who we share it with
We use a small number of carefully chosen processors to run this site. Personal data is only shared with them where they need it to deliver their service to us:
- Vercel — hosting and content delivery.
- Cloudflare — DNS and edge security.
- Brevo — transactional and marketing email, once enabled.
- Supabase — database, once the course account system goes live.
We never sell or rent your personal data, and we don't share it for advertising-targeting purposes.
International transfers
Some of our processors are based outside the UK, including in the United States and the European Union. Where we transfer personal data outside the UK, we rely on the UK International Data Transfer Agreement, the EU Standard Contractual Clauses with the UK Addendum, or another lawful safeguard.
How long we keep it
- Contact form submissions: up to 24 months from your last interaction with us, then deleted, unless you ask us to delete sooner.
- Marketing email subscribers: until you unsubscribe.
- Operational logs: retained by our hosting provider for a short rolling window for security purposes.
Your rights
Under UK GDPR you have the right to:
- access the personal data we hold on you;
- have inaccurate data corrected;
- have your data erased, subject to limited exceptions;
- restrict or object to how we process it;
- have your data ported to another provider;
- withdraw any consent you previously gave;
- complain to the UK Information Commissioner's Office at ico.org.ukif you think we've got something wrong.
To exercise any of these, email info@4cori.com. We'll respond within one calendar month.
Changes to this policy
We'll update this page when our practices change. The date at the top reflects the most recent revision. Material changes will be communicated to active subscribers by email.