Privacy Policy

This Privacy Policy explains how Migr8 ("we", "us", or "our") collects and uses information when you visit our website, use our dashboard, or interact with our services. We provide regulatory monitoring and compliance information for businesses trading between the United Kingdom and the European Union.

We act as the controller of personal information processed through the service. This policy applies to the website, the web dashboard, and any companion mobile application that links to this policy.

Depending on how you use the service, we may collect:

• Account details, such as your email address and authentication records.
• Business details and product information that you choose to enter for monitoring or HS code matching.
• Subscription and transaction details. Payment card information is handled by our payment provider and is not stored by us.
• Support messages and other information you provide when contacting us.
• Technical information, such as IP address, browser type, device information, and service activity logs.

We do not intentionally collect sensitive personal data unless you choose to include it in a message or submission. Please do not submit information that is not needed to use the service.

We use information to:

• Provide, operate, and maintain the service and your account.
• Deliver regulatory alerts, summaries, and other requested features.
• Process subscriptions, payments, and customer support requests.
• Authenticate users, prevent misuse, and protect the security of our systems.
• Understand usage, troubleshoot issues, and improve the service.
• Meet legal, regulatory, accounting, and record-keeping obligations.

We do not sell personal information. We do not use account or business information to make decisions about your eligibility for credit, employment, housing, or insurance.

Where UK or EU data protection law applies, we process personal information where it is necessary to perform our contract with you, where we have a legitimate interest in operating and improving the service, where you have given consent, or where processing is required by law. When we rely on consent, you may withdraw it at any time; this does not affect processing that took place before withdrawal.

We share information only when needed to provide the service, comply with the law, or protect our rights. This may include trusted providers for hosting and databases, authentication, payments, email or mobile notifications, analytics, and infrastructure security. These providers may process information only under our instructions and subject to appropriate confidentiality and security obligations.

We may also disclose information to professional advisers, law enforcement, regulators, or a successor to all or part of our business where legally permitted or required. We do not disclose your information to advertisers for their own marketing purposes.

Some service providers may process information in countries outside the UK or European Economic Area. When this happens, we use an appropriate legal safeguard, such as an adequacy decision or approved contractual clauses, and take reasonable steps to protect the information.

We keep personal information only for as long as it is needed for the purposes described here, including to provide the service, resolve disputes, enforce agreements, and meet legal requirements. We use reasonable technical and organisational measures to protect information, including access controls and encrypted connections. No internet service can be guaranteed to be completely secure, so please use a strong password and notify us promptly if you believe your account has been compromised.

Subject to applicable law, you may ask us to access, correct, update, delete, or restrict the processing of your personal information. You may also object to processing based on legitimate interests, request a portable copy of certain information, and withdraw consent where processing is based on consent.

To exercise a right, contact us using the contact details published on this website. We may need to verify your identity before responding. You also have the right to complain to the data protection authority in the country where you live or work, or where you believe a breach occurred.

We use essential cookies and similar technologies where needed to keep you signed in, secure the service, and remember your preferences. If we introduce non-essential analytics or marketing technologies, we will provide any notices and choices required by applicable law.

The service is intended for businesses and is not directed to children. We do not knowingly collect personal information from anyone under the age of 13, or the higher minimum age required in the relevant jurisdiction. If you believe a child has provided us with personal information, please contact us so that we can remove it.

We may update this Privacy Policy from time to time to reflect changes to the service, the law, or our practices. We will post the updated version on this page and update the effective date. If a change is material, we will provide any additional notice required by law.