CSignal · Platform privacy

Your data,
in plain English.

CSignal is the platform we built to run your projects and understand how your customers behave. This page explains what it does with data, what it never touches, and who is responsible for what. The full policies are at the bottom.

Start here Read the full policies

The short version

Your visitors' data stays yours. You are the controller, we are your processor.
Stored in the UK. Never sold.
We never ask for shopper names, emails or payment details.
Optional analytics, never switched on without your agreement.

At a glance

Six things worth knowing.

Where your CSignal data and visitor analytics are stored · London

Advertising or third-party cookies

Shopper names, emails, addresses or payment details requested by CSignal

Shopper IP addresses are one-way scrambled before they are stored

Never

Sold or rented to anyone, or used to target ads

Yours

Your visitor data is your first-party data. You are the controller, we are your processor

What sits behind it

Built in-house, from the ground up.

CSignal is ours. The data model, the logic and the product were designed and built by our team. We use established infrastructure underneath, the same way any modern platform does.

Approved byShopify App Store

01Our own tracking scriptA lightweight script that records how your site is used, down to individual sections and elements, understood in context.

02Our own event pipeline and data modelWe designed the data layer and data model ourselves. Our behaviour tracking does not sit on top of Google Analytics or a third-party tag manager.

03Our own recommendation engineTurns behaviour and search signals into prioritised, explainable recommendations.

04Our own delivery platformWhere recommendations become tasks, and where we plan, build and report on your work.

Established infrastructure underneath

Secure cloud hostingUK-hosted database and analytics warehouseSpecialist providers for public search dataAI models to help analyse the data

Which policies apply to you

Two always on. Two only if you choose.

Every client

Platform

Your account, security, the companies that help us run CSignal, and your rights.

Read the policy

Delivery

How we run your work: quotes, tasks, approvals, tickets, messages and billing.

Read the policy

These apply whichever services you have with us, from SiteLab and HelpDesk to Projects, SEO and Retain. Delivery is how we run all of them.

Optional modules

Attract

OPT-IN

Search and AI-search visibility. Reads the Google Analytics and Search Console data you connect, plus public search results.

Read the policy

Convert

OPT-IN

On-site behaviour, measured by the CSignal pixel on your store.

Read the policy

Optional modules are never switched on without your agreement. Unless your agreement says otherwise, they are not included in your fees and access is not guaranteed.

Attract · optional

How you are found, in search and in AI.

Attract brings together your own search data and what the public search landscape looks like, including AI assistants, and keeps a history so you can see what moved and why.

Your Google Analytics

Connected by you with read-only access. We read totals such as sessions, channels, top pages and conversions, never individual visitors.

Your Search Console

Connected by you with read-only access. The searches, impressions, clicks and positions Google already reports for your site.

Google, searched for you

We run the searches that matter to your brand and record where you and your competitors appear.

AI assistants, asked for you

We ask AI assistants the questions your customers ask, and record whether and how your brand appears in the answers.

Saved in CSignal

A running record of your visibility.

Rankings and visibility over time

How your brand shows up in AI answers

What changed, and when

Prioritised recommendations

No shopper data

Attract works with totals and public results. It does not track or identify individual people.

Read-only, your choice

You connect Google Analytics and Search Console yourself, and can disconnect them at any time.

Public results only

The searches and AI answers we record are public information about pages and brands. Specialist data providers and AI services run them for us.

Read the Attract policy

Convert · optional · the CSignal pixel

What it sees. What it never sees.

“Pixel” is a loose word, so here is exactly what ours is: a lightweight script on your storefront that records how visitors use the site, not who they are.

Records

Which pages, sections and elements are seen and used
What gets clicked, and how far people scroll
That a form was used or submitted (never what was typed)
Page speed and technical errors
Where visitors came from (search, social, campaigns)
Conversions and order value
On-site searches, if installed through our Shopify app

Never collects

Names
Email addresses
Postal addresses and phone numbers
Card or payment details
Anything typed into your forms
Advertising or third-party cookies
Readable IP addresses

CSignal is built not to collect personal details. The one exception is anything your own links put into a page address (for example an email address in a campaign link), so we recommend keeping personal details out of URLs. Installed through our Shopify app, CSignal also receives checkout events and, for logged-in customers only, their Shopify customer ID with summary order statistics (such as total spend). It never receives their contact, delivery or payment details.

Read the Convert policy

First party or third party?

It is your first-party data.

Your visitors, on your site, collected on your behalf. You decide why it is collected, and we process it for you. It is the same relationship you already have with your analytics tools.

Your visitors

On your site

Your store

Data controller

CSignal

Your processor

Your insights

Dashboard and roadmap

“It is not on our servers, so is it third party?”

No. Where data is hosted does not decide it. Your web analytics are not on your own servers either, and they are still your first-party data. Third-party data usually means data about people gathered across many sites to sell or to target ads. CSignal does not sell data or target ads.

The one thing we do beyond your account

We use anonymised, pooled patterns to benchmark performance across stores, so your recommendations are grounded in what is normal across a larger group. No individual or brand is ever identifiable in them.

Consent

Consent, built in.

Recommended

Through our Shopify app

CSignal runs inside Shopify’s own Web Pixel framework and follows your store’s Shopify consent settings automatically. If a visitor has not agreed to analytics, it does not run.

Alternative

As a script in your theme

Load it through your cookie banner or tag manager so it only runs after a visitor agrees.

Your privacy policy. As the controller, your store should mention CSignal in its privacy policy and cookie banner. We give you ready-to-use wording at the bottom of the Convert policy.

Where it lives, and for how long

Stored in the UK. Never sold.

Everything is encrypted in transit and at rest, every client’s data is kept separate, and access is limited to the people who need it.

Stored

Your CSignal data and visitor analytics are stored in the United Kingdom (London)

Processed

Some processing happens outside the UK, mainly in the US (for example our application servers and AI features), always under standard legal safeguards

Raw visitor events

Automatically deleted after 12 months

Invoices and signed agreements

Kept for as long as the law requires, typically six years

Deletion on request

Ask us at any time and we will delete it

Who helps us run CSignal

Cloud hosting

UK storage, US and global servers

Runs the app, stores your data and monitors for faults

Analytics warehouse

Stores visitor events at scale

AI models

Assistants, drafting and analysis. May not train on your data

Search data providers

Public data only

Run public searches and AI questions for Attract

Email and messaging

EU / US

Sign-in links, notifications and team alerts

Payments and accounting

UK / EU / global

Invoices and direct debits

Every provider is bound by contract to protect your data and use it only on our instructions. The full list, by category and location, is in the policies, and the named list is available on request.

Delivery · every client

One place for the whole project.

CSignal is how we schedule and manage our team, and how you see your work. We built it because project tools never quite gave clients and our team one seamless experience.

Tasks and timelines

See what is planned, in progress and done, as it happens.

Approvals

Quotes and sign-offs in one place, with a clear record.

Messages

Conversations linked straight to the work they relate to.

We never store passwords for your systems. When we need access to your store or tools, invite our team as staff or collaborators.

Who does what

A clear split of responsibilities.

Charle

Use your data to provide our services, and only anonymised patterns beyond that
Keep it secure, separate and stored in the UK
Never sell it or use it to target ads
Only switch on optional modules with your agreement
Help you answer your customers' data requests
Tell you about material changes to our policies

Your brand

Decide whether to use Attract and Convert
Mention CSignal in your privacy policy (we give you the wording)
Make sure your cookie banner covers CSignal
Pass on any customer data requests you receive
Invite us to your tools rather than sharing passwords

More information

The full policies.

Everything above is a summary. The policies are the detail, and where they differ, the policies apply. Questions, or want the named list of the companies that help us run CSignal?

Privacy Notice, Data Processing Agreement and Security Overview hello@charle.co.uk

Your data,in plain English.

Six things worth knowing.

Built in-house, from the ground up.

Two always on. Two only if you choose.

How you are found, in search and in AI.

What it sees. What it never sees.

It is your first-party data.

Consent, built in.

Stored in the UK. Never sold.

One place for the whole project.

A clear split of responsibilities.

The full policies.

Your data,
in plain English.