Privacy Policy

Rebrand Notice: Effective from 14 September 2026 (14/09/2026), the AH-S™ brand was renamed and rebranded as Convert77™. References to AH-S™ or AH-S™ Digital Boutique in earlier versions of this policy refer to Convert77™. The legal entity responsible for the processing described in this Privacy Policy remains ASTON H-S Ltd.

1. Data We Collect

The personal data we collect depends on how you interact with Convert77™.

1.1 Website Visitor, Technical and Analytics Data

When you visit the website, hosting, security and network providers may process technical request information needed to deliver, secure and maintain the service. Depending on the request and provider, this may include IP address, browser/device information, request timing, URL, network information and security signals.

If you allow Analytics, Convert77 also uses a custom first-party analytics system. It creates pseudonymous first-party session and visitor identifiers and can process:

• Page paths and landing pages.
• Referrer and UTM attribution values.
• Navigation and CTA interactions.
• Service, pricing, proof and FAQ/disclosure engagement.
• Form views, starts, step completion and validation outcomes.
• Booking and Business Growth Audit™ intent events.
• Next.js Web Vitals such as LCP, INP and CLS.
• Experiment exposure where an experiment is active.
• Broad device class and browser-local daypart.
• A boolean showing whether optional first-name personalisation is active.
• Conversion attribution where a confirmed booking, purchase or lead can be linked to a consented first-party session.

Convert77 does not copy names, email addresses, free-text form answers, project descriptions or the entered personalisation name into analytics events.

The optional first-name personalisation feature is processed only in React memory in your browser. The first name is not stored in a cookie, localStorage or sessionStorage, is not placed in the URL and is not sent to the Convert77 server. A full page refresh clears it.

Convert77 does not currently use session replay, raw mouse or keystroke recording, third-party advertising pixels or browser/device fingerprinting on the public website.

Third-Party Website Technologies and Embedded Content

The public website is a custom Next.js application hosted on Render, with Cloudflare used for domain and network infrastructure. Those providers may process technical information needed to provide, protect, route and monitor the service.

Cal.com is used for appointment scheduling. The inline Cal.com embed is not loaded until Functional permission is granted. A direct Cal.com link remains available without loading the embed.

Stripe is used to provide secure payment for the paid Business Growth Audit™. The Stripe payment control is loaded only after a visitor deliberately chooses the secure checkout action.

Resend is used for transactional/internal notification emails generated by website enquiries and operational workflows.

Google Search Console is connected through owner-authorised read-only OAuth for SEO/search-performance analysis in Convert77's private administration tools. Search Console data is not used as an on-site visitor tracker.

1.2 Contact and Enquiry Data

When you submit a project enquiry, ask a question or otherwise contact Convert77, we may collect:

• Name.
• Business or organisation name.
• Email address.
• Telephone number where provided.
• Website address where provided.
• Project, commercial or service requirements.
• Budget, timing or fit information where requested.
• Information contained in your enquiry and later communications.

We use this information to respond, assess fit and scope, provide requested information and, where appropriate, discuss or deliver services.

1.2A Outreach Intelligence

Convert77 may copy relevant enquiry and business-contact information into its private Outreach Intelligence system to manage enquiries, relationship history, follow-ups, objections and commercial outcomes. This can include the contact and enquiry information described above, but does not require copying a visitor's detailed website analytics journey into the outreach system.

Outreach Intelligence uses separate MongoDB-backed database infrastructure. Website analytics remain in the website's own database rather than being used as a general prospect profile.

1.3 Partners and Partnership Applications

If you apply to or participate in the Convert77 Partner Programme, we may collect information such as your name, company, website or LinkedIn profile, contact details, professional role, business background, referral information, relationship history, payment details required to administer referral fees and communications relating to the partnership.

This information is used to assess applications, administer accepted partner relationships, attribute referrals, coordinate introductions, manage payments or fees and maintain appropriate business records.

1.3A Referral Opportunities Submitted by Partners

Where a partner submits a genuine prospective client or referral opportunity, Convert77 may receive business contact information about the referred person or organisation, including name, role, company, contact details, website and information about the potential need.

Partners are responsible for ensuring they have an appropriate lawful basis to provide personal data and that introductions are made lawfully and transparently. Convert77 may provide privacy information directly to the referred person where required.

1.4 Calls and Consultations

If you book a call, Cal.com may collect and process information needed to schedule and administer the appointment, such as name, email address, business information, meeting time, booking answers, cancellation or rescheduling information and related metadata.

Convert77 may receive booking details and signed webhook notifications from Cal.com so appointments can be administered reliably and, where Analytics permission exists, linked to the relevant first-party conversion journey using an opaque reference.

1.5 Client and Project Data

If you become a client, Convert77 may process information necessary to scope, contract, deliver and support the work, including business information, project requirements, website content, brand/design materials, communications, billing information and access permissions to third-party systems where you authorise that access.

Clients should use appropriate secure methods when sharing credentials and should revoke access when it is no longer required.

1.6 Marketing and Email Communications

Convert77 may send marketing communications where permitted by applicable law. Depending on the circumstances, contact information may come directly from you, from an existing business relationship, from public professional sources such as company websites or LinkedIn, from business directories or from lawful referral/lead-generation sources.

The rules differ between corporate subscribers and individual subscribers such as sole traders or certain partnerships. Where consent is required, Convert77 will seek consent before sending the relevant communication. Where consent is not required, Convert77 will rely on an appropriate lawful basis and provide a clear way to object or opt out.

Suppression or do-not-contact records may be retained so objections and unsubscribe choices continue to be respected.

1.7 Payment Information

Stripe processes payment-card information for paid website services such as the Business Growth Audit™. Convert77 does not intentionally store complete payment-card details.

Convert77 may receive limited transaction information such as name, email address, amount, currency, payment status, purchase reference and transaction date, together with information required for accounting, support, fraud prevention and tax records.

1.8 Information Obtained from Other Sources

Where permitted by law, Convert77 may obtain relevant business contact information from public professional sources, company websites, directories, professional networking platforms, referral sources or other lawful business-data providers.

Where required, we will provide the privacy information required by law, including information about the source and purpose of processing.

2. How We Use Your Data

Convert77 may use personal data to:

• Operate, secure and maintain the website and administration tools.
• Respond to enquiries and assess project or service fit.
• Schedule and manage meetings and consultations.
• Provide, manage and support contracted services.
• Process payments and maintain transaction records.
• Administer Partner Programme applications and referrals.
• Send lawful business communications and marketing.
• Measure website journeys and conversions where Analytics is allowed.
• Run privacy-safe experiments and performance monitoring.
• Prevent fraud, misuse, abuse and security incidents.
• Maintain accounting, operational and legal records.
• Establish, exercise or defend legal claims.
• Comply with legal and regulatory obligations.

3. Lawful Bases for Processing

Contract

We may process personal data where necessary to take steps at your request before entering into a contract or to perform a contract with you, including providing services, administering projects and processing transactions.

Legal Obligation

We may process personal data where necessary to comply with accounting, taxation, regulatory, record-keeping or other legal obligations.

Legitimate Interests

We may process personal data where necessary for legitimate business interests that are not overridden by your rights and freedoms. These may include managing enquiries and business relationships, protecting systems, maintaining records, improving services, preventing fraud, administering partnerships and conducting relevant B2B marketing where legally permitted.

Consent

We rely on consent where consent is required, including optional browser-storage/access technologies and certain electronic marketing. Where consent is relied upon, you may withdraw it at any time. This does not make earlier processing unlawful.

For optional first-party website analytics, Convert77 obtains Analytics permission before setting the first-party analytics cookies or sending analytics events.

4. Cookies and Similar Technologies

Convert77 uses necessary consent storage, optional first-party analytics cookies and optional/feature-led third-party functionality as described in the Cookie Policy.

Analytics and Functional choices can be changed from Cookie Settings in the website footer.

5. Marketing Communications

Direct marketing is sent only where Convert77 considers it lawful under applicable data-protection and electronic-marketing rules. You can object to direct marketing at any time.

Communications needed to answer an enquiry, administer a booking, deliver a project, manage a referral or handle another existing business relationship are not treated as optional marketing merely because they are sent electronically.

6. Automated Processing, Profiling and Segmentation

Convert77 may use deterministic or automated systems to assist with website analytics, experiment assignment, form routing, operational workflows, attribution and business administration.

Optional first-name page personalisation is directly controlled by the visitor and does not involve server-side profiling of the entered name.

Convert77 does not currently use solely automated decision-making that produces legal or similarly significant effects on individuals.

7. Data Sharing and Third-Party Service Providers

Personal data may be shared with trusted providers where reasonably necessary to operate the business, provide the website or deliver a requested service. Depending on the processing, this may include:

• Render for application/database hosting infrastructure.
• MongoDB-backed infrastructure used by Convert77's private Outreach Intelligence system.
• Cloudflare for domain, DNS, network and security infrastructure.
• Cal.com for appointment scheduling.
• Stripe for payment processing and fraud/security functions.
• Resend for transactional/internal notification email.
• Google for the read-only Search Console integration.
• Professional advisers, contractors and service providers.
• Authorities where disclosure is legally required.

Providers may act as processors or independent controllers depending on the service and circumstances.

8. International Data Transfers

Some service providers may process personal data outside the United Kingdom. For example, Cal.com states that it is a US company and processes data in the United States, with some subprocessors operating elsewhere.

Where UK data-protection law requires safeguards for an international transfer, Convert77 will use or rely on an available lawful transfer mechanism such as an adequacy regulation, the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses or another permitted safeguard, as appropriate to the provider and transfer.

9. Data Storage and Security

Convert77 uses reasonable technical and organisational measures designed to protect personal data, including access controls, authentication, restricted administrative access, provider security controls and encryption where appropriate.

No method of transmission or storage can be guaranteed to be completely secure.

10. Data Retention

Convert77 keeps personal data only for as long as reasonably necessary for the relevant purpose, business relationship and legal obligations.

Current website-system retention settings include:

• First-party analytics data: normally up to 365 days.
• Search Console data held in Convert77 Intelligence: normally up to 365 days.
• Consent receipts: normally up to 730 days.
• Webhook processing receipts: normally up to 180 days.
• Opaque provider conversion references: up to 30 days.
• Short-lived anti-abuse/rate-limit records: until their technical expiry.

Enquiry, prospect, outreach, client, partner, payment, accounting and contractual records may be retained for different periods where reasonably necessary to provide services, maintain records, comply with tax/accounting requirements, resolve disputes or establish/defend legal claims.

When personal data is no longer required, Convert77 will take reasonable steps to delete or anonymise it.

11. Your Data Protection Rights

Subject to applicable law and relevant exceptions, you may have rights including access, rectification, erasure, restriction, objection, data portability, withdrawal of consent and rights relating to certain automated decision-making.

To exercise a right, email [email protected]. Convert77 may need to verify your identity before acting on a request.

12. Data Breaches

If Convert77 becomes aware of a personal-data breach, we will assess the breach and take appropriate steps under applicable data-protection law, including notification to the Information Commissioner's Office and/or affected individuals where legally required.

13. Children

Convert77's services are directed at businesses and adults and are not intended for children. We do not knowingly seek personal data from children where doing so would be unlawful.

14. Authorised Representatives and Contractors

Trusted employees, representatives or contractors may assist with enquiries, administration, delivery, referrals or other operational work. Access should be limited to what is reasonably required for their role and subject to appropriate confidentiality and data-protection obligations.

15. Third-Party Links

The website may link to third-party websites and services. Convert77 is not responsible for their privacy practices, security or content. Their own terms and privacy information apply when you use them.

16. Complaints and Supervisory Authority

If you have a concern about how Convert77 handles personal data, please contact us first at [email protected].

You also have the right to complain to the UK Information Commissioner's Office where applicable. Current contact and complaints information is available from ico.org.uk.

17. California Residents and Other Jurisdictions

Additional privacy rights may apply depending on where you live and whether the relevant law applies to Convert77 or a particular processing activity. Where an applicable law creates additional rights or duties, Convert77 will handle eligible requests in accordance with that law.

Convert77 does not sell personal data or use the public website for third-party cross-context behavioural advertising.

18. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to the business, website, providers, services, technology or legal requirements. The latest version will be published on this page with its current update date.

19. Data Controller

Controller: ASTON H-S Ltd, trading as Convert77™
Company number: 15866638
Registered office: ASTON H-S Ltd 124 City Road, London, EC1V 2NX, United Kingdom
Email: [email protected]
Website: https://convert77.com