Privacy Policy

Corevance Ltd is a UK-registered SAP SuccessFactors consultancy specialising in implementation, configuration, integration and data migration. For the personal data described in this policy, Corevance Ltd is the data controller.

• Registered office: Bldg 3, 566 Chiswick Park, Chiswick, London W4 5YA, United Kingdom
• Data controller contact: contact@corevance.io

(a) Information you give us

When you use our contact form, the “Book a Consultation” form or a data health check request, we collect your name, company name, work email address, phone number (optional), the project details you select (such as project type and preferred timeframe) and anything you write in the message field.

(b) Technical data collected automatically

Our hosting infrastructure records standard technical information such as your IP address, browser type, device type, referring page and the pages you view. Where analytics are enabled, similar usage data is collected through cookies — but only after you consent.

• Responding to enquiries and scoping work — lawful basis: our legitimate interests in responding to business enquiries, and taking steps at your request prior to entering a contract.
• Sending information you ask for — lawful basis: steps prior to a contract, or your consent.
• Operating, securing and improving this website — lawful basis: our legitimate interests in running a secure, useful website.
• Marketing communications — only where you have given consent, which you can withdraw at any time.

We do not sell personal data, and we do not share it with advertising networks or data brokers.

When we are engaged on a project, any client or employee data we process is governed by a separate Data Processing Agreement and is processed strictly on the client's documented instructions. In line with our local-AI approach, that data is handled inside the client's own environment wherever possible — our data profiling, cleansing and transformation tooling is designed to run where the data already lives. Personal data is never sold, and it is never shared with third-party AI cloud services.

We use a small number of essential cookies and similar storage that are required for the site to function, such as remembering your cookie choice. These do not need consent.

If analytics are enabled (for example Google Analytics), those cookies are only set after you accept them. Nothing non-essential is loaded before you consent, and you can change your mind at any time.

Manage your cookie preferences

We share personal data only with trusted service providers who help us operate this website and our business. These fall into the following categories:

• Website hosting and content delivery
• Form handling and transactional email delivery
• Business email, calendar and document storage
• Website analytics, where you have consented

Each provider is bound by a contract containing data-protection obligations and may only process personal data on our instructions. We may also disclose data where we are legally required to do so. We do not sell personal data.

Some of our processors may be located outside the UK or the EEA. Where that is the case, we ensure transfers are protected by appropriate safeguards — typically the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, or reliance on a valid adequacy decision.

We keep enquiry data only for as long as we need it to respond to you and to maintain legitimate business records — normally up to 24 months from our last meaningful contact, unless we enter a client relationship, in which case contractual and accounting retention periods apply. After that we delete or anonymise the data.

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate or incomplete data.
• Erasure — ask us to delete your data where there is no ongoing need to keep it.
• Restriction — ask us to pause processing while a concern is resolved.
• Objection — object to processing based on our legitimate interests.
• Portability — receive your data in a structured, machine-readable format.
• Withdraw consent — where we rely on consent, withdraw it at any time without affecting earlier processing.

To exercise any of these rights, email contact@corevance.io. We will respond within one month. If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.

We apply appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls on a least-privilege basis, vetted processors, and secure handling practices for any client data we are engaged to work with.

We may update this policy from time to time to reflect changes in our services, technology or legal obligations. The “Last updated” date at the top of the page shows the current version.

If you have any questions about this policy, please email contact@corevance.io.