Privacy Policy - Cart Conversion Boost

The Short Version.

We do not:

Sell your data
See any of your customer’s data or details at all
Store cookies ourself, or see any cookie data

Last updated: 9 October 2026

This policy explains what personal information Cart Conversion Boost collects, why, who we share it with, how long we keep it, and your rights. We’ve tried to keep it in plain English.

1. Who we are

Cart Conversion Boost (cartconversionboost.com) is run by Cart Conversion Boost, Ashley Way, Harborough, LE16 7XD, United Kingdom (“we”, “us”, “our”).

We are the “data controller” for the personal information described in this policy. That means we decide how and why it is used.

If you have any question about your information, or want to use any of your rights, email on contact page.

2. The short version

We collect your name and email address when you ask us for something, such as the free plugin, a video, a guide or a Leak Audit report, or when you start an order.
Payments are handled by ThriveCart and its payment providers. We never see or store your full card details.
We use your email address to send you what you asked for, help you set up, follow up on an order you didn’t finish, and send occasional tips and offers. You can unsubscribe at any time.
With your consent, we use analytics and advertising cookies (Google Analytics and the Meta Pixel) to understand how the site is used and to measure our ads.
We don’t sell your personal information.
The Cart Conversion Boost plugin does not send your website visitors’ details to us.

3. What we collect and why

a) When you download the free plugin or one of our free resources

When you fill in one of our opt-in forms (for example to get the free plugin, the 5-step video, a guide or a template), we collect:

your name
your email address

We use these to send you the download link, setup help, and follow-up emails about getting the most from Cart Conversion Boost, including information about Cart Conversion Boost Pro.

Lawful basis:

To deliver what you asked for: taking steps at your request (contract).
For the follow-up and marketing emails: your consent, which you give when you sign up. You can withdraw it at any time with the unsubscribe link in every email.

b) When you start an order

Before our checkout, we ask for your name and email so we can send your download link and order details. If you start an order but don’t finish it, we may send you a short series of reminder emails about that order. As soon as you buy, you stop receiving them.

If you arrive on one of our pages from a link in our emails, the link may already contain your name and email address. In that case, when you click a Buy button, our site may fill in and send that same form for you, so you don’t have to type your details again. This only ever uses details you have already given us.

Lawful basis:

Taking steps at your request before entering a contract.
For the reminder emails: our legitimate interest in helping you complete an order you started. Under UK law this is also allowed as a “soft opt-in”, because you gave us your email in the course of a possible purchase. You can opt out at any time.

c) When you buy

Orders are processed by ThriveCart, our checkout provider. Payments are taken by its payment processors (such as Stripe and PayPal). ThriveCart collects:

your name, email address and billing address
your country and, where needed, VAT details
your payment details

We receive your name, email, what you bought, the amount, and the date. We do not receive your full card number.

We use this to:

deliver your plugin and license key
provide support and updates
handle refunds, including under our Triple-Triple Guarantee
keep the business and tax records the law requires

Lawful basis:

To fulfil our contract with you.
Our legal obligation to keep accounting and tax records.

d) License activation (Cart Conversion Boost Pro)

When you activate Cart Conversion Boost Pro on a website, the plugin connects to our server to check your license. It does this when you activate or deactivate, and automatically about twice a day after that. Each check sends:

your license key
the website address (domain) it is installed on
the plugin name and version

Our server also receives the IP address of your web server.

We use this to:

confirm the license is valid
count the sites it is used on
tell you when your license needs renewing
prevent misuse

The license check does not send any information about your website’s visitors.

Lawful basis: to fulfil our contract with you, and our legitimate interest in preventing license misuse.

e) Links from the plugin to our website

Some links and buttons inside the plugin’s settings screens point to cartconversionboost.com (for example the help video, upgrade, renew and support links). When you click one, the link includes the name and email address from the WordPress user profile of the person logged in. This is so our forms are already filled in for you.

These details only reach us if you click the link. Nothing is sent otherwise, and your website visitors’ details are never included.

Lawful basis: our legitimate interest in making it quick for you to get help or upgrade. You can avoid it by typing our web address directly instead of clicking the link.

f) The free Leak Audit

When you use the Leak Audit, we collect:

the web address of the sales page you enter
the results of our check of that page
if you ask for your full report, your name and email address

We only look at what is publicly visible on that page, the same as any visitor would. We do not store these details until you opt-in to get the report. We use your details to show and email your report, and to send you a few related tips. You can unsubscribe at any time.

Lawful basis:

Taking steps at your request.
Your consent for the follow-up emails.

g) When you contact us

If you use our contact form or email us, we collect:

your name and email
your phone number, if you choose to give it
your message

We use these only to reply to you and help with your question.

Lawful basis: our legitimate interest in answering your enquiry, or taking steps at your request if it relates to a purchase.

h) When you browse the site

Like most websites, our server records technical information, such as:

your IP address
your browser and device type
the pages you visit
the time of each visit

This is to keep the site running, secure and free from spam and abuse. We may use spam-protection tools (such as Cloudflare Turnstile or Google reCAPTCHA) on our forms.

With your consent, we also use:

Google Analytics, to understand how visitors use the site
the Meta (Facebook) Pixel, to measure and improve our adverts and show them to relevant people

Please note that when you arrive from one of our email links, your name and email can appear in the page address, and our analytics tools may record page addresses.

Lawful basis:

Server logs and security: our legitimate interest in running a safe website.
Analytics and advertising: your consent.

4. The Cart Conversion Boost plugin and your own website visitors

If you install Cart Conversion Boost (free or Pro) on your website:

The plugin does not send your visitors’ names, email addresses or any other visitor data to us.
To pre-fill your checkout and forms, the plugin passes your visitor’s name and email from your opt-in form to your ThriveCart checkout. With Sitewide Identity Persistence, it keeps those details in the visitor’s own browser session storage (sessionStorage), not in a cookie. This storage stays in the visitor’s browser, can only be read by your website, and is cleared when they close the browser tab or window.
You are the data controller for your own visitors’ information. You are responsible for your own privacy policy, and we recommend you mention this pre-fill feature in it.

5. Who we share your information with

We only share your information with service providers who help us run the business. They may only use it to provide their service to us. They are:

ThriveCart: our checkout, orders and affiliate system.
Payment processors (for example Stripe and PayPal): they take payments through ThriveCart.
MailerLite: our email service, for sending download links, order emails and newsletters.
Hostinger: our website hosting.
Google: Google Analytics and Google Fonts, and possibly reCAPTCHA spam protection.
Meta Platforms: the Meta (Facebook) Pixel, used only with your consent.
Vimeo: it hosts the videos on our site. When you play a video, Vimeo may collect information about your device and viewing.
Cloudflare: possibly used for spam protection on forms.
Our accountant, and HMRC: to meet our tax and legal obligations.
Affiliates: if you buy through an affiliate’s link, ThriveCart tells that affiliate about the sale (usually your name or email and the order) so they can be paid their commission.

We may also disclose information if the law requires it, or to protect our rights, for example in a fraud or payment dispute.

We do not sell your personal information.

6. International transfers

Some of the providers above are based in, or store data in, the United States or other countries outside the UK. When your information is transferred outside the UK, we make sure it is protected, for example through:

the UK-US Data Bridge
the UK International Data Transfer Agreement or Addendum
the provider’s equivalent contractual safeguards

7. How long we keep your information

Email list (free downloads, resources, Leak Audit): until you unsubscribe or ask us to delete it. After you unsubscribe, we keep only your email address on a “do not contact” list, so we don’t email you again by mistake.
Unfinished order reminders: the reminder series lasts a few days. Your details then stay on our email list only if you have not opted out.
Purchase and refund records: 6 years after the end of the tax year they relate to, as UK tax law requires.
License records: for as long as your license is active, plus 6 years.
Contact form messages and support emails: up to 2 years after your last message.
Analytics data: up to 14 months in Google Analytics.
Server logs: usually no more than 30 days, set by our host.

8. Cookies and similar technologies

Cookies are small files saved by your browser. We use:

Strictly necessary cookies: needed for the site, forms, spam protection and checkout to work. These don’t need your consent.
Analytics cookies (Google Analytics, for example _ga): set only if you agree.
Advertising cookies (Meta Pixel, for example _fbp): set only if you agree.
Third-party content: Vimeo may set cookies when you play a video.
WordPress cookies: set only if you log in or leave a comment.

You can change your choice at any time using the cookie settings link on our site. You can also block or delete cookies in your browser settings, although parts of the site may not work properly.

Cart Conversion Boost’s own Sitewide Identity Persistence uses browser session storage, not cookies, as explained in section 4.

9. Your rights

Under UK data protection law (and the EU GDPR, if you are in the European Union), you have the right to:

ask for a copy of the personal information we hold about you
ask us to correct anything that is wrong or incomplete
ask us to delete your information (we may need to keep some records, such as purchase records, for legal reasons)
ask us to restrict how we use your information
object to our use of your information based on legitimate interests, and to direct marketing at any time
ask for your information in a portable format
withdraw your consent at any time, where we rely on consent

To use any of these rights, email from the contact page. We’ll reply within one month. There’s no charge in most cases.

You can unsubscribe from our emails at any time using the link at the bottom of every email.

If you’re unhappy with how we’ve handled your information, please tell us first so we can try to put it right. You also have the right to complain to the UK Information Commissioner’s Office (ICO): ico.org.uk, or 0303 123 1113. If you live in the EU, you can contact your local data protection authority.

If you live in the United States: you can ask us what personal information we hold about you, and ask us to correct or delete it, by emailing us. We do not sell personal information. If our use of the Meta Pixel counts as “sharing” for advertising purposes under your state’s law, you can opt out by declining advertising cookies or contacting us.

10. Security

We use reputable providers and take sensible steps to protect your information, including:

secure (HTTPS) connections
strong passwords and two-factor sign-in where available
limiting access to the people who need it

No method of sending or storing data online is completely secure, but we work to protect your information and will tell you and the ICO if there’s a breach that puts you at risk, as the law requires.

11. Children

Our website and products are for businesses and adults. They are not intended for anyone under 18, and we do not knowingly collect information from children.

12. Links to other websites

Our site links to other websites, including Thrive Themes, ThriveCart and Vimeo. We’re not responsible for how those websites handle your information, so please read their privacy policies.

13. Changes to this policy

We may update this policy from time to time. The “last updated” date at the top shows when it last changed. If we make a significant change, we’ll make it clear on the site or let you know by email.

14. Contact

Cart Conversion Boost
Ashley Way, Harborough, LE16 7XD, United Kingdom
Email: See contact address