Privacy Policy
Last updated: 8 October 2026
This policy explains what personal data ACX collects, why, who we share it with, and the rights you have. We keep it as short and plain as we can.
1. Who we are
ACX is operated by MAIN DIGITAL CONSULTING LIMITED, a company registered in England and Wales (company number 16865005), registered office Torton, Hollybush Road, Crawley, RH10 8DU, United Kingdom. We are the data controller for the personal data described here.
Questions or requests: pc@mainconsulting.co.uk.
2. What we collect
- Websites you test — the domain you enter and the publicly available pages we read from it.
- Account details — email address, name and business name.
- Assessment data — scores, simulated customer journeys, findings, recommendations and your plan progress.
- Messages — support, enquiry and Managed ACX requests (name, email, message).
- Payment records — what you bought, amounts and Stripe references. Card details are handled by Stripe and never reach us.
- Technical data — basic server logs (such as IP address and browser type) used for security and troubleshooting.
3. Why we use it and our legal basis
- To provide ACX (running assessments, your account, dashboards, Pro features and Video Audits) — performance of a contract.
- To take payments and keep tax records — contract and legal obligation.
- To answer your messages and notify our team of new accounts and requests — legitimate interests.
- To keep ACX secure and improve it — legitimate interests.
- Service and product emails about your account, assessments and ACX updates — legitimate interests (as an existing customer). Every marketing email has an unsubscribe link, and you can opt out at any time.
4. Who we share it with
We use trusted service providers who process data on our behalf under contract:
- Lovable Cloud — hosting, database and authentication
- Lovable AI — AI models used to analyse websites and generate findings
- Firecrawl — reading public website pages for assessments
- Stripe — payments and billing
- Resend — sending service and notification emails
- Loops — account and lifecycle email
Some providers may process data outside the UK. Where they do, transfers are protected by UK adequacy regulations or appropriate safeguards such as the UK International Data Transfer Agreement or Addendum. We never sell your personal data.
5. How long we keep it
- Account and assessment data — while your account is open, and up to 30 days after you ask us to close it.
- Anonymous tests never saved to an account — we aim to delete these after 90 days.
- Payment records — 6 years, as required for HMRC.
- Support messages — up to 2 years.
6. Your rights
Under UK data protection law you can ask to access, correct or delete your data, restrict or object to our use of it, and receive a copy in a portable format. Email pc@mainconsulting.co.uk and we will respond within one month.
If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk. We would appreciate the chance to resolve it first.
7. Cookies
We only use storage that is strictly necessary to run ACX. See our Cookie Policy.
8. Children
ACX is a business service and is not intended for anyone under 18.
9. Changes
We may update this policy. The date at the top shows the latest version; we will tell account holders about significant changes by email.
