Privacy Policy
What personal data Core Concepts collects through coreconcepts.design and Digital Growth Audit (Core Audit), our website audit service, why we collect it, and what you can ask us to do with it.
And we never use it to show you advertising on other services.
Only if you connect it, only for your own report. We never change anything.
Ask us and your personal data is gone within 30 days.
Who we are
Core Concepts is a brand, web design and digital growth studio based in Thessaloniki, Greece. We are the controller of the personal data described in this policy. You can reach us at team@coreconcepts.design.
What we collect
- When you contact us: your name, email address and anything you write in your message.
- When you use Core Audit: your email address, your password (stored only in scrambled form, we can never read it), the website you ask us to audit, the market and language you choose, any notes you add about your business, the reports we produce and any feedback you send us.
- When you buy from us: the details needed to take payment and issue an invoice. Card details are handled by the payment provider and never reach us.
- When you connect your Google data: see Google data below.
- When you browse this website: cookies and similar technologies, as described in Cookies below.
Why we use it
- To answer your messages and provide the services you ask for (performing our contract with you).
- To run your audits, send you your reports and emails about them, and keep your account working (performing our contract with you).
- To keep records we are required to keep by law, such as invoices (legal obligation).
- To measure and improve this website, only with your consent where the law requires it (consent or legitimate interest).
We do not sell your personal data, and we do not use it to show you advertising on other services.
Google data (Google user data)
Digital Growth Audit (Core Audit), our website audit service, can include figures from your Google Analytics and Google Search Console accounts in your audit report. This only happens if you choose to connect them, either by signing in with Google or by adding our read-only service address as a user.
- What we read: traffic, conversion, search performance and indexing figures for the website being audited. Access is read-only. We never change your settings, data or users.
- What we use it for: only to write your own audit report and show it to you and the people you share the report with.
- What we never do: we do not sell this data, use it for advertising, or use it to train artificial intelligence models, and nobody at Core Concepts reads it except to run or fix your audit or when you ask us for help.
- Who it is shared with: we do not sell, rent or share Google user data with anyone, with one exception needed to write your report: the figures are passed to our artificial intelligence provider (Anthropic), only to write the text of your own report, under terms that do not allow them to be used to train its models. Google user data is never used to develop, improve or train any artificial intelligence or machine learning model, ours or anyone else’s.
- Storage and deletion: sign-in access is stored encrypted and can only be opened by the server that runs your audit. We revoke and delete it when your audit is finished, when you disconnect, when you delete your account, or after seven days unused. The figures read from Google stay in your audit report, in your account, until you delete the report or your account.
- Protection: all Google user data travels over encrypted connections, sign-in access is encrypted at rest, and only the people who run or support your audit can reach it.
- Disconnecting: you can remove our access at any time from your Google account at myaccount.google.com/permissions, or by removing our service address from the users of your Analytics property or Search Console property.
Digital Growth Audit’s (Core Audit’s) use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Who helps us
We use trusted service providers to run our services. They process data only on our instructions:
- hosting and database providers, which store your account and audits;
- email delivery providers, which send our emails to you;
- an artificial intelligence provider (Anthropic), which helps write the text of audit reports;
- website data providers (such as DataForSEO, Firecrawl and Google PageSpeed Insights), which read public information about the website being audited;
- a hosting provider (Vercel), which serves the reports we publish for you;
- payment and invoicing providers, when you buy from us.
Some of these providers are based outside the European Economic Area. Where that is the case, the transfer is protected by the safeguards the law requires, such as the European Commission’s standard contractual clauses or an adequacy decision.
How long we keep it
We keep your account and audits for as long as your account is open. When you ask us to delete your account, we delete your personal data within 30 days, except records we must keep by law, such as invoices. Messages you send us are kept for as long as needed to deal with them.
Your rights
You can ask us to give you a copy of your personal data, correct it, delete it, limit how we use it, or send it to you in a portable format. You can object to how we use it, and withdraw any consent you have given at any time. Write to team@coreconcepts.design and we will reply within one month.
If you think we have handled your data wrongly, you can complain to the Hellenic Data Protection Authority (www.dpa.gr) or to the data protection authority where you live.
Security
We protect your data with encrypted connections, access limited to the people who need it, and encrypted storage for sign-in access to other services.
Changes to this policy
If we change this policy, we will update the date at the top of this page. If the change matters to how we use your data, we will tell Core Audit customers by email.
Questions about your data?
Write to us and a real person will answer.
