Privacy notice

This notice explains how MIRAICORE LTD uses personal information collected through miraicore.io. Last updated: 20 October 2026.

Who we are

The data controller is MIRAICORE LTD, a private limited company registered in England and Wales, company number 16734484. The registered office is 6 Hinchwick Court, Dorridge, Solihull, England, B93 8DF.

For a general question, email [email protected]. For a privacy question or to use one of the rights below, email [email protected].

What we collect

If you send an enquiry, the form collects your name, business name if you provide one, work email, the service you select, and your message. The form does not ask you to join a marketing list, and sending it does not subscribe you to one.

The enquiry is sent to our customer system with your name split into a first and remaining name, the full name, email address, business name, service, the readable service name, message, and a source label of miraicore-website. A hidden field is used only to reject automated submissions and is not stored when the enquiry is accepted.

Cloudflare provides the site and the Turnstile check on the contact form. That check uses a one-time token and may receive the IP address of the connection. We do not put the token or the message into our public pages. We do not run an analytics or advertising tag, and the pages do not use browser storage.

Why we use it

We use an enquiry to reply to you and to manage that enquiry.

Where you are asking, for yourself, about entering a contract with us, we use your information for the steps you have requested before that contract. The lawful basis is UK GDPR Article 6(1)(b). That basis applies to a contract with you as an individual.

Where you enquire as an employee or representative of a business, the contract would be with that organisation, not with you personally. We use your name, work email and message so we can respond to the organisation you represent. The lawful basis is our legitimate interest in answering that business enquiry, under UK GDPR Article 6(1)(f). The interest is limited to the enquiry you sent. You can object to this use.

We also keep a record of the enquiry, send an internal notification, and use Turnstile and a short rate limit to reduce spam. The lawful basis for that record and protection is the same legitimate interest in running a reliable enquiry process, under Article 6(1)(f).

Marketing

An enquiry is not consent to marketing, and it does not add you to a newsletter. We do not use the form to send promotional messages. If we later want to send marketing, we will ask you separately and give you a way to opt out.

Who receives it

The website is hosted on Cloudflare Pages. Cloudflare Turnstile checks the contact form for spam. An accepted enquiry is passed to GoHighLevel, also known as LeadConnector, which creates or updates a contact, adds a note, creates an opportunity, and sends an internal notification. Business email, including that notification, is handled in Google Workspace.

We do not sell personal information.

Where it is processed

Cloudflare, GoHighLevel and Google may process this information outside the United Kingdom, including in the United States. GoHighLevel also uses support in India. Google may process Workspace email in any country where Google or its subprocessors have facilities. This notice does not claim that enquiry email is stored only in the United Kingdom or Europe.

For transfers to the United States, Cloudflare, Inc., Google LLC, and HighLevel LLC, including LeadConnector LLC, are certified to the UK Extension to the EU-US Data Privacy Framework for non-HR information. The United Kingdom has adequacy regulations for transfers to organisations with an active certification. Where a transfer is not covered by those regulations, the providers’ published customer terms include the UK International Data Transfer Addendum to the EU standard contractual clauses. Those terms are part of the Cloudflare, HighLevel and Google Workspace customer agreements. India is not covered by a UK adequacy regulation. HighLevel’s terms require it to put equivalent protection in place with its subprocessors, including its support company in India.

How long we keep it

If an enquiry does not become a customer relationship, we keep it for 24 months after the last meaningful contact. A meaningful contact is the enquiry, a later message from you, or a substantive reply from us about that enquiry. An automatic system notice does not reset that period.

We may keep a record for longer where the law requires it, where there is a dispute, or where there is an ongoing business relationship. When the 24 months have passed and no exception applies, we delete or anonymise the enquiry record. GoHighLevel does not delete these records automatically. We review them at least twice a year and remove them ourselves.

Cookies

The pages on this site do not set analytics or advertising cookies. The contact form loads Cloudflare Turnstile so we can reject automated submissions. By default that check uses a one-time token rather than a clearance cookie. Cloudflare may still store a security cookie for the check, and Cloudflare describes its challenge cookies as strictly necessary. There is no advertising pixel and no analytics tool, so this site does not show a cookie banner.

Your rights

You can ask for a copy of your personal information, ask us to correct it, erase it, restrict how it is used, or object to use based on legitimate interests. Where the information is needed for steps towards a contract, you can ask for it in a portable form. To make a request, email [email protected]. We may need to confirm that the request comes from you.

You can complain to the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, or at ico.org.uk/make-a-complaint.

Changes

We will update this page when the arrangements change. The date at the top is the date of this version.