Privacy policy.

Who we are

Census is a product of Vervaunt Labs, the research and development arm of Vervaunt, an eCommerce consultancy based in London. Vervaunt is the data controller for personal data collected through this website.

For anything in this policy, including requests about your data, email labs@vervaunt.com.

What this policy covers

This policy covers this website, census.vervaunt.com — the marketing and documentation pages you are reading now.

It does not cover the Census app itself. When a merchant installs Census on their Shopify store, survey responses from that store’s shoppers are processed on the merchant’s behalf, under a separate agreement, and the merchant’s own privacy policy governs that relationship. If you answered a survey on a shop and want to know how your answer is used, contact that shop.

What we collect

Information you give us

None, through this site. There are no forms, no newsletter sign-up and no account. The only way to contact us from here is an email link, and if you email us we hold that correspondence so we can reply to it.

Analytics — only with your consent

If you accept analytics cookies, we use Google Analytics 4 (measurement ID G-SN72WGBQ9L) to understand how the site is used: pages viewed, roughly where in the world visitors are, which device and browser, and how people move between pages.

Analytics is switched off until you accept. The page loads with Google Consent Mode v2 set to denied for analytics, advertising, ad user data and ad personalisation, so no analytics cookie is written unless and until you choose Accept. If you decline, we also actively delete any Google Analytics cookies a previous acceptance had left behind.

We have not enabled Google Signals, advertising features or cross-device tracking on this property.

Server logs

The site is hosted by Vercel. Like any web host, their servers record requests — IP address, the page requested, timestamp, browser user-agent and referring page. These logs exist to serve the site, keep it available and protect it from abuse. We do not use them to build any profile of you.

Fonts

Typefaces are loaded from Google Fonts. Your browser requests them directly from fonts.googleapis.com and fonts.gstatic.com, which means your IP address is visible to Google when a page loads. This happens before any consent choice because the page cannot render without the fonts.

Cookies and local storage

We use as few as we can get away with. Here is the complete list.

There are no advertising, marketing or social media cookies on this site.

To change your choice, use Cookie settings in the footer of any page. You can also clear cookies and site data in your browser, which resets everything including your consent choice.

Why we are allowed to do this

Under UK GDPR we need a lawful basis for each use:

• Analytics cookies — your consent. Asked for up front, withdrawable at any time, and nothing is set before you answer.
• Server logs and security — legitimate interests. We have a genuine interest in keeping the site running and defending it from attack, and these logs are the minimum needed to do that.
• Replying to your email — legitimate interests. If you write to us, we have an obvious interest in answering you.

Who we share it with

We do not sell personal data, and we do not share it for advertising. Data reaches two processors in the course of running this site:

• Vercel Inc. — hosting and delivery.
• Google Ireland Limited — Google Analytics and Google Fonts.

We may also disclose data where the law requires it.

International transfers

Both suppliers are US-headquartered and data may be processed outside the UK and EEA. Transfers rely on the UK International Data Transfer Addendum and the EU Standard Contractual Clauses, together with the suppliers’ own technical safeguards, under each supplier’s data processing terms.

How long we keep it

• Analytics — event-level data is deleted automatically by Google on our property’s retention schedule, and in no case kept longer than 14 months. Aggregated reporting, which cannot identify you, may be kept longer.
• Server logs — retained by our host on a short rolling window for operational and security purposes.
• Email correspondence — kept while it is useful to the conversation and then deleted.

Your rights

Under UK GDPR you can ask us to:

• tell you what personal data we hold about you, and give you a copy
• correct it if it is wrong, or complete it if it is partial
• delete it
• restrict or object to how we use it
• hand it over in a portable format

You can withdraw consent to analytics at any time with Cookie settings, and withdrawing is as easy as giving it. Withdrawal does not undo processing that already happened.

Email labs@vervaunt.com to make a request. We will respond within one month.

If you are unhappy with how we have handled your data you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We would rather you came to us first so we can put it right.

Children

This site is aimed at people running eCommerce businesses. It is not directed at children and we do not knowingly collect data about them.

Changes to this policy

If we change how we handle data we will update this page and move the date at the top. Material changes affecting what you have consented to will mean asking you again.

Contact

Privacy questions, data requests and complaints: labs@vervaunt.com.