Website privacy notice
reitrn Ltd · Last updated 8 October 2026
If you send us an enquiry through this site, we use what you tell us to reply and follow up about that enquiry. We use a small number of providers to run the site and send the email, and we only use advertising cookies if you say yes. We never sell your data. You can ask to see it, correct it or delete it at any time by emailing privacy@reitrn.com.
This notice covers the reitrn.com website. The reitrn consumer app has its own privacy policy and terms, and the reitrn software has its own terms for customers. If you are a customer or a contact at a customer, your contract may say more about how we handle data for you.
1. Who we are
reitrn Ltd is the controller of the personal data described in this notice, which means we decide how and why it is used. You can contact us about anything in this notice at privacy@reitrn.com.
2. What we collect, why, and for how long
| What | Why we use it | Our legal basis | How long we keep it |
|---|---|---|---|
| Enquiry form details. Your name, work email, company, website, returns volume, returns portal, what you ask for (a trial or a call) and anything you write in the message box. | To reply to you, plan a trial, give a quote and follow up on the enquiry. | Legitimate interests (running our business and answering business enquiries). Where you ask us to set something up, it is also a step taken at your request before a contract. | While we are dealing with your enquiry, and up to 24 months after our last contact with you, then we delete it. Sooner if you ask. |
| Where your enquiry came from. The page you were on before the form, and campaign tags in the link you clicked (for example the source, campaign and ad that brought you, and click IDs added by LinkedIn or Google ads). | To understand which pages and campaigns lead to enquiries, so we can spend our marketing budget sensibly. | Legitimate interests. | Stored with the enquiry and deleted with it. |
| Emails and calls with us. The messages you send to our addresses and notes of conversations. | To respond and keep a record of what we agreed. | Legitimate interests; contract where one exists. | For as long as the relationship lasts, then up to 24 months after our last contact, unless we need to keep records longer for legal or accounting reasons. |
| Technical data. Your IP address, browser and device type, the pages and files requested, and the time, recorded in our hosting provider's server logs. | To deliver the site, keep it secure, spot abuse and fix faults. | Legitimate interests. | A short period set by our hosting provider, then deleted or anonymised. |
| Your cookie choice. A single value saved in your browser if you accept or decline advertising cookies. | To remember your choice so we do not ask again. | Necessary to honour your choice. | Until you clear your browser data for this site. |
| Advertising data collected by LinkedIn and Google tags, only if you accept advertising cookies. See section 4. | To measure which of our ads lead to enquiries. | Your consent. | Set by LinkedIn and Google under their own policies. You can withdraw consent at any time. |
You do not have to give us any personal data to browse this site. If you leave out the details on the form that we ask for, we may not be able to reply. We do not use your data to make automated decisions that have legal or similarly significant effects on you.
3. Who we share it with
We use a small number of providers to run the site and handle enquiries. They act on our instructions and may only use your data for those purposes, unless they say otherwise in their own policies, as described for Google and LinkedIn below.
- Vercel hosts the website and receives the technical data described above when you visit.
- Resend delivers the email we receive when you submit the enquiry form, so it passes through their systems.
- Google Fonts supplies the typeface used on the site. Your browser fetches it directly from Google, so Google receives your IP address and browser details when a page loads. We do not control how Google uses that data, and details are in Google's privacy policy.
- LinkedIn and Google advertising tags are loaded only if you accept advertising cookies. They are covered in section 4.
- Professional advisers, insurers and authorities. We may share data with our accountants, lawyers or insurers where needed, or with a regulator, court or law enforcement body where the law requires it.
- If our business changes. If reitrn Ltd is sold or merges, data may pass to the new owner, who must keep to this notice.
We do not sell your personal data and we do not share it for other companies to market to you.
4. Cookies and similar technologies
What we set ourselves. This site does not set cookies of its own. The only thing it can store in your browser is your cookie choice (see the table above), in your browser's local storage.
Advertising cookies. When we are running online advertising, a banner will ask whether you accept advertising cookies. If you choose No thanks, nothing from LinkedIn or Google is loaded and the site works exactly the same. If you choose Accept, we load the LinkedIn Insight Tag and the Google tag, which set cookies and send data such as your IP address, the page you viewed, your device details and whether you completed an enquiry, so that the ad platforms can tell us which ads led to enquiries. LinkedIn and Google then act as controllers of that data for their own purposes under their own policies:
Changing your mind. To withdraw consent, clear this site's data in your browser settings. The banner will appear again and you can choose again. You can also manage ad cookies in your LinkedIn and Google account settings.
Links to other sites. We link to other sites, including the RaaS verification page for our certification (returnsasaservice.org), our customer portal and LinkedIn. Those sites have their own privacy practices and we are not responsible for them.
5. Where your data goes
Some of our providers, including Vercel, Resend, Google and LinkedIn, are based in or process data in countries outside the UK, including the United States. Where that happens, we rely on a lawful transfer mechanism, such as the UK adequacy regulations (including the UK-US data bridge for certified companies) or the UK International Data Transfer Addendum and standard contractual clauses, so your data keeps an equivalent level of protection. You can ask us for more detail at privacy@reitrn.com.
6. Keeping your data safe
The site is served over HTTPS. Enquiries are sent to us by email and are available only to the people at reitrn who need them to respond. We choose providers that protect their systems, and we review who can see enquiry data. No system is perfectly secure, so if we ever have a breach that puts your rights at risk we will tell you and the Information Commissioner's Office where the law requires it.
7. Your rights
Under UK data protection law you can ask us to:
- tell you whether we hold your data and give you a copy (access);
- correct anything that is wrong or incomplete (rectification);
- delete your data (erasure), in the situations the law allows;
- limit how we use it (restriction);
- move the data you gave us to you or another provider in a usable format (portability), where it applies;
- stop using it where we rely on legitimate interests (objection), including for direct marketing, which we will always stop;
- and withdraw consent at any time where we rely on consent, which does not affect what we did before.
To use any of these, email privacy@reitrn.com. We will reply within one month and may need to check who you are first. It is free, unless a request is clearly unfounded or excessive.
Marketing. We use your enquiry details to reply and follow up about that enquiry. We will not add you to a marketing list without a lawful basis such as your consent, and every marketing message will carry a way to opt out. You can always tell us to stop.
8. Complaints
If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the UK Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
9. Children
This site is for businesses and is not aimed at children. We do not knowingly collect personal data from anyone under 16. If you think a child has sent us their details, email privacy@reitrn.com and we will delete them.
10. Changes to this notice
We will update this notice if what we do with data changes, for example if we add a new tool to the site. The date at the top shows when it last changed. For significant changes, we will say so on the site.