Privacy Policy

Last updated: July 17, 2026

Contents

  1. Introduction
  2. Who We Are
  3. Data We Collect
  4. How We Use Your Data
  5. Legal Bases for Processing
  6. Sharing and Disclosure
  7. End User Data (Visitor Tracking)
  8. Cookies and Tracking Technologies
  9. Data Retention
  10. Security
  11. International Transfers
  12. Your Rights
  13. Children
  14. Changes to this Policy
  15. Contact Us

1. Introduction

This Privacy Policy explains how Iteratist collects, uses, and protects information in connection with our website at iteratist.com and our A/B testing and conversion optimisation platform (together, the "Service").

We have structured this policy to cover two distinct contexts:

Please read this policy carefully. By using the Service, you acknowledge the practices described here.

2. Who We Are

Iteratist is the data controller for information we collect from Customers and visitors to iteratist.com. For End User data collected through the Snippet on Customer websites, Iteratist acts as a data processor on behalf of the Customer, who is the data controller.

Questions or requests related to this policy may be directed to: privacy@iteratist.com.

3. Data We Collect

3.1 Data You Provide to Us (Customers)

3.2 Data Collected Automatically (iteratist.com visitors)

3.3 Data Collected via the Snippet (End User data)

When a Customer installs the Iteratist Snippet on their website, the Snippet may collect the following data about End Users on behalf of the Customer:

The Snippet does not collect names, email addresses, or other directly identifying information unless the Customer explicitly configures it to do so (which is subject to the Customer own legal obligations).

4. How We Use Your Data

PurposeData used
Provide and operate the Service Account info, site configuration, Customer Data
Process payments and manage billing Payment information, account info
Send transactional communications (account confirmation, receipts, service alerts) Email address
Respond to support requests Account info, communications
Improve and develop the Service Aggregated usage data, feedback
Send product updates and marketing communications (with your consent or where permitted by law) Email address
Detect and prevent fraud, abuse, and security threats Account info, usage data, IP address
Comply with legal obligations As required by applicable law

We do not sell your personal data or End User data to third parties.

If you are located in the European Economic Area or United Kingdom, our legal bases for processing personal data are:

6. Sharing and Disclosure

We share Customer and End User data only in the following circumstances:

7. End User Data (Visitor Tracking)

Customers are responsible for informing their website visitors about the use of the Iteratist Snippet and obtaining any required consents under applicable privacy laws (such as GDPR, CCPA, or ePrivacy). Customers should ensure their own privacy policies disclose the use of session recording, heatmaps, and A/B testing tools.

Iteratist processes End User data solely as directed by the Customer. We do not use End User data for our own advertising purposes, and we do not share End User data with other Customers or third parties for advertising.

If you are an End User and wish to exercise your rights regarding data collected about you on a Customer website, please contact that Customer directly. If you need to contact Iteratist in connection with such a request, you may write to privacy@iteratist.com.

8. Cookies and Tracking Technologies

We use cookies and similar technologies on iteratist.com for the following purposes:

You can control cookies through your browser settings. Opting out of analytics cookies will not affect your ability to use the Service.

The Iteratist Snippet installed on Customer websites may also set a session identifier cookie on End User browsers to associate interactions within a single visit. The purpose and lawfulness of this cookie on Customer websites is the Customer responsibility.

9. Data Retention

10. Security

We implement industry-standard technical and organisational security measures including encryption in transit (TLS), hashed password storage, access controls, and regular security reviews. Despite these measures, no system is completely secure, and we cannot guarantee that unauthorised access will never occur. If we become aware of a security breach that affects your data, we will notify you as required by applicable law.

11. International Transfers

Iteratist is operated from the United States. If you are located outside the United States, your data will be transferred to and processed in the United States. For transfers from the EEA or UK, we rely on applicable transfer mechanisms such as Standard Contractual Clauses to ensure appropriate protections are in place.

12. Your Rights

Depending on where you are located, you may have the following rights regarding your personal data:

To exercise any of these rights, contact us at privacy@iteratist.com. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

13. Children

The Service is not directed to individuals under 18 years of age. We do not knowingly collect personal data from children. If we learn that we have collected data from a child under 18, we will delete it promptly. If you believe we have collected such data, please contact us at privacy@iteratist.com.

14. Changes to this Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by a prominent notice on the Service prior to the change becoming effective. The date at the top of this page indicates when it was last revised. Your continued use of the Service after we post changes constitutes your acceptance of the revised policy.

15. Contact Us

If you have questions or concerns about this Privacy Policy or how we handle your data, please contact us: