Dispatch CM

Privacy policy

Last updated: 30 October 2026.

This policy says what happens to personal data on dispatchcm.com and in the Dispatch CM service. The data controller is Liam Cordrey, trading as Cordrey Consulting (NIF Y7966498W, Andasol Business Center, Avenida Andasol, 29604 Marbella, Málaga, Spain, liam@cordrey.co). For personal data inside a customer's own website and Dispatch CM account, the customer is the controller and we act as processor.

Visiting this website

This site sets no cookies and uses no advertising or tracking technology. It is served through Cloudflare, whose network processes IP addresses transiently for security and delivery. Visit statistics come from Cloudflare Web Analytics, a cookieless service that counts page views and page performance; it stores nothing in your browser and does not identify you.

The interactive demo

The demo on the home page runs entirely in your browser. What you pick or type in it is not sent to us and is not stored anywhere.

The website check

When you paste a website address on the check page, our code at Cloudflare's edge fetches that site's public pages, respecting its robots.txt, and shows you the result. The result is not stored and the address is not logged beyond Cloudflare's standard, short-lived request logs. If you choose to have the result sent to you, and tick the box, we keep the result and your email address so that Liam can reply. That is the only way a check result is kept.

Early access and enquiries

If you submit the early-access form, or ask for a check result to be sent to you, we process your name (where given), email address, your business name, your website address, the package you built on the pricing page and anything you write in the message, to reply to you and, if you join, to set you up.

  • Legal basis: steps taken at your request before entering into a contract (GDPR art. 6(1)(b)) and our legitimate interest in answering business enquiries (art. 6(1)(f)).
  • Where it goes: the submission is stored on our server in the United Kingdom and sent as a private notification to Liam. It is not added to any marketing list and is never sold or shared for marketing.
  • Retention: until your enquiry is dealt with and at most 24 months from last contact, unless you become a customer.

Setting up as a customer

When the online setup opens, it will collect what we need to build and run your site: your business facts (hours, prices, menus, services, areas), your photographs, answers to a short questionnaire about how you talk to customers, and the people who may approve updates. An unfinished setup is kept for six months from your last activity, with reminders, and then deleted. Payment details are taken by our payment provider and never touch our servers; the providers involved are listed on the subprocessors page.

Customers' websites and accounts (we act as processor)

Inside a customer's Dispatch CM account we process, on the customer's instructions: the business's content and drafts, the authorised users' names and email addresses, each approval (attributed by email, so there is a record of who approved what), and any enquiries collected on the customer's own website. Customers are responsible for their own privacy notices towards their staff and their visitors.

Where data lives and who receives it

Content, drafts and account data are held on private servers in the United Kingdom (Subset Enterprise, trading as Subset UK, company no. 09542306, Enfield). For people in the EEA that is a transfer to a third country, covered by the European Commission's adequacy decision for the UK. The other parties that handle data, and why, are listed with links to their own policies on the subprocessors page. AI providers used for drafting do not train their models on data sent through their business interfaces.

Your rights

You may ask for access, correction, erasure, restriction or portability of your data, or object to processing, by emailing liam@cordrey.co. We answer within one month. You may also complain to the Spanish supervisory authority (AEPD, aepd.es) or, if you are in the UK, to the ICO. Where we act as processor we pass your request to the customer concerned and help them answer it.