Privacy policy
Last updated: October 2026
Introduction
This privacy policy explains how Content Formula Limited (“we”, “us”) collects, uses, stores and protects personal data when you use the Xoralia website and software.
Who we are
Xoralia is a brand of Content Formula Limited, a company registered in England and Wales (company number 06577200), with its registered office at Kemp House, 152-160 City Road, London, England, EC1V 2NX. Content Formula Limited is the controller of the personal information in this policy. For privacy questions or requests, email hello@contentformula.com.
Collection of personal data
We collect information you submit through forms (name, email, organisation, message), technical data such as IP address and browser type, and cookie data as described in our cookie notice.
Purposes of processing
We use personal data to respond to enquiries, provide demos and trials, operate the website, improve our services, and meet legal obligations.
Our legal bases
| Why we use your information | Legal basis (UK and EU) |
|---|---|
| Answer enquiries and arrange demos or trials | Steps before a contract, or our legitimate interests |
| Run, secure and measure the website, including basic statistics | Legitimate interests |
| Analytics, session recordings and advertising cookies | Consent where the law requires it, otherwise legitimate interests |
| Marketing emails | Consent, or legitimate interests for business contacts, with an unsubscribe link in every email |
We also keep records where the law requires it.
Who we share information with
Our service providers process information on our instructions: HubSpot, Microsoft and Vercel. With your consent, or by default where the law allows, Google, Microsoft Advertising, LinkedIn and G2 receive cookie data for analytics and advertising, and use it under their own privacy policies. We also disclose information when the law requires it.
Data security
We apply appropriate technical and organisational measures to protect personal data.
How long we keep information
We keep enquiry records for 6 years after our last contact, customer records for 6 years after a contract ends, and cookie consent records for 6 years. Cookie lifetimes are in our cookie notice. If you unsubscribe from our emails, we keep a note so we don't contact you again.
AI processing of personal data
Where we use AI tools, personal data is processed under the same controller responsibilities and with appropriate safeguards.
International transfers
Some of our providers are in the US. When information leaves the UK or EEA, we rely on adequacy regulations, such as the UK Extension to the EU-US Data Privacy Framework, or on the International Data Transfer Agreement or Standard Contractual Clauses.
Third-party links
Our site may link to third-party websites. Their privacy practices are their own.
Your rights
You may request access, correction, deletion, or restriction of your personal data, and you may object to certain processing. Contact hello@contentformula.com. You may also complain to the ICO.
The data controller is Content Formula Limited.
If you're outside the UK
EU: you can also withdraw consent at any time, take a copy of your data to another provider, and complain to the data protection authority where you live.
United States: ad cookies on our site count as "sharing" under some state laws. To opt out, use the Do Not Sell or Share My Personal Information link in the footer, or send a Global Privacy Control signal. You can also ask to know, access, correct or delete your information by emailing hello@contentformula.com, and appeal if we refuse.
Canada and Quebec: the person responsible for personal information can be reached at hello@contentformula.com. Your information may be stored outside Canada, mainly in the UK and the US. You can complain to the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d'accès à l'information.
Australia: we may disclose your information to providers in the UK and the US. To access or correct it, or to complain, email hello@contentformula.com. If you're not satisfied with our reply, contact the Office of the Australian Information Commissioner.
New Zealand: if we get your business contact details from LinkedIn or from HubSpot's data services, we'll tell you when we first contact you. You can complain to the Office of the Privacy Commissioner.