Privacy Policy

Last updated: 29 September 2026

Octacorp Holdings International Limited ("we", "us", "our") operates OCTA Cost. This policy explains what personal data we collect, why we collect it, how we use it, and the rights you have over it under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We are the data controller for the personal data described below.


1. Data We Collect

Account data: your name, email address, and password (hashed — we never see or store it in plain text).

Company & business data: company name, registration number, VAT/tax numbers, address, bank details, logo, and any authorised users you add.

Trade data you input: customer and supplier records, quotations, HS codes, item descriptions, values, duty and VAT rates, and shipment charges.

Payment data: we do not collect or store card numbers. Billing is handled entirely by Lemon Squeezy, our payment processor; we retain only your subscription status and billing reference.

Technical data: IP address, browser type, and basic usage analytics collected via Google Analytics, only once you have given cookie consent (see Section 6).


2. Why We Process Your Data

a) To provide the service — creating your account, running landed-cost calculations, and generating quotations (contractual necessity).

b) To process payments and manage subscriptions (contractual necessity).

c) To respond to support requests you raise via the Help section (legitimate interest).

d) To understand product usage and improve the service, only with your cookie consent (consent).


3. Where Your Data Is Stored

Your data is stored in Supabase (PostgreSQL), a secure cloud database provider. Row-level security policies ensure your data is only accessible to you and, where you've added them, your authorised company users. We do not sell your data, share it with third parties for marketing, or use it to train AI models.


4. Who We Share Data With

Supabase — database hosting and authentication.

Lemon Squeezy — payment processing for paid subscriptions.

Google Analytics — anonymised usage analytics, only after cookie consent.

We do not sell personal data to any third party. We may disclose data if required by law or to protect our legal rights.


5. How Long We Keep Your Data

We retain your data for as long as your account is active. If you delete your account from Settings, your account and all associated data (company profile, customers, suppliers, quotations, HS code data) are permanently and irreversibly deleted from our production database. We do not keep backups beyond our standard rolling backup window (30 days), after which deleted data is unrecoverable.


6. Cookies

We use strictly necessary cookies to keep you signed in and remember your theme preference — these do not require consent. We use Google Analytics cookies to understand how the site is used; these load only after you accept them via the cookie banner. You can withdraw consent at any time by clearing your browser's site data for octa-corp.com.


7. Your Rights

Under UK GDPR, you have the right to:

- Access the personal data we hold about you

- Correct inaccurate data (editable directly in Settings and Company Profile)

- Erase your data ("right to be forgotten") — use Delete My Account in Settings, or contact us

- Export your data in a portable format — contact support and we'll provide a data export

- Object to or restrict certain processing

- Lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk

To exercise any of these rights, email us at [email protected] or use the in-app Help section. We will respond within one month, as required by law.


8. Children

OCTA Cost is a business tool intended for use by adults acting on behalf of a company. It is not directed at children, and we do not knowingly collect data from anyone under 18.


9. Security

We use industry-standard measures to protect your data, including encryption in transit (HTTPS), row-level security policies restricting access to your own data, and hashed password storage. No system is 100% secure, and we encourage you to use a strong, unique password.


10. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email or an in-app notification at least 7 days before they take effect.


11. Contact & Data Controller

Questions about this policy or your data? Email [email protected].

Octacorp Holdings International Limited
Unit 82A, James Carter Road, Mildenhall,
Bury St. Edmunds, Suffolk, IP28 7DE
Company No. 16528746
Registered in England and Wales

Ready to get started?

Start your free 14-day trial. No credit card required.

OCTA Cost

Landed-cost, HS code and quotation software for importers and exporters.

Octacorp Holdings International Limited · Registered in England and Wales, Company No. 16528746 · Unit 82A, James Carter Road, Mildenhall, Bury St. Edmunds, Suffolk, IP28 7DE

© 2026 Octacorp Holdings International Limited. All rights reserved.