Privacy policy

This policy covers mathersoftware.com only. Our products each run on their own domain and have their own privacy policy — this page does not describe what they collect.

Who we are

Mather Software Ltd is the data controller for personal data collected through this website. We are registered in England and Wales, company number 17443861. Our registered office is 31 Mill Fold Gardens, Littleborough, England, OL15 8SA. You can reach us at conor@mathersoftware.com.

What this site collects

There are exactly three things:

• Contact form submissions. When you use the form on this site we collect the name, email address, reason and message you type. We also store a one-way cryptographic hash of your IP address — not the address itself — purely to stop the form being abused. We cannot recover your IP address from that hash.
• Server logs. Our hosting provider records standard request logs, which include IP addresses, for security and troubleshooting.
• Page analytics. We use Vercel Web Analytics, which counts page views without cookies and without building a profile of you. It does not track you between websites. This is why you have not been shown a cookie banner: this site sets no cookies.

We do not use advertising trackers, we do not sell data, and we do not add you to a mailing list because you contacted us.

Why we are allowed to do this

For the contact form, our lawful basis is legitimate interests (UK GDPR Article 6(1)(f)): you asked us a question and we need your details to answer it. For server logs and analytics, our legitimate interest is keeping the site working, secure and worth running.

Who else sees it

We use a small number of processors, each doing one job:

• Vercel — hosting, request logs and analytics.
• Convex — the database your contact form submission is stored in.
• YourMail — sends us the notification email containing your message. YourMail is our own product; it delivers via Amazon SES.
• Google Workspace — the inbox your message lands in.

Some of these process data outside the UK. Where they do, transfers rely on the UK International Data Transfer Addendum or an adequacy decision.

How long we keep it

Contact form submissions are kept for 24 months, so we have a record of what was asked and answered, then deleted. IP hashes used for rate limiting are deleted with the submission they belong to. Server logs are kept for as long as our hosting provider retains them, typically 30 days.

Your rights

Under UK GDPR you can ask us for a copy of the personal data we hold about you, ask us to correct it, ask us to delete it, object to our processing it, or ask us to restrict processing. Email conor@mathersoftware.com and we will respond within one month.

If you are unhappy with how we have handled your data you can complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint. We would rather you told us first so we can put it right.

Children

This site is not aimed at children and we do not knowingly collect data from anyone under 13.

Changes

If we change this policy we will update the date at the top of this page.

See also our terms of service.