Privacy policy.

Who we are

Mashwork Ltd is a company registered in England and Wales, company number 15734456, with its registered office at 3rd Floor, 86-90 Paul Street, London EC2A 4NE, United Kingdom.

For the purposes of UK data protection law, Mashwork Ltd is the data controller for the personal data described in this policy. You can reach us at hello@mashwork.uk.

What this policy covers

This policy covers two things: this website at mashwork.uk, and the apps we publish under our own name on the App Store and Google Play.

It does not cover work we do inside a client's own systems. On client projects the client is usually the data controller and their own privacy notice applies. Where we handle personal data on a client's behalf we do so as a processor, under a written agreement with them.

This website

This website is a set of static pages. It has no accounts, no forms, no comments and no shopping basket. There is nothing to sign up to.

Cookies

We do not set cookies and we do not use local storage or any similar tracking technology. There is no cookie banner on this site because there is nothing to consent to.

Analytics and tracking

We do not use analytics, advertising pixels, session recording, fingerprinting or third-party tracking of any kind. We do not build profiles of visitors and we do not run automated decision-making.

Fonts and other third-party content

The fonts on this site are served from our own domain rather than a font network, so loading a page does not send your IP address to a third-party font provider. The site loads no third-party scripts, images, videos or embeds.

Server logs

Our hosting provider records standard technical information when a page is requested, which typically includes your IP address, the time of the request, the page requested, the referring page and your browser's user agent string. These logs exist to serve the site, keep it available and identify abuse or attacks.

We use these logs only for those purposes. We do not use them to identify individual visitors and we do not combine them with anything else.

Email you send us

If you email hello@mashwork.uk or support@mashwork.uk, we receive your email address, your name if you give it, and whatever you write. We use it to reply to you and, if it turns into a project, to run that project.

Please do not send us sensitive personal data, medical information, or client data by email unless we have agreed a secure route for it first.

Our apps

Each app we publish has its own entry on the App Store or Google Play, and that listing carries the privacy details specific to that app. Where an app collects anything beyond what is set out below, its listing and an in-app notice say so before the collection happens.

Across all of our own apps, these commitments hold:

• We collect the minimum needed for the app to do its job.
• We do not sell personal data, and we never have.
• We do not use your data for advertising, and we do not share it with advertising networks or data brokers.
• We do not use your personal data to train machine learning models, unless you have separately and explicitly agreed to it.
• We do not track you across other companies' apps or websites.

Our legal bases for using your data

Under UK GDPR we have to have a legal basis for each use of personal data. Ours are:

Legitimate interests

Keeping the website available and secure, and replying to enquiries that you have chosen to send us. Our interest is in running and protecting the business, and we have considered that this does not override your rights.

Performance of a contract

Delivering a project you have engaged us for, and providing support for an app you use.

Consent

Anything you have specifically opted in to. Where we rely on consent you can withdraw it at any time.

Legal obligation

Keeping accounting and tax records that we are required by law to keep.

Who else sees your data

We keep the list of suppliers short. Personal data described in this policy may be handled by:

• Our website hosting provider, which serves these pages and keeps the server logs described above.
• Our email provider, which delivers and stores our email.
• Apple and Google, in respect of apps distributed through their stores, under their own privacy terms.
• Our accountants and professional advisers, where required.

These suppliers act on our instructions and are not permitted to use your data for their own purposes. We do not sell personal data and we do not share it for anyone else's marketing.

We may disclose personal data if we are legally required to, for example in response to a valid court order.

Transfers outside the UK

Some of our suppliers operate outside the United Kingdom. Where personal data is transferred outside the UK, we rely either on UK adequacy regulations covering the destination country, or on the UK International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses.

How long we keep things

Server logs

Kept for a short period by our hosting provider for security and diagnostics, then deleted.

Email correspondence

Enquiries that do not become projects are deleted within two years. Project correspondence is kept for the life of the engagement and then for six years, to cover the limitation period for contractual claims.

Accounting records

Six years after the end of the accounting period, as UK law requires.

App data

As stated in the relevant app's listing and in the section above.

Your rights

Under UK data protection law you have the right to:

• Ask what personal data we hold about you and get a copy of it.
• Have inaccurate data corrected.
• Ask us to delete data, where we have no overriding reason to keep it.
• Ask us to restrict how we use it, or object to our use of it where we rely on legitimate interests.
• Receive data you gave us in a portable format, where that right applies.
• Withdraw consent, where we relied on consent.

Email hello@mashwork.uk to exercise any of these. We will reply within one month. There is no charge.

If you are not happy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint, or by calling 0303 123 1113. We would rather you raised it with us first so we can put it right.

Children

This website is not directed at children and we do not knowingly collect personal data from children through it. Where one of our apps is intended for or likely to be used by children, its listing says so and it is built to the Age Appropriate Design Code.

Security

The site is served over HTTPS. We keep the number of systems holding personal data small, use multi-factor authentication on the accounts that matter, and do not copy client or user data onto local machines without a reason.

No system is perfectly secure. If we ever suffer a breach that is likely to risk your rights, we will notify the Information Commissioner's Office within 72 hours and tell you directly where the law requires it.

Changes to this policy

If we change this policy we will update the date at the top of the page. Where a change materially affects how we use your personal data we will say so here rather than change it quietly.

Contact

General and data protection enquiries: hello@mashwork.uk
App support: support@mashwork.uk

Mashwork Ltd, 3rd Floor, 86-90 Paul Street, London EC2A 4NE, United Kingdom.