Trust centre / Privacy
Privacy, plainly.
What personal information we collect, why, who helps us process it, how long we keep it, and your rights under UK data protection law.
Last updated
Who we are
This notice covers mosh.co.uk. MOSH is a trading name of an independent sole trader based in the UK, who is the data controller for the personal information described here.
We don't publish a home address online. Our full name and a postal address are available on request.
Questions about this notice or your data: hello@mosh.co.uk.
What we collect
- When you contact us by form or email: your name, email address, organisation (if given) and whatever you choose to write.
- When you visit the site: the technical information every web request involves (such as IP address, browser type and the page requested). This is processed by our hosting provider, Cloudflare, to deliver the site and keep it secure.
- Spam protection on the contact form: Cloudflare Turnstile checks signals from your browser to tell people and bots apart. It doesn't use advertising cookies or track you across sites.
- Visit statistics: Cloudflare Web Analytics records which pages are viewed, the referring site, browser and device type, country and page speed, so we can see how the site is used. It doesn't use cookies or local storage, doesn't build a profile of you, and doesn't track you across other websites. We only see the totals.
We don't use advertising or social-media tracking, and we don't sell or share your information for marketing.
Why we use it, and our lawful basis
| Purpose | Lawful basis (UK GDPR) |
|---|---|
| Replying to your enquiry and discussing possible work | Legitimate interests, or steps at your request before entering a contract |
| Delivering and securing the website, and blocking spam | Legitimate interests in running a safe, reliable website |
| Understanding how the website is used, from cookieless visit statistics | Legitimate interests in improving the website |
| Keeping records where the law requires (for example, for tax) | Legal obligation |
Who processes it for us
- Cloudflare: website hosting and delivery, security, Turnstile spam protection, cookieless visit statistics (Web Analytics), and passing contact form messages to our inbox.
- Our business email provider, which stores the emails we send and receive.
We can tell you exactly which providers we use; just ask.
Some of these providers may process data outside the UK. Where they do, transfers are protected by appropriate safeguards, such as the UK International Data Transfer Addendum or an adequacy decision.
How long we keep it
- Enquiries and related emails: up to 24 months after our last contact, unless we go on to work together.
- Client records: for as long as the work lasts, then as long as the law requires (typically six years for financial records).
- Website and security logs: kept by Cloudflare for limited periods, under its own policies.
Your rights
You have the right to ask for a copy of your information, to have it corrected or deleted, to restrict or object to how we use it, and to data portability. To use any of these rights, email us about your data. We'll respond within one month.
If you're unhappy with how we've handled your information, you can complain to the Information Commissioner's Office at ico.org.uk. We'd appreciate the chance to put it right first.
Changes to this notice
If we change how we use personal information, we'll update this page and the date at the top.