Privacy policy

Mothership ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This policy explains what we collect through this website, why we collect it, and the rights you have over it. It is written to meet the requirements of the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (GDPR) and the Data Protection Acts 1988–2018 in Ireland.

1. Who is responsible for your data

Mothership is the data controller for the personal data described in this policy. You can contact us about anything to do with your data at hello@mothershiptech.com.

2. The information we collect

We keep this to a minimum. We collect:

• Information you give us. If you use the contact form or email us, we receive your name, email address, company name, the nature of your enquiry and anything else you choose to include in your message.
• Technical information. Like most websites, our hosting environment records standard server log data — IP address, browser type and version, pages requested and timestamps — for security and to keep the site running.
• Cookies and similar technologies. This website sets no advertising or tracking cookies. See section 6 below.

We do not collect special category data through this website, and we ask that you do not send us any.

3. How and why we use it

What we use it for	Lawful basis
Responding to your enquiry and corresponding with you about it	Legitimate interests (responding to a business enquiry), and steps taken at your request before entering into a contract
Providing services if you become a client, and managing that relationship	Performance of a contract
Keeping the website secure, available and free from abuse	Legitimate interests (network and information security)
Complying with legal, tax and accounting obligations	Legal obligation

We do not use your personal data for automated decision-making or profiling, and we do not sell it to anyone.

4. Who we share it with

We share personal data only with service providers who help us run our business, and only as far as they need it:

• Form processing. Contact form submissions are delivered to us by a third-party form-handling service.
• Hosting. This website is hosted on infrastructure operated by our hosting provider.
• Professional advisers. Accountants, auditors, insurers and lawyers, where necessary.
• Authorities. Where we are required to disclose information by law, or to establish, exercise or defend legal claims.

Where a provider processes data outside the UK or the EEA, we rely on an appropriate safeguard — normally the UK International Data Transfer Addendum or the European Commission's Standard Contractual Clauses — together with a transfer risk assessment.

5. How long we keep it

Enquiries that do not lead to a project are kept for up to 24 months so we can pick up the conversation later, then deleted. If you become a client, we keep contract and project records for the duration of the relationship and for six years afterwards, to meet accounting and limitation requirements. Server logs are kept for a short period for security purposes and then rotated out.

6. Cookies

This website does not use cookies for advertising, analytics or tracking, so there is no cookie banner to dismiss. The only storage we rely on is that which the site itself needs to function. If that ever changes, we will ask for your consent first and this section will be updated.

7. Your rights

Under data protection law you have the right to:

• be informed about how your data is used (this policy);
• request a copy of the personal data we hold about you;
• ask us to correct data that is inaccurate or incomplete;
• ask us to delete your data where there is no good reason for us to keep it;
• object to processing based on legitimate interests;
• ask us to restrict processing while a concern is investigated;
• request portability of data you provided to us, where processing is based on consent or contract;
• withdraw consent at any time, where consent is the basis for processing.

To exercise any of these rights, email hello@mothershiptech.com. We will respond within one month. You will not normally be charged, though we may charge a reasonable fee for repetitive or manifestly unfounded requests.

8. Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls and least-privilege access to systems. No transmission over the internet can be guaranteed to be completely secure, but we will notify you and the relevant supervisory authority without undue delay if a breach affecting your rights occurs.

9. Complaints

If you are unhappy with how we have handled your data, please contact us first so we can put it right. You also have the right to complain to a supervisory authority — in the UK, the Information Commissioner's Office (ico.org.uk); in Ireland, the Data Protection Commission (dataprotection.ie) — or to the authority in your country of residence.

10. Changes to this policy

We may update this policy from time to time. Any changes will be published on this page with a revised date at the top.

11. Contact

For any question about this policy or your personal data, email hello@mothershiptech.com.