Privacy policy
This policy explains what personal information Mayfair MCT ("we", "us") collects when you use our website and software, what we do with it, and the choices you have. We aim to follow UK GDPR and the Data Protection Act 2018.
Who is responsible for your data
For account and billing information, we are the data controller. For the business records you and your team add to your workspace (contacts, sales, files and so on), you are the controller and we act as your processor, handling that data only to provide the service.
What we collect
- Account details: your name, email address, workspace name and a hashed password.
- Workspace content: everything you and your team enter or upload, such as contacts, transactions, listings, notes and files.
- Usage and security data: sign-in times, IP address, browser type and counts of features used, so we can keep the service secure and enforce plan limits.
- Billing details: handled by our payment provider. We do not store full card numbers.
How we use it
- To provide, secure and support the service.
- To take payment and send account emails such as password resets and invitations.
- To answer your questions to Elizabeth, our assistant, using your workspace records.
- To improve reliability and prevent abuse.
We do not sell your data and we do not use your workspace content to train AI models.
Who we share it with
We use a small number of providers to run the service, only for the purposes above:
- Cloudflare for hosting, storage and network security.
- Anthropic to power Elizabeth and document reading. Requests are sent only when you use those features.
- Stripe for payments.
- Resend or a similar provider for transactional email.
How long we keep it
We keep your workspace for as long as your account is active. If you cancel, your workspace stays read-only and exportable for a reasonable period, after which we delete it on request or as part of routine clean-up. Security logs are kept for up to 13 months.
Security
Passwords are salted and hashed. Data is encrypted in transit, workspaces are isolated from one another, and access is limited by role. No system is perfectly secure, so please use a strong, unique password.
Your rights
You can ask to access, correct, export or delete your personal data, object to or restrict how we use it, and complain to the Information Commissioner's Office (ico.org.uk). You can export your workspace yourself at any time from the Tools page.
Cookies
We use only the cookies needed to keep you signed in and secure. We do not use advertising or tracking cookies.
Contact
For privacy questions or requests, use our contact page.
Note: this policy is a plain-English starting point. Have it reviewed by a legal adviser before relying on it.