Legal

Privacy Policy

How Matryxsoft UK Limited collects, uses and protects personal data, and the rights you have over it under the UK GDPR.

Last updated

Section 01

Who we are

Matryxsoft UK Limited ("Matryxsoft", "we", "us") is the data controller for the personal data described in this policy. We are a software engineering company registered in England and Wales.

Matryxsoft UK Limited

29 Runcie Court, Barkingside

Ilford IG6 1GF

United Kingdom

Email: [email protected]

Phone: +44 7778 635225

If you have any question about this policy or about how we handle personal data, email us at [email protected]. We aim to respond within five working days.

Section 02

What this policy covers

This policy explains what personal data we collect through matryxsoft.co.uk, why we collect it, and what rights you have over it. It also covers the personal data we process about clients, prospective clients and business contacts in the course of our work.

It does not cover data we process on behalf of a client as their processor — that is governed by the contract between us and that client. Nor does it cover Tracsens or any other product we operate under a separate agreement.

Section 03

What we collect

Information you choose to give us

This website has no contact form, no account sign-up and no newsletter. The only way to reach us through it is the email address and phone number we publish. If you contact us, we receive whatever you send: typically your name, your email address or phone number, and the content of your message.

Information collected automatically

Our web server keeps standard access logs. Each entry records the IP address of the request, the browser user-agent string, the page requested, and the time of the request. We use these only to keep the site running and to investigate faults or abuse. We do not use them to build a profile of you, and we do not try to identify you from them.

Cookies and tracking

This website sets no cookies and runs no analytics or advertising trackers. There is no Google Analytics, no tag manager, no advertising pixel and no session storage. That is why you are not seeing a cookie banner — we have nothing to ask your consent for.

Third-party requests

Viewing this site sends no request to any third party. Every asset — the typeface, the images, the stylesheet and the scripts — is served from our own domain. There is no content delivery network, no embedded video or map, and no externally hosted font. No other company learns that you visited us.

Section 04

Why we use it, and our lawful basis

Under the UK GDPR we must have a lawful basis for each purpose we process personal data for. Ours are set out below.

PurposeData usedLawful basis
Responding to an enquiry you send usYour name, email address, phone number, and whatever you choose to put in your messageLegitimate interests — to answer people who contact us; or taking steps at your request before entering a contract
Delivering services under a contractBusiness contact details, project correspondence, and any material you share with usPerformance of a contract
Keeping the website available and secureIP address, browser user-agent, requested URL, timestamp (web server logs)Legitimate interests — diagnosing faults, and protecting the site against abuse
Meeting our legal and accounting obligationsTransaction and correspondence recordsCompliance with a legal obligation

Where we rely on legitimate interests, we have considered whether those interests are overridden by your rights, and concluded they are not. You can object to that processing at any time — see Your rights.

We do not sell personal data, and we do not use it for automated decision-making or profiling.

Section 05

Who we share it with

We do not sell, rent or trade personal data. We share it only where we need to:

  • Matryxsoft Tech LLP — our delivery partner in Bangalore, India. Where a project is delivered jointly, project correspondence and any material you share with us may be accessible to their team. See International transfers.
  • Service providers — the companies that host this website, provide our email, and supply the business tools we use. They act on our instructions and may not use your data for their own purposes.
  • Professional advisers — our accountants, auditors and lawyers, where they need the information to advise us.
  • Authorities — where we are required to disclose information by law, or to establish, exercise or defend legal claims.

Section 06

International transfers

We work with Matryxsoft Tech LLP in India, so some personal data may be transferred outside the United Kingdom. India is not currently covered by UK adequacy regulations, which means we may not rely on an adequacy decision alone.

Where we make such a transfer, we put an appropriate safeguard in place as required by Article 46 of the UK GDPR — in practice the International Data Transfer Agreement, or the UK Addendum to the European Commission's standard contractual clauses — together with a transfer risk assessment. You can ask us for details of the safeguard that applies to your data by emailing [email protected].

Section 07

How long we keep it

We keep personal data only as long as we need it for the purpose we collected it for, then delete it or anonymise it.

  • Enquiries that do not become projects: up to 12 months from our last exchange, so we can pick up the thread if you come back to us.
  • Client records and project correspondence: for the life of the contract, then up to 6 years, which is the limitation period for bringing a contract claim.
  • Records we keep for tax and accounting: 6 years from the end of the accounting period, as required by law.
  • Web server access logs: up to 90 days.

Section 08

How we protect it

This site is served over HTTPS. We apply access controls, encryption in transit, and the security practices you would expect of an engineering company to the systems that hold personal data, and we restrict access to the people who need it to do their jobs. No method of transmission or storage is completely secure, so we cannot guarantee absolute security — but if a breach occurs that is likely to risk your rights and freedoms, we will report it to the Information Commissioner's Office within 72 hours, and tell you directly where the risk to you is high.

Section 09

Your rights

Under the UK GDPR you have the following rights over your personal data. They are not absolute, and whether each one applies depends on the lawful basis we rely on.

Access

Ask for a copy of the personal data we hold about you.

Rectification

Ask us to correct data that is inaccurate or incomplete.

Erasure

Ask us to delete your data where we have no overriding reason to keep it.

Restriction

Ask us to pause our use of your data while a concern is resolved.

Portability

Receive the data you gave us in a structured, machine-readable format.

Objection

Object to processing we carry out on the basis of legitimate interests.

To exercise any of these, email [email protected]. We will respond within one month. Exercising your rights is free, and we will not treat you differently for having done so. We may ask you to confirm your identity before we act on a request.

Section 10

Complaints

If you are unhappy with how we have handled your personal data, please tell us first so we can try to put it right. You also have the right to complain to the UK supervisory authority at any time.

Information Commissioner's Office

Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

Helpline: 0303 123 1113

ico.org.uk/make-a-complaint

Section 11

Children

This is a business-to-business website. It is not directed at children, and we do not knowingly collect personal data from anyone under 18. If you believe a child has given us personal data, email [email protected] and we will delete it.

Section 13

Changes to this policy

We may update this policy as our services or the law change. The date at the top of this page tells you when it last changed. If a change materially affects how we use your personal data, we will take reasonable steps to bring it to your attention. Please check back periodically.

Questions about this policy, or want to exercise one of your data rights? Write to us and a person will read it.

Get in touch.