Privacy notice

Draft — not yet in force.

This is a working draft, not legal advice and not a published notice. It sets out the structure and the factual claims we would need to stand behind, so that counsel has something concrete to review rather than a blank page. It must be reviewed and completed by a qualified legal adviser — and the factual gaps below filled in — before this page is published. The page carries noindex until then.

Two different things

This notice concerns this website — people who visit it or ask us for a demo.

It does not govern participant or specimen data held inside a customer's Specibo deployment. For that data the customer institution is the controller and Specibo acts only as a processor under a separate agreement; in on-premise and sovereign deployments we hold no access to it at all. Keeping these two apart is the single most important thing this notice has to do.

What we collect on this site

Demo and contact enquiries — the name, organisation, work email, country, type of collection and free-text description you submit. Stored in a Cloudflare D1 database operated by us.
Limited request context — the country your request came from and your browser's user-agent string, kept with the enquiry so we can identify automated abuse. We do not store your IP address. It is passed to Cloudflare Turnstile for the bot check and not retained by us.
Technical data — the request information any web server or CDN necessarily processes to serve a page.

The form is protected by Cloudflare Turnstile, a bot check that replaces a CAPTCHA. It is used only to tell a person from a script.

We use Cloudflare Web Analytics to count page views and see which pages are read. It sets no cookies, does not fingerprint your browser, and does not track you across other sites. It records the page address, referrer, and coarse device and country information. We cannot identify you from it, and it is not combined with anything you send us through the demo form.

No other analytics or advertising trackers run on this site, and the only cookies set are those strictly necessary to serve the page and run the bot check.

Why we use it

To respond to your enquiry and arrange a demonstration.
To keep the site available and secure.

We do not sell personal data, and we do not use enquiry details for unrelated marketing.

How long we keep it

We delete an enquiry twelve months after we receive it, whether or not a conversation followed. The country and browser information described above is kept for a shorter period — 90 days — because it exists only to help us spot automated abuse, and that purpose expires well before the enquiry does; after 90 days it is erased and the enquiry is kept without it.

Both are enforced automatically by a scheduled job, not by anyone remembering to run one. If a conversation becomes a customer relationship, any information we keep after that point is governed by the contract with that organisation, not by this notice.

Who processes it

Cloudflare, Inc. hosts this site, serves it through its network, stores enquiries in its D1 database service, provides the Turnstile bot check, and provides the Web Analytics described above. Cloudflare processes this data on our instructions.

To confirm before publication: the email provider used to reply to enquiries, and the Cloudflare data-location setting in force.

Your rights

Depending on where you are, you may have rights to access, correct, delete or restrict the use of your personal data, and to object to it or complain to a supervisory authority. Applicable frameworks are likely to include India's Digital Personal Data Protection Act 2023 and, for visitors in Europe, the GDPR.

To confirm before publication: which frameworks we assert, the identity and address of the data fiduciary/controller, and the contact route for requests.

Contact

Write to contact@machers.tech.