Last updated: 12 August 2026
This notice explains what happens to personal data when you use this website. It covers the website only. If you are a Waymark customer, the separate agreement and data processing agreement covering the platform apply to data you put into it.
Who we are
This site is operated by [COMPANY NAME], a company registered in England and Wales under number [COMPANY NUMBER], whose registered office is [REGISTERED OFFICE].
For anything in this notice, contact us at tgf@xpose.online.
We are the data controller for the personal data described below.
What we collect
If you book a demo or contact us, we collect what you put in the form — typically your name, email address, company name, and whatever you tell us about what you are trying to build. We use it to reply to you and to prepare for the conversation.
Server logs. Our hosting provider records standard request logs: IP address, the page requested, the time, the browser’s user-agent string, and the referring page. These are generated by the web server, not by anything on the page, and we use them to keep the site running and to investigate abuse.
That is all. This site sets no cookies, uses no analytics, embeds no tracking pixels, and loads no fonts, scripts or images from anyone else’s servers. Nothing on it profiles you or follows you to other sites.
Why we are allowed to process it
| What | Lawful basis (UK GDPR Article 6) |
|---|---|
| Replying to your enquiry | Legitimate interests — you asked us to |
| Following up on a demo you booked | Legitimate interests — responding to a commercial enquiry you initiated |
| Server logs | Legitimate interests — security and keeping the service available |
| Marketing emails to you afterwards | Consent, or the soft opt-in where you enquired about our services |
Where we rely on legitimate interests, we have considered whether our interest is overridden by your rights, and concluded it is not for these narrow purposes. You can object at any time — see below.
How long we keep it
- Enquiry and demo correspondence — for as long as we are in contact, and
for [24 months] after the last contact, then deleted.
- Server logs — [90 days].
If you become a customer, correspondence is kept for the life of the relationship and for six years afterwards, which is the period we may need it for tax and contractual records.
Who else sees it
- [HOSTING PROVIDER], who host the site and hold the server logs.
- Our email provider, which carries and stores correspondence.
Both act as processors under contract and may only use the data to provide their service to us. We do not sell personal data, and we do not share it with anyone for their own marketing.
If any provider stores data outside the UK, that transfer is covered by the UK International Data Transfer Addendum or adequacy regulations. Tell us at tgf@xpose.online if you want the current list.
Your rights
Under UK GDPR you can ask us to:
- give you a copy of the personal data we hold about you (Article 15);
- correct anything inaccurate (Article 16);
- delete it (Article 17);
- restrict how we use it (Article 18);
- send it to you or another provider in a portable format (Article 20);
- stop processing based on legitimate interests (Article 21) — including
stopping marketing, which we will always honour without argument.
Email tgf@xpose.online and we will respond within one month. There is no charge.
If you are not satisfied with how we have handled your data, you can complain to the Information Commissioner’s Office at https://ico.org.uk/make-a-complaint/, by phone on 0303 123 1113, or in writing to Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. We would rather you came to us first, but you do not have to.
Changes
If we change this notice we will update the date at the top. If a change materially affects how we use data you have already given us, we will contact you about it rather than relying on you noticing.