legal · privacy
Privacy policy.
Last updated: 22 April 2026 · Maploft Ltd, United Kingdom
Privacy isn't a policy we bolted on — it's a principle that shapes the software we build. This page explains what personal data Maploft Ltd ("Maploft", "we", "us") collects, why we collect it, and what rights you have over it.
01 / Who we are
Maploft Ltd is a software studio registered in the United Kingdom. For the purposes of UK GDPR and the Data Protection Act 2018, Maploft Ltd is the data controller for information we collect through this website and in the course of our client engagements.
02 / What we collect
We collect only what we need to do our work. That falls into three buckets:
- Contact enquiries — name, email address, and any message you send us via the contact form or by email.
- Client engagement data — information shared with us during the course of a project (names, business contacts, invoicing details, any data required to design and build your software).
- Basic server logs — anonymised request information (IP address, page, timestamp, user agent) retained briefly for security and fraud prevention.
We do not use advertising cookies, third-party analytics, session replay, or cross-site trackers on this website.
This policy covers the Maploft website and our direct engagement with clients. Products we build and operate — whether hosted for a client or published under our own name — have their own privacy policies that describe the specific data they process and any sub-processors involved.
03 / Why we use it
- To reply to your enquiry and discuss potential work.
- To deliver, support and maintain the software we build for you.
- To issue invoices and meet our legal accounting obligations.
- To keep this website secure and detect abuse.
04 / Legal basis
We rely on one of the following lawful bases for processing, depending on context:
- Legitimate interests — responding to enquiries you initiate, and keeping our systems secure.
- Contract — delivering the software and services agreed with a client.
- Legal obligation — retaining invoices and company records as required by UK law.
- Consent — where you've explicitly opted in to something specific.
05 / Where your data lives
For data we process directly — enquiries, client correspondence, invoicing — we keep it within the UK and EEA wherever technically possible. Where a supplier outside that region is genuinely needed (for example, app-store infrastructure, payment processing or purchase-entitlement services used by products we build), we rely on providers covered by the UK–US Data Bridge, Standard Contractual Clauses, or equivalent adequacy mechanisms, and we keep the amount of personal data transferred to a minimum.
06 / How long we keep it
- Contact enquiries that don't become projects: up to 12 months, then deleted.
- Client project data: for the duration of the engagement and up to 6 years after, to meet UK legal and accounting requirements.
- Server logs: up to 30 days.
07 / Your rights
Under UK and EU data protection law you have the right to:
- Access the personal data we hold about you.
- Correct anything that's inaccurate.
- Ask us to delete your data (subject to legal retention requirements).
- Restrict or object to certain kinds of processing.
- Receive a copy of your data in a portable format.
- Lodge a complaint with the UK Information Commissioner's Office (ICO).
To exercise any of these, email privacy@maploft.com. We reply to data requests within 30 days, usually much sooner.
08 / Cookies
This website uses no marketing or analytics cookies. We may set a single first-party cookie to remember display preferences (like theme) if you change them. That cookie holds no personal data and never leaves your browser.
09 / Children
Our services are aimed at businesses. We do not knowingly collect personal data from children under 16.
10 / Changes to this policy
If we change how we handle data, we'll update this page and change the "Last updated" date at the top. For material changes affecting active clients, we'll email you directly.
11 / How to contact us
Privacy & data requests: privacy@maploft.com
General enquiries: hello@maploft.com
Post: Maploft Ltd, Suite A, 82 James Carter Road, Mildenhall, IP28 7DE, United Kingdom · Company no. 17142711