Privacy notice

This notice covers xmodo.com, the public website. It explains what personal data the website collects, why, and what you can ask us to do with it.

It does not cover the xmodo platform itself. Personal data inside a customer's xmodo account is processed under that customer's instructions, governed by the Data Processing Agreement rather than this notice.

The demo, contact and partner forms ask for your name, work email address, phone number and organisation. You may also choose a role, list the frameworks that apply to you, and write a message.

We also record which page you submitted the form from, and the date and time. That tells us what you were reading when you got in touch, so the reply is useful rather than generic.

Everything on those forms is information you type. We do not buy contact data, and we do not enrich what you give us from third-party databases.

We use your details for one purpose: to respond to your enquiry and, if you go ahead, to arrange and run the evaluation. The lawful basis is our legitimate interest in responding to a business enquiry you initiated, and where relevant, taking steps at your request before entering a contract.

We do not add you to a marketing list on the strength of a demo request, we do not sell your details, and we do not share them with anyone for their own marketing.

A submission is recorded on the server that runs this website and emailed to our team so someone can pick it up. Keeping both means an enquiry is not lost if mail delivery fails.

We keep enquiries for as long as the conversation is live, and for a limited period afterwards so we can pick up where we left off if you come back. When an enquiry is clearly finished and you have not become a customer, we delete it.

A small number of providers support the website. Amazon Web Services delivers our email, and processes a submission only in order to send it. Cloudflare sits in front of the site as a content delivery network and security layer, and sees the network information that any such service sees, including your IP address. Google Fonts serves the typefaces, which means your browser requests those files from Google and Google receives your IP address as part of that request.

These providers act on our behalf. None of them is permitted to use what they handle for their own purposes.

Our email provider processes data in the Asia Pacific (Mumbai) region. Cloudflare and Google operate global networks, so data may be handled outside the country you are in. Where that involves a transfer out of the UK, the EEA or the UAE, it relies on the transfer safeguards those providers publish, including standard contractual clauses.

Our servers keep standard request logs, which include IP addresses, so we can keep the site available and investigate abuse or faults. We keep them for a limited period and do not use them to build a profile of you.

You can ask us for a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it. You can also object to our use of it. Ask through the contact page and we will act without undue delay.

If you are in the UK or the EEA and you think we have handled your data badly, you can complain to your data protection authority. In the UAE, you may raise it with the relevant regulator for the jurisdiction that applies to you.

If we change what we collect or why, we will update this page and change the date at the top. We do not make a change retroactive.