This Privacy Notice explains how Mammoth Data (“Mammoth Data”, “we”, “us”) collects, uses, shares and protects personal information when you visit this website or contact us. It is intended to meet our obligations under the EU General Data Protection Regulation (“GDPR”), the UK GDPR, and the California Consumer Privacy Act as amended by the California Privacy Rights Act (together, “CCPA”).
1. Who we are
Mammoth Data is the controller (GDPR) and the business (CCPA) responsible for the personal information described in this notice. You can reach us at mail@mammothdata.com.
2. Information we collect
We collect only what we need to run this website and respond to you.
| Category | Examples | Source |
|---|---|---|
| Identifiers / contact details | Your name and email address | You, when you submit the contact form |
| Device and network information | IP address, browser type, operating system, date and time of access | Automatically, through our hosting provider and the services listed in section 4 |
| Internet or other electronic network activity | Interaction with the reCAPTCHA check (e.g. mouse movement, time on page) | Automatically, through Google reCAPTCHA |
| Communications | The content of any email you send us | You |
We do not knowingly collect sensitive personal information (such as government identifiers, financial account details, precise geolocation, health data or biometric data) through this website, and we do not use personal information to make decisions based solely on automated processing that produce legal or similarly significant effects for you.
3. How and why we use it
| Purpose | Information used | GDPR legal basis |
|---|---|---|
| Responding to your request for a trial installation and following up with you about it | Name, email address | Your consent (Art. 6(1)(a)), which you can withdraw at any time |
| Protecting the website and our forms from spam, fraud and abuse | Device, network and reCAPTCHA interaction data | Our legitimate interest in keeping our services secure (Art. 6(1)(f)) |
| Operating, delivering and troubleshooting the website | Device and network information | Our legitimate interest in providing a working website (Art. 6(1)(f)) |
| Responding to your questions and requests | Contact details, communications | Steps taken at your request (Art. 6(1)(b)) or legitimate interest (Art. 6(1)(f)) |
| Complying with the law and defending legal claims | Any of the above, as needed | Legal obligation (Art. 6(1)(c)) or legitimate interest (Art. 6(1)(f)) |
Contacting us is voluntary. If you do not provide your name and email address, we cannot respond to your request.
4. Who we share it with
We share personal information only with service providers that help us run this website, under contracts that limit their use of it:
- Google LLC / Google Ireland Ltd. — reCAPTCHA (spam protection) and Google Fonts (typefaces). Google receives your IP address and browser information when these load. See the Google Privacy Policy.
- Our website hosting provider, which processes server logs needed to deliver the site.
- Our email provider, which stores contact form submissions and emails you send us.
We may also disclose information where required by law, to protect our rights or the safety of others, or as part of a merger, acquisition or sale of assets, in which case this notice will continue to apply.
We do not sell your personal information and we do not “share” it for cross-context behavioral advertising, as those terms are defined under California law, and we have not done so in the preceding 12 months.
5. International transfers
Some of our service providers are located in, or process data in, the United States and other countries outside the EU/EEA and UK. Where personal information is transferred, we rely on an adequacy decision (including the EU–U.S. Data Privacy Framework and its UK extension, where the recipient is certified) or on the European Commission’s Standard Contractual Clauses (and the UK Addendum), together with any additional safeguards that are needed. You can ask us for a copy of the relevant safeguards using the contact details below.
6. How long we keep it
- Contact form data — until you ask us to delete it or withdraw consent, or until we no longer need it to handle your request, whichever comes first.
- reCAPTCHA and server log data — for the periods set by the respective providers and only as long as needed for security and troubleshooting.
- Communications — as long as needed to handle your request and meet our legal obligations.
7. Security
We use appropriate technical and organisational measures to protect personal information, including encrypted (HTTPS) connections and restricted access. No method of transmission or storage is completely secure, but we work to protect your information and will notify you and the authorities of a breach where the law requires it.
8. Your rights in the EU/EEA and UK
If the GDPR or UK GDPR applies to you, you have the right to:
- Access the personal information we hold about you and receive a copy;
- Rectify inaccurate or incomplete information;
- Erase your information (“right to be forgotten”);
- Restrict how we process your information;
- Data portability — receive your information in a structured, machine-readable format;
- Object to processing based on our legitimate interests, and to direct marketing at any time;
- Withdraw consent at any time, without affecting processing carried out before withdrawal;
- Lodge a complaint with your local data protection supervisory authority (in the UK, the Information Commissioner’s Office). A list of EU authorities is available from the European Data Protection Board.
We respond to requests within one month, which may be extended by two further months for complex or numerous requests; we will tell you if that happens.
9. Your rights in California
If you are a California resident, the CCPA gives you the right to:
- Know what personal information we have collected about you, including the categories, sources, purposes and recipients, and to receive the specific pieces of information;
- Delete personal information we have collected from you, subject to legal exceptions;
- Correct inaccurate personal information;
- Opt out of the sale or sharing of personal information. We do not sell or share personal information, but we honour opt-out preference signals such as Global Privacy Control (GPC);
- Limit the use of sensitive personal information. We do not collect or use sensitive personal information for purposes that would trigger this right;
- Non-discrimination — we will not deny you services, charge you a different price or provide a different quality of service because you exercised your rights.
Categories collected in the last 12 months. Identifiers (name, email address, IP address) and internet or other electronic network activity information, from the sources and for the business purposes described in sections 2 and 3, disclosed for business purposes to the service providers listed in section 4. Retention periods are described in section 6.
Authorised agents. You may use an authorised agent to submit a request on your behalf. We may ask the agent for proof of authorisation and ask you to verify your identity directly.
We respond to verifiable requests within 45 days, which may be extended by a further 45 days where reasonably necessary; we will tell you if that happens.
10. How to exercise your rights
Email mail@mammothdata.com with the subject line “Privacy request” and tell us which right you wish to exercise. To protect your information, we will verify your identity, usually by confirming your request from the email address you used to contact us. Exercising your rights is free of charge unless a request is manifestly unfounded or excessive.
To have your contact details deleted, simply email us and ask.
11. Cookies
We do not use advertising or analytics cookies. Google reCAPTCHA, which protects our contact form, may set or read cookies and similar technologies that are strictly necessary to tell humans and automated programs apart. Google Fonts does not set cookies but does receive your IP address when fonts load.
12. Children
This website is intended for businesses and organisations. It is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us and we will delete it.
13. Changes to this notice
We may update this notice from time to time. We will post the updated version on this page with a new effective date and, where changes are significant, let people who have contacted us know by email.
14. Contact us
For any questions about this notice or how we handle personal information, contact us at mail@mammothdata.com.