Your data, plainly.

Who we are

markmaynard.me is Mark Maynard's site. The data controller is Mayn Limited, registered in England and Wales, company no. 07609652. Contact: [email protected].

The contact form

What we keep: your name, email address, organisation (if you give it), your message and the language of the page.

Why: to read your message and reply. On what basis: our legitimate interest in answering you, and steps you ask us to take before any agreement.

Where it goes: our own system first, then a notification to Mark (Telegram and Slack) and our customer records (HubSpot). To help Mark reply, an AI service drafts a suggested answer from your first name and message only, never your email address or organisation; nothing is sent unless Mark approves it. Replies are sent by email.

A quick check: to help Mark judge an enquiry, we check whether the email address is from a free webmail service, whether its domain matches the organisation you name, and that organisation's entry in the public Companies House register (including whether your surname is among its listed officers). Only the results are kept.

Booking a call

What we keep: the time you ask for, your name, email address, organisation and phone number (if you give them), what you'd like to talk about and the language of the page.

Why: to arrange the call. On what basis: steps you ask us to take, and our legitimate interest in replying.

Where it goes: our own system; a notification to Mark (Telegram), with the same quick check as the contact form, so he can accept or decline; and Mark's Google Calendar, which is checked for free times and, once he accepts, holds the call with a Google Meet link (Google sends the invitation). Emails about your request are sent to you by email. If you are already in our customer records (HubSpot), the call is noted there.

Ask about my work (the chat)

What we keep: each question, the answer given, the time, the language and whether it was answered. Your email address only if you leave it when you choose "Ask Mark directly".

Who answers: an AI model, OpenAI's GPT-4o mini, hosted by Microsoft Azure and reached through OpenRouter. Each request is set to zero data retention: the provider does not keep it or use it for training. The model sees only your question and Mark's approved notes.

Mark sees it too: a copy of every question and the answer given goes to Mark (Telegram), and he may reply in the chat. "Ask Mark directly" sends your question to him; if you leave an email address, his reply is emailed to you and the address is used for nothing else.

Your browser holds a random chat id for the open tab only (session storage), gone when you close it. If the chat is misused, a scrambled (hashed) form of your network address may be kept to block it; the address itself is never stored. Please don't type anything sensitive.

On what basis: our legitimate interest in answering questions about Mark's work, and in improving the answers.

Counting visits, without cookies

We count visits without cookies or any storage in your browser: the pages read and for how long, the site you came from (its domain only), the language of the page, and your rough location (country, and sometimes region or city) from our network provider, Cloudflare. A random number links the events of one page view and is forgotten when you leave the page. Your IP address is not stored; it is used, scrambled, only to limit abuse, and then forgotten.

Mark may get a notification about a visit (for example when someone opens the booking page or reads a page for a minute or more) and a daily summary. Automated crawlers are not counted. Visit records are deleted after 90 days. On what basis: our legitimate interest in knowing how the site is used.

Google Analytics

Google Analytics cookies count visits and show which pages are useful. Nothing is set unless you press Accept on the cookie notice. Your choice is kept in your own browser (local storage), and you can change it at any time with Cookie settings. On what basis: your consent.

Cookies and storage, in one place

• mm-locale (cookie, one year): set only if you pick a language with the EN | ES switch, so the site remembers it.
• mm-consent (local storage): your answer to the cookie notice.
• Chat ids (session storage): for the open tab only.
• Google Analytics cookies: only if you accept.
• Cloudflare may set a strictly necessary security cookie to protect the site from abuse.

The page's fonts come from Google Fonts, so your browser connects to Google to fetch them. The WhatsApp and LinkedIn buttons take you to those services, whose own privacy terms apply.

Who handles it for us

• Cloudflare: carries traffic to the site and protects it.
• Our hosting provider: runs the server the site and its data live on.
• HubSpot: our customer records, for enquiries.
• Telegram and Slack: notifications to Mark.
• SMTP2GO: delivers our emails.
• Google: Calendar and Meet for booked calls; Analytics only if you accept; Fonts.
• OpenRouter and Microsoft Azure (OpenAI models): chat answers and suggested replies.

Some of these providers are based outside the UK, so your data may be processed abroad. We never sell your data or share it for anyone else's marketing.

How long we keep it

Visit records: 90 days. Enquiries, booking requests and chat questions: for as long as we need them to deal with you and any work that follows. Ask us and we'll delete them sooner.

Your rights

Under UK data protection law (the UK GDPR) you can ask to see, correct or delete what we hold about you, ask us to limit how we use it, object to how we use it, ask for a copy to take elsewhere, and withdraw consent at any time. Email [email protected].

If you're not happy with our answer, you can complain to the Information Commissioner's Office: ico.org.uk.

Last updated 30 October 2026.