Last updated: 28 September 2026
1. Who we are
TodoSoftware Ltd (“TodoSoftware”, “we”, “us”, “our”) is a UK-based software development company operating this website at todosoftware.co.uk. We are the data controller for the personal information collected through this site.
Company registration number: [insert Companies House number]
ICO registration reference: [insert ICO registration number — register at ico.org.uk if not yet done]
Registered address: [insert registered office address]
Contact: info@todosoftware.co.uk
2. What personal data we collect
Contact form submissions — name, work email address, organisation name, phone number (optional), the sector you selected, and the content of your message.
Website analytics — if you accept analytics cookies via our cookie banner: pages visited, time on site, approximate location (country/region, not precise location), device and browser type, and referring website. This is collected via Google Analytics.
Security and fraud prevention — our website firewall (Wordfence) automatically logs IP addresses and request data for visitors to detect and block malicious traffic. This applies to all visitors regardless of cookie consent, because it is necessary for the security of our systems.
On-site feedback — if you respond to an on-page feedback prompt, we collect your free-text response and the page you were on when you submitted it.
We do not knowingly collect special category data (health, financial details, government ID numbers, etc.) through this website, and this site is not directed at children.
3. How we use it and our lawful basis
| What | Purpose | Lawful basis (UK GDPR Art 6) |
|---|---|---|
| Contact form data | Responding to your enquiry | Legitimate interests — necessary to run our business and answer enquiries you’ve initiated |
| Analytics cookies | Understanding site usage, improving the website | Consent — only runs after you accept our cookie banner |
| Security/firewall logs | Detecting and blocking malicious traffic | Legitimate interests — necessary for the security of our systems (UK GDPR recital 49) |
| On-site feedback | Improving our website content | Consent — you choose to submit it |
We do not use your data for automated decision-making or profiling, and we do not sell or rent your data to third parties.
4. Cookies
We use a cookie consent banner to obtain your permission before setting non-essential cookies, in line with the Privacy and Electronic Communications Regulations (PECR). Strictly necessary cookies (needed for the site to function and for security) are set regardless, as PECR permits. You can withdraw analytics consent at any time by clearing your cookie preference or via your browser settings.
5. Who we share data with
We use the following third-party processors, each bound to process data only on our instructions:
- Google Analytics (Google LLC) — anonymised analytics data, only with your consent. Data may be processed outside the UK; Google’s Data Privacy Framework certification and our analytics configuration are the safeguard for this transfer.
- Wordfence — security/firewall processing to protect this site.
- Our email provider, to receive and respond to contact-form enquiries.
We may disclose information if required by law or to protect our legal rights.
6. How long we keep it
Contact form enquiries: retained for up to 3 years from last contact, then deleted. Analytics data: retained per Google Analytics’ default retention (14 months) unless configured otherwise. Security logs: retained per Wordfence’s default configuration for threat-detection purposes.
7. Your rights
Under UK GDPR you have the right to: access the data we hold on you; have inaccurate data corrected; request erasure; restrict or object to processing; and data portability where processing is based on consent or contract. To exercise any of these, contact hello@todosoftware.co.uk — we’ll respond within one calendar month.
You can also complain to the Information Commissioner’s Office: ico.org.uk | 0303 123 1113.
8. Security
We use HTTPS/TLS encryption sitewide, a web application firewall (Wordfence), and access controls limiting who on our team can view enquiry data. No method of transmission over the internet is 100% secure — if you have concerns, contact us directly.
9. Changes to this policy
We may update this policy from time to time; the date above shows the last revision.