Privacy Policy

100ftware LLC operates 100ftware.com. We are the controller of the personal data described in this policy, which means we decide why and how it is used. You can reach us at hello@100ftware.com.

When you submit our contact form we store the name, email address, company, budget range, and message you provide, the service or package you enquired about, and the page that referred you to us. We also record the date the enquiry arrived.

When you request a session or a review on one of our booking pages we store the name, email address and phone number you give us, the package you asked about, any links you choose to share (LinkedIn, GitHub, CV, portfolio), your message, your timezone, the dates and time windows that suit you, and your answers to the few questions that package asks. We also record the date the request arrived and the page you came from.

If you apply for a job with us we store the name, email address, phone number and location you provide, the links you give us (CV, LinkedIn, portfolio), your covering note, the role you applied for, and the date the application arrived. We also keep internal notes made while reviewing it, which you are entitled to see — see your rights.

We do not accept or store CV files. Our forms ask for a link to a document you already host, so your CV stays where you put it and under your control. There is no upload box anywhere on the public site.

Those three forms — contact, booking, and job application — are the entire set of personal data this website collects from you. We do separately hold business contact details for companies we approach, which we did not get from you and which are described in businesses we contact.

Your IP address is held in memory for about a minute to rate-limit our forms and the blog's view counter against abuse. It is never written to our database and never linked to your enquiry.

We do not run analytics, advertising, or session-recording software on this site. There is no tracking pixel, and no third party is watching you browse it.

Solely to answer your enquiry and, if we go on to work together, to administer that relationship. We do not sell your personal data, we have never sold it, and we do not add you to a marketing list unless you ask us to.

Where European or United Kingdom data protection law applies to you, our lawful basis is our legitimate interest in responding to people who contact us about our services, and — once we are engaged — the performance of a contract with you.

Not everyone in our records asked to be. We also approach businesses that look like they need what we build, and if you received an email from us without having contacted us first, this section is how you found out why. It is your notice under Article 14 of the UK and EU GDPR, which covers data we did not get from you.

Where it comes from. Public business listings — OpenStreetMap and the Google Places API — plus the company's own public website, and our own manual research.

What we hold. The business name and category, its website, the business email address and phone number it publishes, its postal address, city and country, sometimes a named contact where the business lists one, and our own notes about whether it looks like a fit. Almost all of this is company information rather than personal data, but a named contact or an email at a person's own name is personal data, and this policy covers it.

Why. Our legitimate interest in offering our services to businesses that appear to need them. We weighed that against your interests, which is why the list is built only from contact details published for exactly this purpose, and why one reply ends it permanently.

What we do not do. There is no tracking pixel in our email and we do not wrap the links in it. We cannot tell whether you opened it, and we do not want to know. We do not sell, rent, or share this list with anyone.

How to stop it. Every email we send carries a one-click unsubscribe link, and replying “no thanks” works just as well. Either one suppresses you immediately and permanently — no confirmation step, no second attempt, no other campaign. You can also email hello@100ftware.com and ask to be removed, or ask us to erase the record entirely, and we will.

The public pages of this site set no cookies at all. Nothing to consent to, and no banner asking you to.

One strictly necessary cookie is set for administrators who sign in to our internal dashboard. It holds a session token, cannot be read by JavaScript, is sent only over HTTPS, and expires automatically. If you have not signed in, you never receive it.

Your light or dark theme preference is saved in your browser's local storage. It stays on your device and is never transmitted to us.

We share your data with the providers below, each of which processes it only on our instructions and none of which may use it for their own purposes:

• MongoDB — the database that stores enquiries, booking requests, and job applications.
• Resend — sends our email: the alert to us when you submit a form, the confirmation back to you, and the outreach described above.
• Google Firebase — authentication for administrator sign-in. It never touches enquiry data.
• Cloudinary — stores the images published on this site, such as team photographs and article covers. Nothing you submit is uploaded to it.
• Google Places — looked up when we build the prospect list described above. It is never sent anything you submitted to us.
• Our hosting provider — serves these pages and processes request logs on our behalf.

Beyond those, we disclose personal data only when the law compels us to, or to establish or defend a legal claim. If our business is ever sold, enquiry data may transfer with it, and this policy travels with the data.

Our providers operate infrastructure in the United States and elsewhere, so if you contact us from outside the United States your data will be transferred there. The United States has not been found to offer the same level of data protection that your home country may require. Where European or United Kingdom law applies, we rely on the Standard Contractual Clauses that our providers incorporate into their terms as the safeguard for that transfer.

We retain an enquiry for as long as it takes to evaluate and service the relationship, and afterwards for as long as we may need it to defend a legal claim.

We keep an unsuccessful job application for 12 months from the date it arrives, so we can come back to you if a similar role opens, and then delete it. Tell us at any point that you would rather we did not, and we will remove it immediately. If we hire you, your application becomes part of your employment record and a different retention period applies, which we will give you in writing.

If you unsubscribe from our outreach we keep one thing indefinitely: your email address and the fact that you opted out. Deleting that record would put you back on the list the next time your business turned up in a search, which is the opposite of what you asked for. It is used for nothing else, ever.

You can ask us to delete your data sooner, at any time, and we will do so within 30 days unless the law requires us to keep it.

The site is served exclusively over HTTPS. The database is not exposed to the public internet, administrator access requires authentication, and the dashboard that displays enquiries is reachable only to signed-in administrators. No system is perfectly secure, so we will not promise yours is; we do promise to tell you without undue delay if a breach affects your data.

Wherever you live, you may ask us for a copy of the data we hold about you, ask us to correct it, or ask us to erase it. Email hello@100ftware.com and we will respond within 30 days. We will never charge you for asking, and we will never treat you differently because you did.

If you are in the European Economic Area or the United Kingdom, you also have the right to object to or restrict our processing, the right to receive your data in a portable format, and the right to lodge a complaint with your national supervisory authority.

If you are a California resident, the CCPA gives you the right to know what personal information we collect and why, to delete it, to correct it, and to opt out of its sale or sharing. We do not sell or share personal information as those terms are defined by the CCPA, and we do not use it for cross-context behavioural advertising, so there is nothing to opt out of.

This site sells business services and is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has sent us data, email hello@100ftware.com and we will delete it.

Our work, product, and social pages link out to sites we do not control. Following one of those links takes you somewhere governed by someone else's privacy policy, and this one stops applying the moment you leave.

If we change how we handle your data we will update this page and move the date at the top. Where the change is material and we hold an email address for you, we will tell you directly rather than relying on you to notice.

Questions about this policy, or about a request you have made under it, go to hello@100ftware.com. If our answer does not satisfy you, you are entitled to complain to your local data protection authority.