Privacy notice

Mandate is run by Conor Hannon-Healy in London, who is the controller for the personal data described here. For anything on this page, including a request to see, correct or delete your data, email conor@mandates.cc.

This website sets no cookies and runs no advertising trackers. Cloudflare, which serves the site, processes the technical details of each request, such as your IP address and browser, to deliver pages and protect the site from attack.

To see which parts of the home page are useful, it records a summary of each visit: when the visit started, how far down the page you read and for how long, which sections you saw, which parts you used (the book buttons, the "what do you sell" switch and what you chose on it, the tour of the app and its tabs, the calculator, the end of the proof sequence, the sample brief, and whether you started or sent the booking form), the website that sent you, any campaign tags on the link, and whether your screen is a phone, tablet or computer. The summary carries a random number for that one visit. It holds no IP address, no browser details and no cookie, and nothing is stored on your device to make it. It does not name you, with one exception below. We keep summaries for 12 months.

We rely on our legitimate interest in understanding which parts of the site are useful. Under the UK's rules on storage and access technologies, statistics like these are allowed as long as you can object simply and for free: use the switch below, or turn on your browser's Global Privacy Control or Do Not Track, and nothing is recorded.

The exception: if you arrive through a link we made for your company (one that ends in ?for= and a code), the page greets your company by name, the summary records which link it was, and we are told when the page is opened, as with a brief. Because we know who we sent that link to, those summaries can be linked to you. We rely on our legitimate interest in knowing when to follow up. Opening the page is enough to tell us; the switch above and the browser settings stop the summary.

The form asks for your name, your work email and at least one firm you want to be in front of, and optionally your company and two times that suit you. It also records which of bond trustee, loan agency, escrow or something else you chose. We use these to arrange the call, run it on the firms you named and follow up on it, and for nothing else.

We use them because you asked us to arrange the call, and on our legitimate interest in following up with you about it.

When you send the form, Conor gets an email saying a request arrived. It names your company (or the domain of your email address), how many firms you listed, what you sell and whether you came through a link we made for you, but not your name or address. The request itself is kept by Cloudflare, which hosts this site and sends that email.

The copy on the site is deleted automatically 12 months after you send it. If you become a customer, what we need moves into your workspace and is covered by your customer agreement. Ask at any time and we will delete your request sooner.

A brief is a private page at an address that cannot be guessed, made for one reader. When a brief page is opened we record the time, an approximate location (town and country), the network it was opened from and the type of browser, and tell the person who sent it, so they know when to follow up. We do not record your IP address against the brief, and nothing is stored on your device.

We keep these records for 12 months. A brief page stops working 60 days after it is shared, or sooner if you ask.

A brief names people at the law firms, funds and banks that its reader works with, so the reader knows who to talk to. For each person it shows their name, job title, firm, office and practice area, a link to the page on their employer's public website where those details appear, and a short note on why they may be relevant. It does not show their email address or phone number unless the brief was made for use inside the reader's own firm.

We do this on the basis of legitimate interests: ours and the reader's, in finding the right professional contacts for their business. A brief is shared only with the person it was made for and, like every brief, stops working after 60 days.

If you would rather not be named, email conor@mandates.cc. We will take you out of any brief that is still up and will not name you in future ones.

If you are named in the workspace of a firm that uses Mandate, that firm decides how your details are used. Email us and we will pass your request to them and help them deal with it.

Mandate contacts a small number of people at trustee, agency and escrow firms about its service. We find their name, job title and firm on their employer's website. We use the work email address the firm publishes; where it does not publish one, we may work out the likely address from the firm's own email format. We rely on our legitimate interest in telling relevant businesses about a service that fits their work.

We only send marketing email to people at companies and limited liability partnerships, never to sole traders or ordinary partnerships, and never to a personal address. Every email says who we are and how to stop further messages. We do not buy contact lists.

We hold your name, work email, job title, firm, the page we found them on, and notes of any conversation we have with you. If you do not reply, we delete your details within 12 months of our last message.

To stop hearing from us, reply "no thanks" or email conor@mandates.cc. We will not contact you again, and we keep only your email address on a do-not-contact list so it stays that way.

Cloudflare hosts this website, the brief pages, booking requests and visit summaries. When a brief is opened, an email with the reader's name as the sender entered it, the approximate location, the network and a link to the brief goes to the sender, sent by Cloudflare. Booking requests and pages made for you send a shorter email the same way, as described above. Email is handled by our email provider. Some of these providers may process data outside the UK. We do not sell personal data or share it for advertising.

You can ask to see the data we hold about you, have it corrected or deleted, object to how we use it, or ask us to stop using it while a question about it is settled. If you sent a booking request, you can also have a copy of it in a common format to take elsewhere. We will respond within one month. If you are not happy with our response, you can complain to the Information Commissioner's Office at ico.org.uk.