Privacy policy

How MAD DEVS Ltd collects and uses personal data.

Draft, updated from the iTrackLEADS policy of 18 November 2019. Before go-live: confirm the third-party list is still accurate (Zendesk, Capsule CRM and Mailchimp were named in the old policy), confirm the retention periods below match actual practice (the old policy said "indefinitely" in places, which is not defensible under UK GDPR), and have whoever owns data protection sign it off.

Who we are

MAD DEVS Ltd ("we") builds the Connect platform, including iTrackLEADS, iConvert, iStoreDOCS and Customer Portal. We are registered in England, company no. 11736413, VAT 318 2245 20, registered address 20-22 Wenlock Road, London N1 7GU. For anything in this policy, contact info@maddevs.co.uk.

This policy covers maddevs.co.uk and how we handle personal data as a business. It also explains where we sit when dealerships use our software. This policy previously lived at itrackleads.co.uk and istoredocs.com; those sites now redirect here.

When you visit this website

With your consent, we use Google Analytics to collect standard internet log information and to see how visitors move around the site. Nothing is collected unless you accept the banner, and you can use the whole site without accepting. Details are in the cookie policy.

When you request a demo or make an enquiry

The demo form collects your name, work email, company, an optional phone number and an optional message. We use these to arrange the demo you asked for and to follow up about Connect. Form submissions reach us by email via SendGrid (Twilio Inc.), which processes the message in order to deliver it. We keep enquiry details while we are in contact with you and for no more than two years after our last contact.

When you email or phone us

Email to and from us is monitored for security. Support requests are handled through our support desk and kept for as long as needed to resolve the issue and maintain a support history for your dealership. Calls to 0113 350 2020 may be answered by our team or a support partner, who collect what they need to deal with your enquiry.

When you contact us on social media

Messages sent to us on LinkedIn or other platforms are read and handled by us. The platform's own privacy policy also applies to anything you post there.

If you work for one of our customers

We hold business contact details for the people we work with at each dealer group (names, job titles, work emails and phone numbers) in our CRM. We use them to manage the account, provide support and send product updates. We keep them while your employer is a customer and remove them when told you have moved on, or on request.

If you apply to work with us

CVs and contact details are used to run the recruitment process, sometimes via recruitment agencies. If your application is unsuccessful we keep your details for one year in case a similar role opens, then delete them. Employment records for people who join us are kept for six years after employment ends, as required for tax and legal purposes.

If you make a complaint

We keep a file of the complaint and its resolution for six years after closure, in secure storage, so we can evidence how it was handled.

Inside the Connect platform

When dealerships use Connect, the dealership is the data controller for their customers' data and we are the data processor. What we do with that data is governed by our contract with the dealership, not by this policy. If you are a dealership's customer with a question about your data, ask the dealership; we will support them in answering it.

Legal bases

We process personal data where we have a contract to perform, a legal obligation to meet, a legitimate interest (such as answering an enquiry you sent us), or your consent (such as analytics cookies). Where we rely on consent, you can withdraw it at any time.

Who we share data with

Service providers who process data for us: SendGrid (form delivery), Google (analytics, with consent), our support desk and CRM providers, and recruitment agencies during hiring. If the business is ever sold or restructured, data may transfer to the new owners under the same protections. We disclose data where the law requires it. We do not sell personal data.

Security

Our information security management system is independently certified to ISO 27001. Access to personal data is restricted to the people who need it, and we have procedures for identifying, containing and notifying data breaches.

Your rights

Under UK GDPR you can ask for a copy of your data, have it corrected or deleted, restrict or object to its processing, take it with you in a portable format, object to direct marketing, and challenge decisions made solely by automated means. Email info@maddevs.co.uk and we will respond within one month. If you are unhappy with our answer, you can complain to the Information Commissioner's Office at ico.org.uk.

Changes

If this policy changes, the new version will appear here with a revised date.