Legal
Privacy notice
Last updated 26 October 2026
The short version
- The only personal data this site asks you for is what you type into the contact form: your name, your email address, what you are interested in, and your message.
- We use it to reply to you. We do not put you on a mailing list, we do not sell it, and we do not pass it to anyone beyond the services that carry the message to us.
- The site sets no cookies of its own and runs no analytics. Reading it sends nothing to any other company: the typefaces are served from this site rather than from Google, and the anti-spam check does not load until you start using the contact form.
- You can ask us what we hold, ask us to correct it, or ask us to delete it, by emailing privacy@statisfying.com. Deleting an enquiry needs no reason and we will confirm when it is done.
Who we are
Statisfying Ltd is the data controller for the personal data described in this notice. That means we decide what is collected and why, and we are the ones answerable for it.
- Registered name
- Statisfying Ltd
- Company number
- 17343447, registered in England and Wales
- Registered office
- 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom
- ICO registration
- Reference ZC224962
- Data protection contact
- privacy@statisfying.com
What this notice covers
This notice covers statisfying.com and the contact form on it.
It does not cover the data you work on inside HappyStats. That runs on your own machine, and your entity details, trial balances and finished accounts stay in your own files. There is no statisfying account and no statisfying server in the path, so we never receive them and there is nothing there for us to be a controller of.
HappyStats does send data out in places, but to parties you choose rather than to us. Your iXBRL goes to the Companies House filing gateway when you file. Your document goes to the Companies House validator if you switch that on. If you drive HappyStats with a cloud AI model, that provider receives whatever you pass it, on its own terms. In each of those you are the controller, and we are not in the path.
If an account layer is ever added to HappyStats, so that we do hold something of yours, this notice will say so before it goes live rather than after.
When you visit the site
The site is published with GitHub Pages, a service of GitHub, Inc. GitHub's documentation states that when someone visits a GitHub Pages site, the visitor's IP address is logged and stored for security purposes, whether or not they have a GitHub account. We do not see those logs.
We add nothing to them. There is no analytics on this site, no tracking pixel, no advertising and no third-party fonts: both typefaces are served from this domain rather than from Google Fonts. Reading a page makes no request to any other company at all, unless and until you start using the contact form.
Lawful basis: legitimate interests, UK GDPR Article 6(1)(f). The interest is keeping the site available and defended against abuse, which is hard to do without a server log.
When you use the contact form
What we collect. Your name, your email address, the option you picked under "I'm interested in", and your message. Nothing else is asked for and nothing else is collected. Leaving the form alone means we collect nothing from you at all.
Why. So that we can read your enquiry and reply to it.
Lawful basis. Legitimate interests, UK GDPR Article 6(1)(f): you asked us to get in touch, and a reply is the thing you asked for. Where an enquiry turns into us supplying HappyStats to you, we rely instead on Article 6(1)(b), steps taken at your request before entering into a contract.
What we do not do. We do not add you to a mailing list, we do not build a profile of you, we do not sell or share your details for anyone else's marketing, and no decision about you is made by automated means.
Who else handles it
Sending a message through the form means it passes through the services below before it reaches us. Each one acts on our instructions, under its own contract with us or with our provider.
| Who | What they do with it | Where | Transfer safeguard |
|---|---|---|---|
| Web3Creativetrading as Web3Forms | Receives the form submission and emails it to us, as our processor. Their published policy says submissions are deleted automatically within three years at the latest. | India, on infrastructure provided by Amazon Web Services, Cloudflare and Hetzner | Standard Contractual Clauses, under their data processing agreement |
| CleanTalk and Akismet | Spam filtering for Web3Forms. Your IP address and email address may be sent to them so that a real enquiry is told apart from an automated one. | Outside the UK | Web3Forms' agreements with them, under the same data processing agreement |
| Intuition Machines, Inc.hCaptcha | Runs the anti-spam check on the form, and loads only once you start using it. Collects your IP address, browser, device and operating system, and interaction signals such as mouse movement, scrolling and key presses, to judge whether you are a person. | United States | Standard Contractual Clauses, and the UK Extension to the EU-US Data Privacy Framework |
| GitHub, Inc. | Hosts and serves the site, and logs visitors' IP addresses for security. | United States | GitHub's own privacy statement and transfer terms |
Beyond these, your enquiry reaches our own email. We will share it further only if the law requires it of us, and we will tell you if that happens unless we are forbidden to.
Sending your data outside the UK
Every recipient in the table above is outside the United Kingdom, and the safeguard relied on for each is named in its row. Those safeguards are what UK GDPR Chapter V requires before personal data leaves the country.
If you want to see the safeguard that applies to a particular transfer, ask us at privacy@statisfying.com and we will point you at the document.
How long we keep it
- Enquiries that go nowhere. We keep the email for 24 months from the last time we heard from you, then delete it. You do not have to wait: ask and we will delete it sooner.
- Enquiries that become a customer relationship. The records belonging to that relationship are kept while it lasts, and then for six years from the end of the accounting period they fall in. That is the longer of the two periods a UK company works to: CA 2006 s.388 requires a private company to keep its accounting records for three years, and HMRC requires six.
- What the services above hold. Their own retention applies and we do not control it. Web3Forms deletes form submissions within three years at the latest. hCaptcha says it keeps no long-term data about the people it checks.
Your rights
Under the UK GDPR you can ask us to:
- give you a copy of the personal data we hold about you (Article 15);
- correct it, if it is wrong or incomplete (Article 16);
- delete it (Article 17);
- restrict what we do with it while something is in dispute (Article 18);
- hand it over in a portable form, to you or to someone else (Article 20);
- stop processing it altogether, since we rely on legitimate interests (Article 21).
Email privacy@statisfying.com. There is no charge, we will reply within one month, and you do not have to give a reason for asking us to delete an enquiry. We may ask you to confirm who you are first, which is a protection for you rather than an obstacle.
Cookies
This site sets no cookies of its own, on any page.
The contact form carries an anti-spam check, and that check does set cookies. hCaptcha sets a first-party cookie called hmt_id, which lasts 30 days, along with short-lived session cookies, so that it can tell people apart from bots.
It does not load until you use the form. Reading the site, the home page included, loads nothing from hCaptcha and sets no cookie at all: the check loads the moment you first hover over, tap or type into the form, and not before. Never touch the form and nothing is ever set.
Nothing on this site profiles you, and nothing follows you to other sites.
Complaints
If you think we have handled your data badly, tell us at privacy@statisfying.com and we will try to put it right.
You can also complain to the Information Commissioner's Office, the UK's data protection regulator, at ico.org.uk/make-a-complaint or by post to Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. It costs nothing, and you do not have to come to us first.
Changes to this notice
We will update this notice when what we do changes, and the date at the top will change with it. If we start doing something materially different with your personal data, we will say so here before we start, not afterwards.