Privacy notice.
What we collect when you visit this site or contact us, why, who else sees it, how long we keep it, and the rights you have under the EU General Data Protection Regulation (GDPR).
Last updated 4 October 2026
In short
- We collect only what you send us through the contact form or by email, plus the technical data every website needs to work and stay secure.
- We use it to reply to you and to protect the site. We do not sell it, profile you, or use it for advertising.
- The site has no analytics, no advertising trackers and no tracking cookies, so there is no cookie banner to accept.
- You can ask to see, correct or delete your data at any time by writing to info@morainesystems.com.
Who is responsible for your data
Moraine Systems is the controller of the personal data described in this notice.
- Company
- Moraine Systems
- Registered address
- Provided on request until publication
- info@morainesystems.com
Write to the same address for any question about privacy or to use any of your rights.
What we collect and why
| What | Why | Legal basis (GDPR Art. 6) |
|---|---|---|
| Contact form: name, organisation, work email, role (optional), the request you choose and your message (optional) | To reply, arrange a walkthrough or discuss a pilot, as you asked | Steps you ask us to take before a possible contract (6(1)(b)); our legitimate interest in answering business enquiries (6(1)(f)) |
| Emails you send us, with whatever they contain | To reply and keep a record of the conversation | As above |
| Technical data: IP address, browser and device type, pages requested, date and time | To deliver the site, keep it secure and stop abuse | Our legitimate interest in running a secure website (6(1)(f)) |
| Spam check signals when you send the form (browser characteristics, IP address) | To tell people from automated spam, without puzzles | Our legitimate interest in keeping the form free of abuse (6(1)(f)) |
Please do not send special categories of data (for example health data) or any customer data through the form. You are not obliged to give us any data; without a name, organisation and email address we simply cannot reply.
Cookies and similar technologies
We do not use analytics, advertising or tracking cookies, and we do not place any cookie on your device when you browse the site. The spam check on the contact form runs only when you send it and is strictly necessary to provide the form you asked to use. Fonts and images are served from our own site, so loading a page does not send your IP address to font or image providers.
People we invite to review unpublished pages receive a single cookie that remembers the invitation for 30 days. It holds no personal data.
Who else sees your data
We use a small number of service providers who process data on our behalf, under contract and only on our instructions:
- Cloudflare, Inc. — hosts and protects the site and runs the spam check (Cloudflare Turnstile).
- Microsoft Ireland Operations Ltd — delivers and stores our email through Microsoft 365, including the messages sent from the contact form.
We do not sell or rent personal data, and we share it with others only where the law requires us to.
Transfers outside the European Economic Area
Cloudflare and Microsoft may process data in the United States or other countries outside the EEA. Where they do, the transfer is covered by the EU–US Data Privacy Framework, to which both are certified, and by the European Commission’s Standard Contractual Clauses in their data processing terms.
How long we keep it
- Enquiries and email — up to 24 months after our last contact with you, then deleted, unless we go on to work together. If we do, records are kept for as long as the contract runs and for as long afterwards as tax and company law requires.
- Technical and security data — kept by Cloudflare for a short period for security and operations, in line with its own retention.
Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you and receive a copy;
- have it corrected if it is wrong, or deleted;
- restrict how we use it, or object to our using it on the basis of legitimate interest;
- receive the data you gave us in a portable format.
Write to info@morainesystems.com. We will reply within one month and may ask you to confirm your identity first. It costs nothing.
If you think we have not handled your data properly, please tell us first so we can put it right. You also have the right to complain to a data protection supervisory authority, in particular in the EU country where you live, work, or where you believe the problem arose.
Automated decisions
We make no decisions about you by automated means, and we do not profile visitors.
Security
The site is served only over encrypted connections (HTTPS). Messages from the contact form travel encrypted to our Microsoft 365 mailbox, which is protected by multi-factor sign-in and limited to the people who need it.
Changes to this notice
If we change how we handle personal data we will update this page and the date at the top.