Privacy Policy
Data controller: Mokimo Ltd — Company No. 17139363, registered in England and Wales.
Registered office: The Workstation, 15 Paternoster Row, Sheffield S1 2BX
Contact: hello@mokimo.co.uk
1. Data Collection and Processing
This tab covers personal data processed when you browse this website as a visitor — page requests, technical logs, and anything you submit through the contact form. If you are a client, prospective client, or otherwise in direct contact with Mokimo Ltd about a project, the wider processing described in the Clients & enquiries tab also applies to you.
We process limited personal data when you visit our website to ensure its security, stability, and correct presentation.
| Category | Data Points | Purpose | Legal Basis | Retention |
|---|---|---|---|---|
| Technical Logs Automated server-side records |
IP address, browser user-agent, device type, requested URI, timestamp, and HTTP response code. | Security monitoring, fraud prevention, and technical diagnostics. | Legitimate interests (Art. 6(1)(f) GDPR) — maintaining a secure and functional service. | 90 days. |
| Contact enquiries Website contact form or email |
Name, email address, company (optional), and message content. | Responding to business enquiries and assessing potential engagements. | Legitimate interests (Art. 6(1)(f) GDPR) — operating a consultancy and responding to prospective clients. Consent is not required where you initiate contact. | 2 years from last contact, unless a client relationship is established. |
| Content Delivery External asset requests (Google Fonts) |
IP address (processed by the CDN provider to deliver font files). | Consistent and legible rendering of website typography. | Legitimate interests (Art. 6(1)(f) GDPR) — providing a professional and accessible user interface. | Subject to provider policy. |
This website does not use cookies, tracking pixels, or third-party analytics suites for visitor measurement. If you email us or book a call, the information you provide is handled as described in the relevant sections of this policy.
2. Data Hosting and Location
Our website is hosted on GitHub Pages infrastructure. Server-side technical logs may be processed by GitHub in connection with delivery and security. Our primary business systems (CRM, email processing, and document management) run on private, UK-based infrastructure.
3. Third-Party Processors
GitHub, Inc. (GitHub Pages): Hosts the static website files. May process IP addresses and request metadata for content delivery. See GitHub’s Privacy Statement.
Google LLC (Google Fonts): We load typefaces from fonts.googleapis.com. Google acts as a data processor. This may involve the transfer of your IP address to servers in the United States. Such transfers are governed by the UK–US Data Bridge and Google’s Privacy Policy.
No other third parties are granted access to personal data arising from your use of this website.
4. Data Subject Rights
Under the UK GDPR and the Data Protection Act 2018, you possess the following rights regarding your personal data:
- Right of Access — to request a copy of the data we hold.
- Right to Rectification — to request correction of inaccurate data.
- Right to Erasure — to request deletion of data under certain conditions.
- Right to Restriction — to request a pause in data processing.
- Right to Object — to object to processing based on legitimate interests.
To exercise these rights, please contact us at hello@mokimo.co.uk. We aim to respond to all requests within 30 days.
5. Regulatory Authority
If you believe our processing of your data infringes upon data protection laws, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
- Website: ico.org.uk
- Telephone: 0303 123 1113
1. Scope of Processing
This tab applies to personal data processed during business development, enquiries, and client engagements — for example, if you contact us about a project, become a client, or are a contact at a supplier or partner organisation. This is distinct from, and in addition to, the general website-browsing data described in the Website visitors tab. Use of this website is also governed by our Terms of Service.
2. Third-Party Processors
We engage the following service providers to facilitate our business operations:
| Provider | Processing Activity | Legal Basis | Retention |
|---|---|---|---|
| Microsoft Corporation Microsoft 365, Exchange Online & SharePoint |
Email communications, calendar scheduling, and document storage (including SharePoint) for business operations. Our internal services receive notifications and read/write business documents via Microsoft Graph. | Contractual necessity (Art. 6(1)(b)) and Legitimate interests (Art. 6(1)(f)). | 2 years post-engagement, or as required for legal and accounting purposes. |
| OpenRouter Inc. AI inference routing |
Routing of prompts to language models for internal email classification, analysis, and workflow assistance. Depending on routing configuration, the underlying model may be provided by a range of AI labs; OpenRouter is our direct processor in each case. Sensitive content is filtered before transmission where possible. | Legitimate interests (Art. 6(1)(f)) — operating efficient internal workflows. | Zero Data Retention (ZDR) enforced on supported models. |
| Apollo.io, Inc. Business intelligence |
Sourcing of professional contact information for outbound business development. | Legitimate interests (Art. 6(1)(f)) — identifying potential commercial partners. | 2 years from last contact. |
| Brave Software, Inc. Web search API |
Automated web lookups to identify an unfamiliar sender's company or verify publicly available details (e.g. a company website) during enquiry triage. Only limited identifiers are sent (such as a name or company). | Legitimate interests (Art. 6(1)(f)) — accurately identifying business correspondents. | Not retained by us beyond the processing session; subject to Brave's own policy. |
| Revolut Ltd Business banking & payments |
Processing of business bank transactions, invoicing, and payment reconciliation, including counterparty names and payment references. | Contractual necessity (Art. 6(1)(b)) and Legal obligation (Art. 6(1)(c)) — accounting records. | 7 years, in line with UK statutory accounting requirements. |
| Self-hosted ERP (Frappe/ERPNext) UK private infrastructure |
CRM records, communications, appointments, contracts, and project documentation. | Contractual necessity (Art. 6(1)(b)) and Legitimate interests (Art. 6(1)(f)). | Duration of client relationship plus statutory retention periods. |
Data transfers to providers outside the UK are protected by Standard Contractual Clauses (SCCs), the UK International Data Transfer Agreement (IDTA), or equivalent mechanisms. We enforce Zero Data Retention policies where possible for AI-assisted processing. Formal Data Processing Agreements with subprocessors are maintained as part of our compliance programme. AI inference for internal workflows is also partly handled by our own self-hosted models running on private infrastructure, which are not third-party processing.
3. Internal Data Management
We use self-hosted systems (ERPNext on private UK infrastructure) for CRM, workflow automation, and document management. An internal email-processing service classifies inbound and outbound mail via Microsoft Graph, reconciles business banking via Revolut, and may use AI-assisted tools (routed through OpenRouter, or run on our own self-hosted models) to enrich records. Automated filtering is applied to reduce transmission of sensitive content to external inference providers.
4. Automated Processing
While we use automated tools to assist in our workflows, all significant decisions are subject to human review. We do not engage in solely automated decision-making that carries legal or similarly significant consequences for individuals.
5. Your Rights
In addition to the rights listed in the Website Visitors section, you may also have the Right to Data Portability, allowing you to receive your data in a structured, machine-readable format. Requests should be directed to hello@mokimo.co.uk.
6. Right to Complain
You maintain the right to contact the Information Commissioner’s Office (ICO) regarding our handling of your business or client data. We encourage you to contact us first so we may address your concerns directly.