YOUR INFORMATION

Privacy.
Clearly explained.

Website privacy notice · last updated 30 October 2026

Who we are

H&M Capital Ltd operates projectmatchday.com and is responsible for personal information used for this website and its correspondence.

Contact: developer@projectmatchday.com. This notice covers the informational website, not a future Project Matchday app.

Website visits and security

Our static website is hosted on Cloudflare Pages Free. Providing and securing it involves technical information such as IP addresses, requested pages, request times, browser/device information and security events. Cloudflare processes traffic and technical/security information as part of delivering and protecting its services. The records available and retained depend on the service and its configuration.

We have no website accounts, registration or newsletter forms, payments, advertising or analytics scripts, or features for collecting children’s information. We do not use optional tracking cookies. The website code does not use browser storage or set cookies.

Email enquiries

If you contact us, we use your email address, message, relevant headers and any attachments to respond and manage the enquiry. Cloudflare Email Routing forwards incoming messages to our existing Gmail account. Gmail receives the correspondence, and we currently send replies through Gmail. There is no website contact form.

Cloudflare and Google handle information in providing these services under the terms and privacy policies applicable to them. Please avoid sending passwords or unnecessary sensitive information, including information about children.

Why we use information

We rely on legitimate interests (Article 6(1)(f) UK GDPR) to operate a secure informational website, prevent misuse and answer ordinary enquiries. These are limited to the information reasonably needed for those purposes, with regard to your rights. We do not use enquiries to enrol you in marketing or create profiles.

Where we must handle statutory data-protection requests or meet a specific legal requirement, our basis is compliance with that legal obligation (Article 6(1)(c)).

How long we keep information

Correspondence is kept while needed to resolve the enquiry and reasonable follow-up, address relevant disputes or legal claims, or meet applicable legal duties. When information is no longer needed for those purposes, it should be deleted rather than kept indefinitely.

Technical logs and provider-held records follow the applicable service terms and settings. Archives, deleted items and backups may have separate lifecycles; deleting an email does not necessarily erase every provider-held copy immediately. You can ask us to delete information, and we will consider the request and explain any lawful reason for retaining it.

International processing

Cloudflare and Google operate internationally, so information may be processed outside the UK. Their published information describes transfer arrangements, including adequacy frameworks and contractual protections where applicable. This does not mean that every mechanism applies to every service or account.

For provider information, see Cloudflare’s privacy policy, its data-processing terms, and Google’s privacy policy and transfer-framework information. Contact us for information about the arrangements relevant to our use of these services and how to obtain details of applicable safeguards.

Your rights

Depending on the circumstances, you may request access, correction, deletion, restriction or portability of your personal information. You can object to processing based on legitimate interests. Rights are subject to their legal conditions and exceptions; proportionate identity checks may be needed. Use our contact address to make a request.

You can also complain to the Information Commissioner’s Office (ICO). You are welcome to contact us first, but this does not remove your right to complain.

Privacy.Clearly explained.