PRIVACY & COOKIES
What this site collects, and why.
This is a marketing site. It is deliberately small: there is no account to create, no tracking pixel from an ad network, and no third-party script loaded unless you have said yes to it first.
Who is responsible
ViperCLM is the data controller for this website. You can reach us at jamie.campbell@viper-clm.co.uk about anything on this page, including any request to see, correct or delete what we hold about you.
The contact form
If you fill in the contact form we collect your name, email address, company (if you give one) and your message. We also record the IP address the submission came from, and include it in the email we receive.
We use it to answer you, and for nothing else. It is not added to a mailing list, not used for marketing, and not sold or shared with anyone beyond the mail providers listed below.
Legal basis: our legitimate interest in responding to enquiries about our product, and where relevant taking steps at your request before entering into a contract.
Anti-abuse
The form is rate-limited per IP address. Those counts live in memory only, cover a rolling hour, and are lost whenever the service restarts — they are never written to a database. The form also contains a hidden field that people never see; if something fills it in, the submission is discarded and nothing is sent.
Server logs
Like any web server, ours records requests: IP address, timestamp, the page requested, and your browser's user-agent string. The reverse proxy in front of it keeps its own equivalent log. These exist to keep the site running and to investigate faults or abuse.
Legal basis: our legitimate interest in operating and securing the service.
Analytics
We use Google Analytics 4 to understand which parts of this site people find useful. It does not run unless you accept it. Until you press Accept, no Google script is downloaded, no request is made to Google, and no analytics cookie is set. Declining is a real decline, not a "load it anyway without cookies" arrangement.
If you accept, Google Analytics sets the cookies listed below and collects pageviews and on-page interactions such as scrolling and clicks on outbound links. We have not enabled advertising features, Google Signals or ads personalisation, and advertising consent is left denied.
Legal basis: your consent. You can withdraw it at any time using the Cookies link in the footer — withdrawing also deletes the analytics cookies, rather than merely stopping further collection.
Cookies and local storage
| Name | Type | Purpose | Lifetime |
|---|---|---|---|
viperclm-consent |
Local storage | Remembers your analytics choice so we don't ask again. Strictly necessary — without it we could not honour a decline. | Until you clear it |
viperclm-theme |
Local storage | Remembers whether you chose day or night mode. | Until you clear it |
_ga |
Cookie | Google Analytics — distinguishes one visitor from another. Only set if you accept. | 2 years |
_ga_39P9J3NPH9 |
Cookie | Google Analytics — keeps session state for this property. Only set if you accept. | 2 years |
The two local-storage entries are settings rather than tracking: they stay on your device and are never sent to us or to anyone else.
Who else processes your data
- Brevo (Sendinblue SAS, France) — delivers contact-form email on our behalf. Your message and the details you entered pass through their relay. Data is processed in the EU.
- Google Ireland Ltd / Google LLC — Google Analytics, and only if you accept it. Analytics data may be transferred outside the UK/EEA; Google relies on Standard Contractual Clauses and the UK extension to the EU–US Data Privacy Framework for those transfers.
-
Google Fonts — the site's typefaces are served from Google's
font CDN, which means your browser makes a request to
fonts.googleapis.comandfonts.gstatic.comthat exposes your IP address to Google. This happens on page load, before any consent, because it is needed to render the page.
How long we keep it
- Contact enquiries: kept while we are in touch and for up to 24 months afterwards, so we have context if you come back to us.
- Server logs: retained short-term for troubleshooting and security, and not archived long-term.
- Analytics: Google retains event-level data for 2 months and user-level data for 14 months on this property. Aggregated reporting totals are not governed by those settings and are kept by Google for longer.
Your rights
Under UK GDPR you can ask us for a copy of what we hold about you, ask us to correct or delete it, ask us to restrict how we use it, object to processing we carry out under legitimate interests, and — where processing is based on consent — withdraw that consent at any time. Email jamie.campbell@viper-clm.co.uk and we will respond within one month.
If you think we have handled your data badly, you can complain to the Information Commissioner's Office at ico.org.uk. We would rather you told us first so we can put it right.
Changes
If we change what we collect or who processes it, we will update this page and the date at the top. If the change is significant and relies on consent, we will ask again.