This policy explains how MAXFR LTD (“we”, “us”, “our”) collects and uses personal data when you visit maxfr.co.uk, contact us, use our tools, or buy from us under any of our trading names — including WarGameLLM. We are the data controller. We do not collect personal data for accounts, advertising or profiling. Like any website, essential hosting and security systems may process short-lived technical logs. We aim to collect as little as possible and to be straightforward about what we do with it.
Where one of our trading names runs its own website, that site publishes its own privacy notice for activity there — for example, wargamellm.com/privacy.html covers signing up for WarGameLLM updates. Those notices are consistent with this policy.
Privacy-first by design. This site uses no advertising trackers, no third-party analytics pixels, and no non-essential cookies. Our fonts and images are served from our own domain, our tools run in your browser, and we don’t run user accounts. We use essential security and delivery services (Cloudflare) to keep the site available and secure; like any website, these may process short-lived technical logs, which can include IP addresses.
When you buy from us, payment is handled by Stripe, so we never receive or store your full card details. We don’t sell your data, and we don’t show third-party advertising.
| Data | Why | Lawful basis |
|---|---|---|
| Enquiries — the name, email, company and message you send by email or through a form | To reply to you and manage any engagement that follows | Legitimate interests; contract where an engagement follows |
| Tool and diagnostic results you choose to send us | Our tools run in your browser and send nothing unless you email us or use the on-page form; we then use your results to respond | Legitimate interests |
| Email address (at purchase) | To deliver your purchase and send receipts and order-related messages | Contract |
| Name and billing details you give at checkout | To take payment, meet tax and accounting obligations, and prevent fraud | Contract; legal obligation; legitimate interests |
| Order and transaction records — what you bought, when, the amount, subscription status and your acceptance of our Terms of Sale | To provide the product, support you, keep proper business records and evidence our agreement | Contract; legal obligation |
| Support messages | To answer you and resolve issues | Legitimate interests |
| Technical and security data — IP address, request data and server-side traffic metrics handled by Cloudflare | To deliver the site securely, prevent abuse, measure traffic in aggregate and keep the service running | Legitimate interests |
We do not knowingly collect data from children; our products are intended for adults.
Payments are handled by Stripe, which acts as an independent controller of the payment data you give it. We receive confirmation of your purchase and the limited details we need to deliver it and keep records — such as your email, name, billing details, what you bought, the amount and your acceptance of our Terms of Sale — but never your full card number. Your payment is also governed by Stripe’s own privacy policy, and Stripe’s checkout pages may set Stripe’s own cookies (see clause 9).
We only send marketing messages if you have asked for them, or otherwise where the law allows, and you can opt out at any time.
We do not sell your personal data. We share it only with service providers who help us run the business, and only as needed:
Cloudflare, Formspree and our email provider act as processors on our behalf; Stripe acts as an independent controller. We may also disclose data where required by law or to protect our rights. We do not share your data for third-party advertising.
Some of our providers — including Cloudflare, Stripe and Formspree — may process data outside the UK. Where they do, we rely on the safeguards required by data-protection law, such as adequacy regulations or decisions, or the Standard Contractual Clauses and UK International Data Transfer Addendum in those providers’ data-processing terms.
Enquiry correspondence is kept while it is relevant and then deleted. Order, transaction and engagement records are kept for as long as tax and accounting law requires — normally six years. Support correspondence is kept only as long as needed to handle your query and any follow-up. We delete or anonymise personal data when we no longer have a lawful reason to keep it.
Depending on where you live, you have rights over your personal data, which may include the right to: access a copy of it; correct inaccurate data; ask us to delete it; restrict or object to certain processing; and data portability. To exercise any of these, email i@maxfr.co (WarGameLLM customers can also use info@wargamellm.com). We may need to verify your identity. You also have the right to complain to your data-protection authority — in the UK, the Information Commissioner’s Office (ico.org.uk).
We use no advertising or non-essential cookies. The only cookies this site may set are strictly necessary security cookies from Cloudflare — __cf_bm, a short-lived bot-management cookie, and cf_clearance, which remembers that your browser has passed a security check. Our traffic analytics are cookieless. If your browser supports it, the site also stores copies of its own files on your device so pages load faster and work offline; these contain no personal data. When you pay through Stripe’s checkout, Stripe may set its own cookies on its pages. Full detail is in our Cookies Policy.
We may update this policy from time to time and will post the current version here with its version number and effective date. Significant changes will be made clear on this page.
For any privacy question or request, contact MAXFR LTD at i@maxfr.co. Our registered office is Bury Lodge, Bury Road, Stowmarket, England, IP14 1JA.