Last updated: 21 May 2026
Mouldlytics ("we", "us", "our") is operated by Mouldlytics Ltd, a company registered in England and Wales (Company No. [COMPANY NUMBER]), whose registered office is at [REGISTERED ADDRESS].
We are the data controller of the personal data collected through our website (mouldlytics.com) and our platform (together, the "Service"). This means we determine the purposes and means of processing your personal data.
If you have any questions about how we handle your personal data, you can contact us at:
This Policy applies to all individuals whose personal data we process — including visitors to our website, users of the Mouldlytics platform, prospective customers, and contacts at client organisations.
We collect personal data in the following categories:
When using the Mouldlytics platform, users upload and input data relating to injection moulding projects — including machine parameters, tool details, material data, and DOE results. This information belongs to your organisation and is typically not personal data. Where it incidentally contains personal data (for example, an engineer's name in a project record), we process it on your organisation's behalf as a data processor. Your organisation remains the data controller for such data.
We do not intentionally collect any special category data (as defined in Article 9 UK GDPR / EU GDPR) such as health data, biometric data, racial or ethnic origin, political opinions, or religious beliefs. Please do not submit such data through the platform.
Under UK GDPR and EU GDPR, we must have a lawful basis for each purpose for which we process personal data. The table below sets out our purposes and the legal bases we rely on.
| Purpose | Data Used | Legal Basis (UK GDPR / EU GDPR Art. 6) |
|---|---|---|
| Create and manage your account | Account & Identity Data | Performance of a contract (Art. 6(1)(b)) |
| Provide and operate the Mouldlytics platform | Account, Technical & Usage Data | Performance of a contract (Art. 6(1)(b)) |
| Respond to enquiries and provide customer support | Contact Data, correspondence | Performance of a contract / Legitimate interests (Art. 6(1)(b)(f)) |
| Send transactional and service notifications (e.g. password reset, system alerts) | Account & Contact Data | Performance of a contract (Art. 6(1)(b)) |
| Improve and develop the platform (analytics, error monitoring) | Technical & Usage Data | Legitimate interests (Art. 6(1)(f)) — to maintain and improve our services |
| Ensure security, detect fraud, and prevent unauthorised access | Technical Data, authentication logs | Legitimate interests (Art. 6(1)(f)) — to protect our systems and users |
| Send marketing communications about our products and services | Contact Data | Consent (Art. 6(1)(a)) — you may withdraw at any time |
| Comply with legal obligations (e.g. tax, accounting) | Account & Contact Data | Legal obligation (Art. 6(1)(c)) |
Where we rely on legitimate interests, we have assessed that our interests do not override your fundamental rights and freedoms. You have the right to object to processing based on legitimate interests — see Section 7 (Your Rights).
Where we rely on your consent, you may withdraw it at any time by contacting us at contact@mouldlytics.com or by using the unsubscribe link in any marketing email. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
Our website uses cookies and similar technologies. Authentication within the Mouldlytics platform uses JWT (JSON Web Tokens) stored in browser localStorage — these are not cookies and are not transmitted with every request unless the platform explicitly includes them.
| Cookie Type | Purpose | Consent Required |
|---|---|---|
| Strictly Necessary | Session management, security, load balancing | No — essential for the service to function |
| Analytics | Understanding how visitors use the website (e.g. page views) | Yes — via cookie consent banner |
| Preference | Remembering user settings (e.g. language, theme) | Yes — via cookie consent banner |
You can manage or withdraw cookie consent at any time via your browser settings. Disabling non-essential cookies will not prevent you from using the Mouldlytics platform.
We do not sell your personal data. We share personal data only in the following circumstances:
We engage trusted third-party service providers who process personal data on our behalf, under data processing agreements that comply with UK GDPR / EU GDPR requirements:
We may disclose personal data where required by law, court order, or in response to a lawful request by UK or EU public authorities. We will notify you where legally permitted to do so.
In the event of a merger, acquisition, or sale of all or part of our business, personal data may be transferred to the relevant party. We will provide notice before your data is transferred and subject to a different privacy policy.
We will share personal data with any other party only with your explicit consent.
Where we or our sub-processors transfer personal data outside the UK or European Economic Area (EEA), we ensure appropriate safeguards are in place in accordance with UK GDPR and EU GDPR. These safeguards may include:
If you would like details of the specific transfer mechanism used for any particular sub-processor, please contact us at contact@mouldlytics.com.
We retain personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law.
| Data Category | Retention Period |
|---|---|
| Account & Identity Data | For the duration of the account, plus 2 years after closure |
| Transaction & billing records | 7 years (UK Companies Act / HMRC requirements) |
| Technical & Usage Data (logs) | 90 days, then aggregated and anonymised |
| Support correspondence | 3 years from resolution of the matter |
| Marketing consent records | Until consent is withdrawn, plus 2 years for record-keeping |
When data is no longer needed, we delete or anonymise it securely. Some data may be retained longer where we have a continuing legal obligation or legitimate business need.
Depending on your location and the circumstances, you have the following rights in relation to your personal data:
Request a copy of the personal data we hold about you (Subject Access Request).
Request correction of inaccurate or incomplete personal data.
Request deletion of your personal data where there is no compelling reason for its continued processing ("right to be forgotten").
Request that we limit processing of your data in certain circumstances.
Receive your personal data in a structured, commonly used, machine-readable format, and transfer it to another controller.
Object to processing based on legitimate interests or for direct marketing purposes. We will stop unless we have compelling legitimate grounds.
Not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects. We do not currently carry out such processing.
Where we rely on consent, withdraw it at any time without affecting prior processing.
To exercise any of the above rights, please contact us at contact@mouldlytics.com or by post to our registered address. We will respond within one calendar month of receiving a valid request. We may need to verify your identity before processing the request.
We will not charge a fee for exercising your rights unless a request is manifestly unfounded or excessive, in which case we may charge a reasonable fee or decline to respond.
If you are located in the United Kingdom, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
If you are located in the European Union, you may lodge a complaint with the supervisory authority in your EU member state of residence, workplace, or the place of the alleged infringement. A list of EU supervisory authorities is available at the European Data Protection Board website.
We would, however, appreciate the opportunity to resolve any concern you have before you contact a supervisory authority. Please contact us first at contact@mouldlytics.com.
We implement appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage. These measures include:
No system is completely secure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours and inform affected individuals without undue delay, as required by UK GDPR Article 33–34.
The Mouldlytics platform is a professional B2B software service. It is not directed at, or intended for use by, individuals under 18 years of age. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected data from a child, we will delete it promptly.
Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies before providing any personal data.
We may update this Privacy Policy from time to time. Where we make material changes, we will notify you by email or by a prominent notice on the platform prior to the change becoming effective. The "Last updated" date at the top of this page will always reflect the most recent revision.
We encourage you to review this Policy periodically. Your continued use of the Service after changes become effective constitutes your acceptance of the revised Policy.
If you have any questions, concerns, or requests relating to this Privacy Policy or our processing of your personal data, please contact us: