Privacy policy
Last updated 7 August 2026
This explains what personal data we collect through this website, why we collect it, and what you can ask us to do with it. It is written to be read, not to be survived.
Who we are
Cloud Ten is a trading name of Mammoth Digital Ltd, a company registered in England and Wales. Mammoth Digital Ltd is the data controller for personal data collected through this site, and is the legal entity you are contracting with.
- Registered company name: Mammoth Digital Ltd
- Trading as: Cloud Ten
- Company number: 13633661
- Registered office: Silverstream House, 4th Floor, 45 Fitzroy Street, London W1T 6EB
- Contact: hello@oncloudten.co
What we collect
Only what you type into the competitor report form, plus the technical information any web server records.
| Data | Where it comes from | Why |
|---|---|---|
| Your name | You, via the form | So we know who we are writing to |
| Your brand's website | You, via the form | To research your market and build the report |
| Two competitor names | You, via the form | To analyse their advertising |
| Your email address | You, via the form | To send the report and arrange the walkthrough |
| IP address | Automatically on submission | Spam prevention and abuse detection |
| Server logs | Automatically | Security, diagnostics and uptime |
We do not collect special category data, we do not buy personal data from third parties, and we do not run automated decision-making or profiling on the information you give us.
Cookies and tracking
Nothing loads until you agree. On your first visit we ask. If you decline, no analytics or advertising cookies are set at all — not "set but ignored", genuinely not loaded. You can change your mind by clearing this site’s data in your browser.
If you accept, we use:
| Tool | What it does | Cookies |
|---|---|---|
| Google Analytics 4 | Which pages people read and where they arrived from | _ga, _ga_* — up to 2 years |
| Meta Pixel | Whether an ad we ran led to an enquiry | _fbp, _fbc — 3 months |
| Meta click id | Remembers which ad you arrived from, if you arrived from one | _c10_fbc — 90 days |
| Our own visitor id | A random number, so a return visit is not counted as a new person | c10_xid in local storage — until you clear site data |
The visitor id is a random value generated in your browser. It is not derived from anything about you, it is not shared with anyone but Meta, and it is not linked to any other site.
We run Google Consent Mode v2, so Google is told your choice before any of its scripts execute. IP addresses are anonymised in Analytics.
Meta Conversions API
If you accept, some of what the Pixel reports is also sent from our own server rather than from your browser: pages you read in the vault and the calculators, and any form you submit. It is the same information either way — sending it server-side simply means it still arrives when a browser extension blocks the Pixel.
Where an event includes your name or email address, each is hashed with SHA-256 before it leaves our server — Meta receives an irreversible fingerprint, never the details themselves. We also send your IP address, your browser's user agent, and an approximate location (country, and a best guess at region, city and postcode) worked out from that IP address. We are not told where you are by any other means, and the guess is often wrong. Decline the advertising option and none of this runs.
Our lawful basis
When you submit the form we rely on legitimate interests (UK GDPR Article 6(1)(f)) — specifically, responding to a business enquiry you have chosen to make. You asked us for a report; using your details to produce and send it is what you would reasonably expect.
We do not add you to a marketing list on the basis of that form. If we ever want to send you marketing unrelated to your enquiry, we will ask you first.
Who we share it with
We do not sell personal data. We use a small number of processors to run the site and deliver email:
| Processor | What they do | Where |
|---|---|---|
| Vercel | Hosts the website and runs the form endpoint | US company, EU edge infrastructure |
| Resend | Delivers the enquiry email to us | EU region (Ireland) |
| Google Workspace | Our email, where your enquiry lands | EU and US |
Where personal data is transferred outside the UK, it is protected by the UK International Data Transfer Addendum or equivalent safeguards under each provider's terms.
How long we keep it
- Enquiries that do not become clients: deleted within 12 months of last contact.
- Enquiries that become clients: retained for the engagement and then per our contractual and tax obligations, normally six years.
- Server logs: retained by our hosting provider on a short rolling window, typically under 30 days.
Your rights
Under UK data protection law you can ask us to:
- give you a copy of the personal data we hold about you
- correct anything inaccurate
- delete it
- restrict how we use it
- provide it in a portable format
- stop processing it where we rely on legitimate interests — including an absolute right to object to direct marketing
Email hello@oncloudten.co and we will respond within one month. There is no charge.
If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would rather you came to us first so we can put it right.
Security
The site is served over HTTPS. Form submissions are transmitted encrypted and sent straight to our inbox rather than stored in a database on this site. Access to that inbox is restricted to Cloud Ten staff and protected by two-factor authentication.
Changes
If we change this policy we will update the date at the top. Material changes affecting how we use data you have already given us will be communicated directly.