How we handle your data.

This notice explains what personal data MangoStack Ltd ("MangoStack", "we") collects when you use this website, why we collect it, how we use it, and your rights under the UK GDPR and the Data Protection Act 2018.

1. Who we are

MangoStack Ltd is a company registered in England & Wales (Company No. 17196444), with its registered office in London, United Kingdom. We are the data controller for personal data collected through this website.

You can contact us about this notice or your data at info@mangostack.co.uk.

2. What we collect

We only collect what you actively give us. We do not run third-party advertising trackers, profiling cookies, or session recorders on this site.

• Contact form submissions — name, email address, company, and the message you send us.
• Waitlist sign-ups (HowCraft, Workforce Atlas) — email address, optional company, optional role, optional context about your interest.
• Email correspondence — when you email us directly, we retain the content of that correspondence.
• Basic server logs — our hosting provider may record IP address, user-agent, and timestamps for security and abuse prevention. These are retained on a short rolling window by the provider.

The ILR-Calc product is explicitly zero-data: it runs entirely in your browser and stores no answers, identifiers, or PII on our servers. Its separate privacy notice lives at ilr-calc.co.uk.

3. Why we use it (lawful basis)

• To reply to enquiries and run engagements — lawful basis: legitimate interests (responding to a business enquiry you initiated), or, where you become a client, performance of a contract.
• To operate product waitlists — lawful basis: consent. You can withdraw at any time by emailing us.
• To keep the website running and secure — lawful basis: legitimate interests.

4. Who sees it

Submissions are read by MangoStack operators. We do not sell, rent, or share your data with advertising networks.

We use a small number of processors to deliver the service:

• Form-handling provider — routes form submissions to our inbox. Processes contents of form submissions.
• Email provider — sends and receives our business email.
• Hosting provider — serves this website.
• Analytics provider (privacy-respecting, aggregate only — no individual profiles, no cross-site tracking).

We use processors that offer UK or EU data residency and standard contractual clauses where transfers are required.

5. How long we keep it

• Form submissions and email correspondence — retained for up to 24 months from last contact, unless you become a client (in which case our engagement contract governs retention).
• Waitlist sign-ups — retained until the product launches and you have been contacted, or you ask us to remove you.
• Server logs — short rolling window as set by our hosting provider.

6. Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Ask us to correct inaccurate data
• Ask us to delete your data ("right to erasure")
• Object to processing or restrict it
• Withdraw consent (for waitlists and similar) at any time
• Receive your data in a portable format

To exercise any of these rights, email info@mangostack.co.uk. We will respond within one month.

If you are not satisfied with our response, you can complain to the UK Information Commissioner's Office at ico.org.uk.

7. Cookies

We aim to keep this site cookie-light. See our Cookies notice for the current list of what is set and why.

8. Changes to this notice

We may update this notice as our practices evolve. The "Last updated" date at the top reflects the most recent revision. Material changes will be flagged on the homepage for a reasonable period.