Privacy Policy
Draft for owner review before publication. The operator must confirm lawful bases, retention schedules, suppliers, international transfers and company/contact details. This notice is not presented as legally approved.
Who is responsible?
Mustard Software Ltd operates the IntroMailer website and application. Contact info@intromailer.co.uk or 01636 402120 with privacy questions or requests.
Mustard Software is responsible for the information it uses to operate its own website, respond to enquiries and administer the service. Customers decide which prospects to contact, their messaging purposes, permission and lawful basis, suppression preferences and retention of their business records. IntroMailer processes those uploaded records to provide the customer's chosen service. Customers must provide their own appropriate privacy information; using IntroMailer does not establish permission to send marketing.
Website enquiries
When the contact form is enabled, your name, email address and message are sent through Startup Websites' enquiry service for Mustard Software to respond. We do not use this form to create an account, subscribe you to marketing or take payment. Telephone and email enquiries are handled to answer your request. Network addresses are used temporarily in memory for abuse controls and are not added to the enquiry payload. Hosting security logs are separate and require owner review. Do not include unnecessary sensitive information.
Accounts and business information
IntroMailer holds account email addresses, tenant/workspace associations, roles, active status, available account creation and last-login dates, password hashes and security records. Passwords are hashed using Identity; saved sending and integration credentials are encrypted. Administrators can create, disable or reset ordinary user accounts; the previous password is never revealed.
Trials and subscriptions
Registration records your business name, contact name and email address in a separate workspace. Email verification activates the trial; registration is not marketing consent. Verification links are time-limited and single-use. A configured transactional email provider sends these account messages. Trial dates, subscription state, Stripe customer/subscription references and minimal processed-event identifiers are kept to administer access and payments. Stripe hosts Checkout, payment details, invoices and subscription management; IntroMailer does not store card details. Expiry does not automatically delete business records. The owner must confirm Stripe and transactional-email supplier arrangements and retention before publication.
Contacts, sending and history
Customer records may include business and contact names, email addresses, notes, permission evidence and contact preferences. Sending history preserves the sender, recipient, subject, exact message content, dates and processing results. Follow-up reminders require review and approval; they do not automatically send messages. Customers are responsible for appropriate recipient selection, required permission, opt-outs and respecting objections.
MailerLite transfers
A customer must explicitly approve transfer of an eligible contact's email address, name and company to their selected MailerLite account/group. IntroMailer checks recorded marketing permission and suppression. Transfers and safe results are recorded. An introduction, reply, customer status or recorded link access does not itself constitute marketing consent. MailerLite and the customer's selected sending providers handle information under their respective arrangements.
Analytics and advertising
Optional Google Analytics 4 and Google Ads measurement are prepared but remain inactive unless configured and consented to. When enabled and permitted, they can measure public page visits and verified successful contact enquiries. We do not enable personalised advertising or enhanced conversions, or send enquiry contents, email addresses, private application routes or account identifiers as measurement parameters. Google may receive network/browser information and cookie identifiers when its tag runs. No trial-registration or purchase events exist at this stage.
Use Cookie Settings in the footer to change or withdraw optional consent. This does not authorise recipient-level email-link tracking. See our Cookie Policy and Google's privacy information.
Retention, sharing and security
Account, contact and communication history is retained in the application until removed under the operator/customer's applicable policy; this release does not impose a general automatic deletion schedule. The owner must define and document the enquiry, account, message-history, audit/security-log and backup retention schedules before publication. The specific tracking-event limit is explained below. Public form duplicate-prevention results contain no enquiry text, expire after 20 minutes and are removed during subsequent form use.
Access controls, tenant isolation, HTTPS, hashed passwords, encrypted integration credentials and safe logging protect information. Only necessary service providers should receive it, including hosting, Stripe for subscriptions, the configured transactional email provider for verification, sending providers, Startup Websites for enabled enquiries, MailerLite for approved transfers and Google for consented optional measurement. The owner must confirm the hosting/backup locations, provider agreements and any international-transfer safeguards before publishing this notice. No system can guarantee absolute security.
Your choices and rights
Depending on the circumstances, you may request access, correction, deletion, restriction or portability of your personal information, object to certain processing, and withdraw consent where processing relies on it. Contact Mustard Software for operator-held information; contact the business that sent an email for its prospect/contact records. We may need to verify your identity and establish which organisation is responsible. You may complain to the Information Commissioner's Office.
Link Tracking Privacy
The business that sent your email can use IntroMailer to record access to its website link. An unpredictable link token identifies the individual email; the public link does not contain your name or email address.
For a tracked link, we record an event identifier, its email/token reference and the UTC access time. The sender can see the first and latest access times and total accesses. Access may come from an automated security scanner or preview service; it does not prove a person read or clicked the email.
This feature sets no cookies and records no IP addresses, user agents or device fingerprints in link activity. It uses no tracking pixels. Access does not subscribe you to a mailing list, change your relationship status or trigger follow-up emails.
Tracking links expire 90 days after SMTP acceptance. Activity is excluded from reports at expiry and deleted by routine hourly cleanup. The original email and its destination remain in the sender's communication history. Hosting providers may keep separate security logs under the business's own privacy policy.
Reply to the business that sent your email for its full privacy notice, the applicable lawful basis, any consent information, or to object to tracking or further contact. The sender can disable tracking for future messages. Do not forward a personalised tracking URL if you do not want another person's access attributed to the same email.