Privacy

What this covers

This policy covers arkmatter.uk, the pages you are reading now. Ark Matter Ltd is the data controller for the site, and for the personal data its products hold.

It does not describe what the products do with your data. They are separate services with separate accounts, and each has its own policy written in the detail its own users need:

• Rilver privacy policy — Mail, newsletters, reading settings and colour-test answers.
• GoGobo privacy policy — Accounts, saved projects and plans, and analytics you opted into.

If you have an account with either, that policy is the one that applies to you. This one is only about the website.

What is collected

Nothing in your browser

The site sets no cookies and stores nothing in local storage. There is no analytics, no tag manager, no embedded video and no JavaScript — not ours, and not anyone else’s. Even the fonts come from this domain, so the page never asks another company’s server for anything.

You will not see a consent banner either. There are no cookies to consent to.

Server logs

To send you a page we have to receive your request for it, and that request carries your IP address, the URL you asked for, the time and your browser’s user-agent string. Cloudflare serves the site for us and holds those briefly — long enough to deliver the page, keep the site up and spot an attack. We do not build profiles from them, and we do not combine them with anything else.

An IP address counts as personal data under UK GDPR, so it belongs in this policy even on a site that otherwise collects nothing.

Email you send us

Write to one of the addresses on this site and we get your email address along with whatever you put in the message. We keep the thread so the conversation still makes sense later, and so we can show what was said if it is ever disputed. Anything that does not need keeping is deleted within two years.

The products

Ark Matter Ltd is the controller for the personal data Rilver and GoGobo hold. Common ownership does not mean the data is pooled. They run on separate databases, an account with one is not an account with the other, and we neither move data between them nor use one to profile the users of the other.

If that ever changes we will say so plainly in the affected product’s own policy, and before it happens.

Who else sees it

For this website, this is everyone. Each one is a processor working on our instructions, under a contract that says as much.

Cloudflare, Inc.

Hosting, DNS and content delivery. Every request to this site as it is served — the IP address it came from, the URL, the time and the browser’s user-agent string. Their privacy policy.

To confirm — the email provider

Email for the @arkmatter.uk addresses. Any message you send to an address on this site, including the address you sent it from and whatever you put in it.

We do not sell, rent or share anything for advertising, and there is no advertising on this site in any case. We disclose data to anyone else only where the law requires it.

Outside the UK

Cloudflare is a US company running a global network, so your request may be served from, and logged in, a data centre outside the UK. Those transfers rely on the UK’s International Data Transfer Addendum to the European Commission’s standard contractual clauses — the safeguard set out in Article 46 of the UK GDPR.

Why we are allowed to

UK GDPR asks for a lawful basis for each purpose. Ours are:

Serving the site, and keeping it up

Legitimate interests. We cannot send you a page without receiving your request for it, and we cannot keep the site available without telling an attack from a reader.

Replying to you

Legitimate interests — or the steps before a contract, if you are writing about becoming a customer. You started the conversation either way, and you can end it by asking us to delete the thread.

Keeping records the law requires

Legal obligation. Statute sets how long company and tax records have to be kept; we do not.

Consent is not on the list because nothing on this site asks you for it.

Your rights

Under UK GDPR you can ask us to:

• tell you what personal data we hold about you, and give you a copy;
• correct it, if it is wrong;
• delete it, where we have no overriding reason to keep it;
• restrict what we do with it, or object to us doing it at all;
• hand it to you, or to someone else, in a portable format.

Write to privacy@arkmatter.uk. One month is the statutory deadline and we will meet it, though it is usually a good deal quicker — there is not much here to look through.

If your request is about a Rilver or GoGobo account, ask through that product, which has the tooling to answer it properly. The address above works too, and we will pass it on.

If you think we have handled your data badly, tell us first and give us the chance to fix it. You can also complain to the Information Commissioner’s Office at any point, and you do not have to come to us first.

Children

This is a company information site. It is not aimed at children and it collects nothing that would identify one. Each product sets out its own age rules in its own policy.

Changes

If this policy changes, so does the “last updated” date at the top. We set that date by hand, when the wording actually changes. A build date would tell you nothing.

Any questions, write to privacy@arkmatter.uk.