Who we are
Martyn's Law Risk Assessment is a trading name of Codeex Maintenance Ltd (company number 12777967, registered office 128 City Road, London, EC1V 2NX), the data controller for personal data collected on this site. Contact: hello@martynslawriskassessment.co.uk.
What we collect, why, and for how long
| Purpose | Data | Lawful basis | How long |
|---|---|---|---|
| Capacity checker and checklist | Email, premises type, capacity, likely tier | Sending the checklist you asked for (legitimate interests); updates only if you tick the optional box (consent) | Until you unsubscribe or ask us to delete it, and no longer than 3 years without contact |
| Founding venue, partner and enhanced tier forms | Name, role, organisation, contact details, premises details | Replying to your request (legitimate interests); sharing with a security consultancy only where you ask for an introduction (consent) | Up to 2 years after our last contact |
| Customer accounts | Account email, organisation, premises and questionnaire answers, documents, approvals, drill and review records | Providing the service you bought (contract) | For the life of the account plus 6 years |
| Staff training | Staff names, email addresses, quiz results and completion dates added by the customer | Providing the service to the customer, who is responsible for sharing staff data lawfully (contract and legitimate interests) | For the life of the customer account plus 6 years, or deleted earlier on the customer's request |
| Payments | Billing name, address, VAT number, payment status (card details are held by Stripe only) | Taking payment and meeting tax obligations (contract and legal obligation) | 6 years after the end of the financial year |
| Emails to us | Your message and contact details | Answering you (legitimate interests) | Up to 2 years |
| Analytics (only if you accept cookies) | Pages viewed, device and anonymised interactions | Improving the site (consent) | Set by Google Analytics and Microsoft Clarity, typically up to 14 months |
Who we share it with
Service providers who process data for us under contract: Vercel (hosting), Supabase (database, hosted in the EU, Ireland), Resend (email), Stripe (payments), and, only with your cookie consent, Google and Microsoft for analytics. Some providers are based in the United States; where data leaves the UK, it is protected by the UK International Data Transfer Addendum or the UK Extension to the EU-US Data Privacy Framework. We do not sell personal data.
Security
Data is encrypted in transit, access is restricted to the account it belongs to, documents are stored privately and shared only through short-lived links, and payment card details never reach our systems.
Cookies and analytics
Essential storage keeps the site working and remembers your cookie choice. Only if you accept do we load Google Analytics and Microsoft Clarity. Analytics never runs on account, staff training or sign-in pages. You can change your choice at any time using “Cookie settings” in the footer.
Your rights
You can ask for a copy of your data, ask us to correct or delete it, restrict or object to how we use it, withdraw consent at any time (including by unsubscribing from emails), and ask for your data in a portable format. Email hello@martynslawriskassessment.co.uk. You can also complain to the Information Commissioner’s Office at ico.org.uk.