Privacy Notice
Last updated 22 August 2026
This notice covers the oaslin.com website and the password request form on it. It describes what we collect, why, and what you can ask us to do about it. It is written to be read, not to be impenetrable — if anything here is unclear, ask.
The short version
The software itself is a free download and needs no details at all. We collect contact details only when you ask us to email you the password that runs it. We do not run advertising, we do not use third-party analytics, and we do not sell or share your details with anyone.
What we collect
Downloading the software collects nothing. No form, no account, no cookie.
When you ask us to email you the password, you give us:
- Your email address — so we can send the password to you.
- Your name and company — asked once, the first time you request it.
Alongside that, our server records:
- Your IP address and browser user-agent — used to rate limit the form and to investigate abuse.
These are captured server-side at the moment you submit. We do not track you around the site before that, and we do not build a profile of your browsing.
What we do with it
| Purpose | Lawful basis (UK/EU GDPR) |
|---|---|
| Emailing you the password that runs the software | Steps taken at your request |
| Rate limiting, abuse prevention, and our audit log | Legitimate interests — keeping the service available and secure |
We do not send marketing email. The only message you receive is the password you asked for. We do not advertise to you, and we will stop sending it the moment you ask.
Who else sees it
Three processors handle data on our behalf, and only to deliver this service:
- Amazon Web Services — hosts the site, the database and the download file. Data is held in the United States.
- Resend — sends our email. They receive your name and email address in order to deliver the message.
- GoDaddy — provides the mail service behind our own address, so replies you send us pass through it.
Nobody else receives your details. We do not sell data, and we do not pass it to advertisers or data brokers. Where data leaves the UK/EEA it is protected by the standard contractual clauses these providers operate under.
How long we keep it
- Your registration — kept while you are still using the software, so we can keep sending you the weekly password. Ask us to stop at any time and we will remove you.
- After you unsubscribe — your record is deleted, and the messages we sent you are stripped of your details, within 12 months.
- Audit and email logs — retained for security and accountability. These record that an action happened, not who you are.
Your rights
If you are in the UK or EEA you can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or object to our use of it. You can also ask for it in a portable format. We will respond within one month.
The practical version: email us and say what you want done. We will not make you fill in a form or prove your identity beyond what is needed to be sure it is really you.
If you think we have handled your data badly, you can complain to the UK Information Commissioner's Office at ico.org.uk, or to your local supervisory authority in the EEA. We would rather you told us first so we can put it right.
Security
The site is served over HTTPS. Administrator accounts require a password and a second factor. Administrative actions are recorded in an audit log.
No system is perfect. If you find a security problem, please tell us rather than publishing it, and we will fix it and credit you if you would like.
Children
This is a tool for people doing their jobs. It is not intended for children, and we do not knowingly collect their data.
Changes
If we change this notice we will update the date at the top. If a change materially affects people whose data we already hold, we will tell them directly rather than quietly editing the page.
Contact
Questions about this notice can go to admin@oaslin.com.