Privacy statement
Last updated: 22 August 2026
Draft, not yet reviewed. Every value in [square brackets] still has to be filled in, and this text has not been checked by anyone qualified. Do both before the site goes live.
This site collects as little as it can. There is no analytics, no advertising and no tracking of what you read here. The only personal data that reaches us is what you type into the contact form, plus what any web server unavoidably sees while serving a page. This statement says what happens to both.
Who is responsible
[Legal entity name], registered at [registered address] under company number [registration number], trading as Lesca Software, decides why and how the data described here is processed.
For anything in this statement, including a request to see or delete your data, write to info@lescasoftware.com. A person reads that address.
What the contact form sends us
The form asks for your name, your email address, your company if you choose to give it, and your message. All four are sent to us by email and are not written to any database on this site.
Two things are added automatically to that email: the time it was received, and the IP address it came from. The IP address is there so that abuse of the form can be traced and blocked, and for nothing else.
We use this to answer you and, if it turns into work, to carry out the project. The legal basis is your request to be contacted, and our legitimate interest in keeping the form usable rather than drowned in spam.
What the server sees anyway
Like any web server, ours records requests as they are served: IP address, time, the page requested, and the browser identifier your browser sends. These logs exist to keep the site up and to investigate attacks.
Your IP address is also held briefly in memory to enforce the limit of five form submissions per hour. It is not written to disk for that purpose and is discarded when the hour passes.
How long it is kept
Contact form emails: kept for 24 months after the last message in the exchange, then deleted. If a project follows, the correspondence is kept for as long as the tax and accounting rules of [jurisdiction] require, currently [retention period].
Server logs: kept for [log retention, e.g. 14 days], then rotated out.
Rate-limiting records: held in memory for one hour at most, and lost entirely whenever the site restarts.
Who else is involved
[Hosting provider], in [country], runs the server this site is served from.
[Email provider], in [country], carries the contact form messages and stores our mailbox.
Cloudflare receives your IP address and browser information when the anti-spam check on the contact form runs. Cloudflare states that it does not use this to build a profile of you.
Nobody else has access. Your details are not sold, rented, or passed to anyone for marketing. Where a provider is outside the EEA, the transfer relies on the European Commission’s standard contractual clauses.
What you can ask for
You can ask for a copy of the data we hold about you, ask for it to be corrected or deleted, ask us to restrict what we do with it, ask for it in a portable form, or object to processing based on legitimate interest. Write to info@lescasoftware.com and you will get an answer within one month.
If you are not satisfied with that answer, you can complain to the supervisory authority for [jurisdiction]: [authority name and website].
Changes to this statement
If what we collect changes, this page changes first, and the date at the top changes with it. There is no mailing list to notify, because we do not keep one.