Privacy notice · last updated 19 September 2026
A fit check, not a data grab.
Administrative Burden Ltd, trading as Modest Ambitions, is the controller. This service collects only enough information to assess, sell and deliver a fixed-price scope.
What is collected
Company name, work email, selected system, sample size, review focus, billing market, payment and order references, page views and separately labelled clicks on samples, fit checks, market choices, filters, contact links and checkout and any source or UTM values included in the submitted fit-check URL. Card numbers never pass through this app.
Why and legal basis
Pre-contract and contract: assess the requested work, save the scope, take payment and deliver the order.
Legitimate interests: count page, click and checkout events, prevent abuse, secure the service and understand whether the self-serve flow works. These events do not follow you across other sites. Each rendered page has a random identifier that groups its clicks; it is not a unique-person count. Test visits are labelled and excluded from buyer-activity reports. Clicks never prove payment.
Legal obligation: retain the minimum payment, contract and accounting records required by tax and company law. Email is never added to a newsletter or sold.
Cookies and links
There are no advertising or third-party analytics cookies. An encrypted, HTTP-only session cookie can remember campaign attribution, identify an explicitly marked test visit, or authorize a saved scope. It keeps that browser authorized for up to seven days. Email access links work once and expire after 30 minutes; operators can revoke browser access immediately.
Operational files
The fit check has no upload field. After verified payment, the saved scope opens a first-party encrypted upload route. Send only the minimum exports listed in the handoff; remove unnecessary personal fields and never upload passwords, full card data, identity documents, special-category data or criminal-offence data unless separately agreed in writing.
Who receives it
Duarte as the authorized Modest Ambitions operator, Hetzner for EU application hosting, Resend for transactional email, and Stripe for hosted payment processing. Operational-file contents remain in the first-party application on the Hetzner service and are not sent through Resend, Stripe or an AI provider. The current provider, location and safeguard record is available on request.
International transfers
Some providers may process information outside the UK. Where that happens, the transfer is documented and must use an applicable adequacy decision or contractual safeguard. Email hello@modestambitions.studio for the current provider list and transfer safeguard.
Retention
Unpaid scopes and funnel events: deleted automatically within 90 days.
Operational files: deleted automatically within 30 days after delivery and never kept more than 90 days after upload unless a documented legal hold requires otherwise. Buyers and operators can delete sooner.
Paid order and accounting records: retained for seven years, then deleted automatically unless a documented legal hold applies.
Security audit events: deleted within one year.
Automated scope check
Rules compare the selected system and sample size with the published fixed scope. They may permit checkout, request an export check or mark the sample too large. They do not make a legal or similarly significant decision; you can email for human review.
Your rights
Depending on the circumstances and the law that applies, you may ask for access, correction, deletion, restriction or portability, or object to processing based on legitimate interests. Email hello@modestambitions.studio from the work address used for the scope. We may retain limited records where law requires it. You may complain to the UK Information Commissioner; people covered by EU/EEA or Swiss law may also contact their local supervisory authority.
Security
Sensitive database fields use application-level encryption. Every operational file is authenticated and encrypted separately with AES-256-GCM before persistent storage. Buyer access uses one-use email links and encrypted sessions. Operator access is invite-only, rate-limited and protected by password, TOTP MFA, lockout and short inactivity timeout. File downloads and deletion controls are audit logged.
Controller contact
Administrative Burden Ltd (company 17363389), trading as Modest Ambitions. Privacy and security requests: hello@modestambitions.studio.