Skip to content

Privacy policy

Draft. This policy has not been reviewed by a solicitor. It will be updated following independent legal review.

Version 1.0 — effective 28 April 2026

1. Data controller

Bayes Ltd is the data controller for personal data processed through this website (bayes.ltd) and our services.

Contact: gregg@bayes.ltd

2. Data we collect

2.1 Website analytics

We use Google Analytics 4 (property ID: G-B6NQ2PH02Z) to understand how visitors use this site. It collects:

  • Pages visited, time on page, and navigation paths
  • Device type, browser, operating system, and screen resolution
  • Approximate location (city-level, derived from IP address)
  • Referral source (how you arrived at the site)

Google Analytics 4 does not log or store full IP addresses. IP addresses are used temporarily for geolocation and then discarded. This is built into GA4 and cannot be disabled.

Lawful basis: legitimate interest in understanding site usage and improving our content (UK GDPR Article 6(1)(f)).

Retention: event data is retained for 14 months, after which it is automatically deleted by Google.

2.2 Contact form submissions

The contact form on our site is processed by Formspree. When you submit the form, your name, email address, and message are forwarded directly to gregg@bayes.ltd. Formspree does not retain your submission data.

Lawful basis: consent — you choose to submit the form (UK GDPR Article 6(1)(a)).

Retention: messages are retained in our email inbox for the duration of the business relationship or enquiry, then deleted. There is no separate database of form submissions.

2.3 Google account data (Google Tasks API)

If you use our task management integration, we request access to your Google account via OAuth 2.0 with the following scopes:

  • https://www.googleapis.com/auth/tasks.readonly — read your task lists and tasks (titles, notes, due dates, completion status)
  • https://www.googleapis.com/auth/tasks — create, update, and delete tasks and task lists on your behalf

What we read: your task lists, task titles, notes, due dates, and completion status.

What we write: tasks and task lists that you explicitly create, update, or delete through our integration.

What we do not do:

  • We do not share your Google Tasks data with any third party
  • We do not use your data for advertising or ad targeting
  • We do not use your data to train machine learning or AI models
  • We do not store your Google Tasks data on our servers — it is accessed in real time from Google's API and displayed to you in the interface

Lawful basis: consent — you grant access via the Google OAuth consent screen and can revoke it at any time (UK GDPR Article 6(1)(a)).

3. Google API Services — limited use disclosure

Bayes Ltd's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

  • We only use Google API data to provide the user-facing task management features visible in the application
  • We do not transfer Google API data to others, except as necessary to provide the feature, with your explicit consent, for security purposes, or to comply with applicable law
  • We do not use Google API data to serve advertisements
  • We do not allow humans to read your Google API data unless you have given explicit consent, it is necessary for security or legal compliance, or the data has been aggregated and anonymised

4. Cookies

Cookie Provider Purpose Duration
_ga Google Analytics Distinguishes unique visitors 2 years
_ga_B6NQ2PH02Z Google Analytics Maintains session state 2 years

No cookies are used for advertising or cross-site tracking.

Opt out: you can block analytics cookies via your browser settings or install the Google Analytics Opt-out Browser Add-on.

5. Third-party processors

Processor Purpose Data processed Location
Google LLC Analytics (GA4) Anonymised usage data US
Google LLC Tasks API (OAuth) Task lists, tasks US
Formspree Inc Contact form relay Name, email, message US
Cloudflare Inc Website hosting and CDN Access logs, IP addresses Global (edge network)

6. International transfers

Some of our processors are based in the United States. Where personal data is transferred outside the United Kingdom, it is protected by EU/UK Standard Contractual Clauses and the processor's applicable Data Processing Agreement.

7. Your rights

Under UK GDPR, you have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Erase your data (right to be forgotten)
  • Restrict processing
  • Data portability — receive your data in a structured, machine-readable format
  • Object to processing based on legitimate interest
  • Withdraw consent at any time, where processing is based on consent

To exercise any of these rights, email gregg@bayes.ltd.

If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO): ico.org.uk.

8. Revoking Google account access

You can revoke our access to your Google Tasks data at any time by visiting Google account permissions and removing Bayes Ltd from the list of connected applications. Revocation takes effect immediately.

9. Changes to this policy

We may update this policy from time to time. Material changes will be noted by updating the version number and effective date at the top of this page.