Privacy policy

How we collect, use and look after your personal information when you use this website. Last updated 8 October 2026.

Who we are

MCX Limited, trading as Modular, is the controller of the personal information described here. If you have any question about it, or want to use your rights, write to hello@modularcx.me.

What we collect

We collect only what you give us, and a little technical information about your visit.

  • Contact form: your name, email address, company, role, country, team size, what you’re getting in touch about, your timeline and your message.
  • Waitlist: the same details, what you plan to use ModularOS for, and your place in line.
  • Build log: your email address, and which page you signed up from.
  • Booking a meeting: if you use our booking link, the calendar service collects the details you give it, under its own privacy policy.
  • Technical information: like most websites, the servers that deliver this site record things such as your IP address, browser, device and the pages you request. This is used to run and secure the site.

Cookies

This site doesn’t use advertising or tracking cookies, and we don’t run analytics tools on it. After you join the waitlist we set one short-lived cookie that lets the confirmation page show your email address and place in line; it expires after ten minutes. Our own team’s sign-in to the dashboard uses cookies too, but they are only set for people who sign in.

How we use it

  • To reply to your messages and discuss working together.
  • To run the ModularOS waitlist, tell you your place in line, and let you know when it opens up.
  • To send you the build log, if you subscribed.
  • To keep the site secure, prevent misuse and fix problems.
  • To meet our legal obligations.

Why we’re allowed to

Depending on where you are, the law asks us to have a basis for using your information. We use it with your consent (for example when you subscribe to the build log or join the waitlist), because it is needed to answer what you ask of us or to take steps before a contract with you, and for our legitimate interests in running, securing and improving a small business and its website, which we balance against your rights. You can withdraw consent at any time.

Who we share it with

We don’t sell your information. We use a small number of service providers who handle it for us and may only use it for that purpose:

  • Supabase, for the database and file storage that hold enquiries, the waitlist and subscribers.
  • Vercel, for hosting the website.
  • Zoho, for the email we send and receive.
  • A calendar service, if you book a meeting with us.

We may also share information if the law requires it, to protect our rights, or if our business is sold or merged, in which case the new owner would handle it under promises like these.

Where it goes

Our providers may process information in countries other than your own, including outside the European Economic Area and the United Kingdom. Where they do, we rely on safeguards such as standard contractual clauses or the provider’s own certification, as the law allows.

How long we keep it

  • Enquiries: for as long as we need to deal with them and keep a record of our relationship with you, and then for a reasonable time afterwards.
  • Waitlist: until ModularOS opens to you, or until you ask us to remove you.
  • Build log: until you unsubscribe or ask us to remove you.
  • Server records: for a short period, then deleted or anonymised.

Your rights

Depending on where you live, you may have the right to see the information we hold about you, have it corrected or deleted, restrict or object to how we use it, take a copy of it, and withdraw your consent. To use any of these, or to be taken off the waitlist or the build log, write to hello@modularcx.me and we will deal with it promptly. If you are not happy with how we have handled your information, you can also complain to the data protection authority where you live.

Keeping it safe

We protect your information with technical and organisational measures, such as encrypted connections, restricted access to our dashboard, and trusted providers. No system is completely secure, so we can’t promise it, but we take care and we will tell you and the authorities if a breach affects you, as the law requires.

Children

This site is for businesses and professionals. It isn’t meant for children, and we don’t knowingly collect their information. If you think a child has sent us theirs, tell us and we will delete it.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed, and if the changes are important we will make that clear on the site.

Contact

Questions about privacy? Write to hello@modularcx.me.

Work with us

Reading about it is the easy part.