Privacy policy

This is a short, plain-English version of how ExternalOS handles your data. If anything here is unclear, email hello@externalos.com and a human will reply.

Who we are

ExternalOS is a UK sole trader based in Leeds, England, operating the website at externalos.com and selling digital files through Payhip (payhip.com/ExternalOS). Contact: hello@externalos.com.

What we collect

Mailing list

If you give us your email for a mailing list, we store your email address and the date you signed up. That's it. No name, no address, no phone.

Purchases

When you buy a file, the transaction happens on Payhip. Payhip collects payment details, delivery email and billing country for VAT, and acts as the merchant of record. We don't see or store your card details. We receive your email and order reference from Payhip so we can send updates when legislation changes.

Free tools

The free tools (the IR35 checker, the employer costs calculator, the landlord compliance check and the rest) run entirely in your browser. Your answers never leave your device. We don't log, store or transmit your responses.

Analytics

The site currently runs no analytics, no tracking pixels, no behavioural cookies. If that changes, this page will change first.

Cookies

ExternalOS sets no cookies of its own. The Payhip checkout may set its own cookies when you buy, governed by Payhip's policy. Fonts are self-hosted, so no third-party font service is contacted.

Why we can hold your data (lawful basis)

• Consent, for mailing list signup. You opted in, you can opt out at any time.
• Contract, for purchases. We need your email to deliver the file and the updates you paid for.
• Legitimate interest, for responding to support emails and keeping basic order records for accounting.

Who we share data with

• Payhip, payment, delivery and merchant of record (UK and EU VAT handling).
• Formspree, form submission relay for the unsubscribe form (US).
• Zoho Mail, inbound and outbound email hosting (Netherlands and India).
• GitHub Pages, static site hosting (US).

We don't sell your data. We don't share it with advertisers. We don't build profiles or use automated decision-making.

How long we keep it

Mailing list emails are kept until you unsubscribe. Order records are kept for six years, the HMRC minimum for self-assessment records. Support emails are kept for two years and then deleted.

Your rights

Under UK GDPR you can ask us to show you what data we hold, correct it, delete it (right to erasure), export it in a portable format, or stop using it for a specific purpose. Email hello@externalos.com with the request. We'll respond within 30 days, usually much sooner.

Complaints

If you think we have mishandled your data, you can complain to the UK Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Changes to this policy

When we change this page, the "last updated" date in the header changes too.