Who is responsible

Rushes LTD (“we”, “us”) is the data controller for this Workflow website and for any personal data you send us through it. Workflow is published under the Rush Mind product line.

Rushes LTD is a company registered in the United Kingdom. You can reach us at mail@rushes.digital, https://www.rushes.digital, or https://www.rushmind.co.uk.

What we collect on this website

This page is about the public Workflow site (rushmind.co.uk/apps/workflow), not files you keep inside the Mac app. The Mac app is designed to keep project content on devices you control; that is covered in the Terms of Service.

If you use the download form and enter an email and department, we store that email, the department you chose, the page you were on, the time, and a hashed (not raw) copy of your IP address. That helps us know who downloaded Workflow and from which production department.

If you skip the form, we do not store an email. We may still record that someone skipped, with a hashed IP and the page, so we can see how the form is used and limit abuse.

When the latest Mac build actually starts downloading, we add one to a download count. We store a hashed (not raw) IP so we can tell roughly how many people downloaded, not just how many times the button was clicked. We do not publish names or emails with that number.

If you tick the optional box to hear about new versions, we treat that as consent to email you about Workflow updates. That box is off unless you switch it on. We do not sell your details or pass them to advertisers.

Our servers automatically see normal web request data (for example the page asked for, browser type, and IP address) in order to serve the site, keep it secure, and apply rate limits. We do not run advertising pixels or third-party analytics on this site today.

Why we use it (lawful basis)

Download form details — consent. You choose to send them. You can skip the form and still download.

Optional update emails — consent. Only if you tick that box.

Hashed IP, download counts, rate limits, and security logs — legitimate interests (running a safe website, knowing how many people downloaded the current build, and stopping spam).

Necessary cookies (remembering your cookie choice) — to provide the service you asked for, and to meet the Privacy and Electronic Communications Regulations (PECR).

Preference cookies (remembering that you already used the download form) — only if you accept optional cookies.

Cookies and similar storage

We use a small number of first-party cookies. The full list is on the Cookie policy page. You can Accept all, use Necessary only, or change your mind later from Cookie settings in the footer.

Rejecting optional cookies does not block the download. It only means we may ask for email and department again on a later visit.

The site may also register a first-party service worker so pages and images load if the network blips. That is local cache on your device, not a third-party tracker.

How long we keep it

Download sign-ups are kept so we know who is using Workflow, unless you ask us to delete them sooner. As a working rule we review them after 24 months and remove records we no longer need.

Cookie consent is stored for up to 12 months, then we ask again.

The download-form memory cookie lasts 30 days, and only if you allowed preference cookies.

Server rate-limit notes are short-lived (hours).

Who we share it with

We do not sell personal data. We do not share download emails with other companies for their marketing.

Hosting and email for this site may be provided by our web host or mail provider, acting as processors on our instructions, in order to run rushmind.co.uk.

If the law requires it (for example a valid court order), we may have to disclose data.

Your rights (UK GDPR)

You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, or to receive it in a portable form where that right applies.

You can withdraw consent at any time (for example “please delete my download email” or “stop update emails”). That does not affect anything we already did while we had your consent.

Email mail@rushes.digital with the subject “Workflow privacy”. We will need enough detail to find your record (usually the email you used).

You can complain to the Information Commissioner’s Office (ICO) in the UK: https://ico.org.uk. We would rather fix the issue with you first.

Children

This site is aimed at people working in production, not at children. Do not send us personal data about anyone under 13.

Changes

If we start using new cookies, analytics, or a new kind of personal data, we will update this notice and the Cookie policy. The version and date sit at the top of the page.