Privacy notice
In short: we collect the business details you give us to run your free trial, check you’re a colour professional, and follow up about it. Your colour values, uploaded files and reports are processed in your own browser and never sent to us. We use one essential sign-in cookie and no tracking cookies on the Explorer. You can download or delete your data at any time from My account.
Who we are
Target Colour is part of the MPX Colour group. The data controller is Targetcolour Limited, a company registered in England and Wales (company number 15484669), registered office 66 Paul Street, London EC2A 4NE. Contact: ncoady@targetcolour.com, +44 (0) 330 058 1554.
What we collect and why
| Data | Purpose | Lawful basis |
|---|---|---|
| First and last name, work email, company, job title, country | Create and run your trial; confirm you use a company address; contact you about the trial | Taking steps at your request before a contract, and providing the trial you asked for |
| Your agreement to this notice (date and version) | Show what you agreed to and when | Legal obligation (accountability) |
| Trial usage: sign-ins, report and file downloads (file name and type), trial dates | Apply the trial allowance; understand how the Explorer is used; prevent misuse | Legitimate interests in running and protecting a free trial |
| Email domain screening | Trials are offered to businesses only, and not to personal mailboxes or certain competitor organisations | Legitimate interests in offering a business-to-business trial |
| A one-way, keyed hash of your IP address (never the address itself), kept with sign-in codes for 24 hours | Limit how many codes can be requested, to stop abuse | Legitimate interests in security |
| A log of the emails we send you (your address, the type of email, when, and whether it was sent and delivered; never the code itself), kept for 30 days | Check that sign-in codes and invitations reach you, and help when one doesn’t | Legitimate interests in running the service reliably |
| Marketing preference | Send occasional colour-management news, only if you tick the box | Consent, which you can withdraw at any time |
We don’t sell your data, and we don’t use it for automated decisions with legal or similarly significant effects. The email screening only decides whether a trial is offered; you can always contact us directly.
What stays in your browser
The Colour Explorer works in your browser. Lab and CMYK values you type, measurement files you open in the Explorer, and the reports, colour steps charts and CxF files you create are not sent to or stored by us, unless you save a colour to a Private Colour Library, save a custom standard or save a press score to ScoreHub (below). The only exception is the nearest spot colour search: the single Lab value you search for is sent to our server to find matches, and it isn’t stored.
Private colour libraries
If you save colours to a Private Colour Library, we store what you put there so you and the people you invite can use it: library, palette and colour names, notes, Lab and CMYK values and print standards, and measurements you upload (spectral readings, measurement condition, instrument, substrate and file name). We also store the email addresses of people you invite, their role and when they last opened the library. Members can see the library’s colours; only the owner and the MPX Colour staff who run the service can see the member list. Lawful basis: performing the service you asked for (contract), and our legitimate interest in letting you share it with the people you choose. Invitation emails are sent through Resend.
Custom standards
When you add a custom standard, your browser reads the ICC profile and builds two colour tables from it. The profile file itself is never uploaded. If you save the standard, we store those colour tables with the name, short name, notes, measurement condition, paper type, ink limit and profile name you give it, and the email addresses of people you share it with. People you share it with can use the standard in the Colour Explorer and My Press Explorer; only you (and the MPX Colour staff who run the service) can change it or see who it’s shared with. Lawful basis: performing the service you asked for (contract), and our legitimate interest in letting you share it with the people you choose. Sharing emails are sent through Resend.
ScoreHub
ScoreHub is for Target Colour client companies. When someone saves a press score from My Press Explorer to ScoreHub, we store the score and the report data behind it: the job name, job number, customer, sample, file name, standard and measurement condition, the results for paper, inks, dot gain, grey balance, overprints and spot colours, the correction curves, and the site, press and date it was printed. The measurement file itself is not uploaded. We also store the client’s site and press names, and the email addresses, roles (team admin or site admin), sites and last visit of the people given access. Site admins see their own site; team admins see the sites they’re given; the MPX Colour staff who run the service see everything. Lawful basis: performing the service the client asked for (contract), and our legitimate interest in letting the client give access to the people it chooses. Access emails are sent through Resend.
Cookies
We set one strictly necessary cookie, tc_session, which keeps you signed in for up to seven days (or until your trial ends). It contains no personal details beyond an account reference, and it can’t be used to track you on other sites. We don’t use analytics or advertising cookies on the Colour Explorer.
Our pages load typefaces from Adobe Fonts and Google Fonts. Like any web request, this shares your IP address with those providers.
Who we share it with
We use these service providers to run the Colour Explorer. Each acts on our instructions under a data processing agreement:
| Provider | Role | Location and safeguards |
|---|---|---|
| Vercel Inc. | Website hosting and sign-in functions | Functions run in London, UK. Vercel is a US company: transfers are covered by the UK International Data Transfer Addendum / EU Standard Contractual Clauses. |
| Neon (Databricks, Inc.) | Database for trial accounts, private colour libraries, custom standards and ScoreHub | Hosted in London, UK. Transfer safeguards as above for any US support access. |
| Resend (Plus Five Five, Inc.) | Sends verification codes, trial emails, library invitations, custom standard sharing emails and ScoreHub access emails | United States. UK IDTA / EU Standard Contractual Clauses. |
We may also disclose data if the law requires it.
How long we keep it
- Sign-ups that are never verified: deleted automatically after 7 days.
- Sign-in codes and IP hashes: deleted after 24 hours.
- The email delivery log: deleted after 30 days.
- Trial accounts and their activity: deleted automatically 24 months after you last signed in, unless you become a client, when our client agreement applies.
- Private colour libraries: kept until the owner deletes them, or the owner’s account is deleted (including after 24 months without signing in). An invitation is removed when the owner removes that person, or when that person deletes their account.
- Custom standards: kept until the owner deletes them, or the owner’s account is deleted (including after 24 months without signing in). Sharing ends when the owner removes that person, or when that person deletes their account.
- ScoreHub: scores belong to the client company and are kept until the client, its team admins or MPX Colour remove them, or the client stops using ScoreHub. A person’s access ends when they are removed, or when they delete their account; the scores they saved stay with the client, no longer linked to their account.
- If you delete your account from My account, everything is erased immediately, including libraries and custom standards you own.
Your rights
You can ask to access, correct, delete, restrict or object to our use of your data, and to receive it in a portable format. Download and deletion are available instantly from My account; for anything else email ncoady@targetcolour.com and we’ll reply within one month. You can withdraw marketing consent at any time without affecting your trial.
If you’re unhappy with how we handle your data, please tell us first. You also have the right to complain to the UK Information Commissioner’s Office (ico.org.uk) or, if you’re in the EU, your local data protection authority.
Security
All traffic is encrypted (HTTPS with HSTS). Sign-in uses single-use, time-limited email codes that are stored only as keyed hashes. Sessions are signed, HttpOnly cookies. Access to trial data is limited to named MPX Colour staff.
Changes
If we change this notice in a way that matters, we’ll update the version date above and tell trial users by email.