Privacy Policy

Last updated: February 22, 2026

1. Introduction

This Privacy Policy explains how York Code Limited ("we", "us", "our") collects, uses, and protects your personal information when you use NotepadMD software and visit our website.

NotepadMD is designed with privacy in mind. Your documents stay on your device, and we collect minimal data necessary to provide and improve our service.

2. Data Controller

York Code Limited is the data controller responsible for your personal information.
Website: www.yorkcode.co.uk
Privacy contact:

3. Data We Collect

3.1 Your Documents

NotepadMD is a local application. Your documents are stored on your device and are never uploaded to our servers. We have no access to your content.

3.2 Account Data (Pro Licences Only)

If you purchase a Pro Licence, we collect:

  • Email address: Used for licence delivery and support
  • Name: Used for invoice generation
  • Licence key: Unique identifier for your Pro Licence

This data is processed by Paddle (see Section 5 below) and stored in our secure licencing database.

3.3 Payment Data

We never see your payment details. All payment processing is handled entirely by Paddle.com Market Limited, our Merchant of Record. This includes:

  • Credit/debit card details
  • Billing address
  • Payment method information

We only receive confirmation that a payment was successful, along with your order details.

3.4 Website Usage Statistics

We log anonymous site usage statistics to understand how our website is used and to improve the experience. This includes:

  • Page views and navigation patterns
  • General geographic region (country/region, not precise location)
  • Browser and device type

This data is anonymised and cannot be used to identify individual users. We do not track individual users or create user profiles.

4. How We Use Your Data

We use the collected data for the following purposes:

  • Licence management: Deliver Pro Licences and verify activation
  • Customer support: Respond to enquiries and troubleshoot issues
  • Service improvement: Analyse usage patterns to enhance features
  • Legal compliance: Meet tax, accounting, and regulatory requirements

We do not use your data for:

  • Advertising or marketing without consent
  • Selling to third parties
  • Profiling or automated decision-making

5. Third-Party Services

We use the following trusted third-party services:

5.1 Paddle (Payment Processing)

Paddle.com Market Limited is our Merchant of Record for all transactions. Paddle processes payments, handles VAT/sales tax, and manages subscriptions.

When you purchase a Pro Licence, you share your payment and billing information directly with Paddle. We receive only order confirmation details (email, name, order ID).

Learn more: Paddle Privacy Policy

5.2 Cloudflare (Content Delivery)

We use Cloudflare for content delivery and hosting of software downloads. Cloudflare may temporarily cache content and process requests for security and performance purposes.

Learn more: Cloudflare Privacy Policy

6. Data Retention

We retain your data for the following periods:

  • Pro Licence data: Duration of your licence plus 7 years (for tax/legal compliance)
  • Support emails: 3 years after last interaction
  • Usage statistics: Aggregated and anonymised, retained indefinitely

You can request earlier deletion of your data (see Section 7 below).

7. Your Rights (GDPR & Data Protection)

Under GDPR and UK data protection laws, you have the following rights:

7.1 Right to Access

You can request a copy of the personal data we hold about you.

7.2 Right to Rectification

You can request correction of inaccurate or incomplete data.

7.3 Right to Erasure ("Right to be Forgotten")

You can request deletion of your data, subject to legal retention requirements (e.g., tax records must be kept for 7 years).

7.4 Right to Data Portability

You can request your data in a machine-readable format to transfer to another service.

7.5 Right to Withdraw Consent

Where processing is based on consent, you can withdraw consent at any time.

7.6 How to Exercise Your Rights

To exercise any of these rights, email with your request. We will respond within 30 days.

You also have the right to lodge a complaint with your local data protection authority (in the UK: ICO).

8. Cookies

Our website uses essential cookies only to ensure proper functionality:

  • Session cookies for secure authentication (Pro account area)
  • Preference cookies to remember your settings

We do not use tracking cookies, advertising cookies, or share cookie data with third parties.

9. Children's Privacy

NotepadMD is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13.

If you believe we have inadvertently collected data from a child under 13, please contact us at .

10. International Data Transfers

Your data is primarily stored in the United Kingdom. Some third-party services may transfer data internationally, but only under appropriate safeguards:

  • Standard Contractual Clauses (SCCs)
  • Adequacy decisions by the European Commission
  • GDPR-compliant data processing agreements

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements.

Significant changes will be notified by:

  • Posting a prominent notice on our website
  • Updating the "Last updated" date at the top of this page
  • Emailing Pro Licence holders (for material changes affecting their data)

12. Contact Us

For privacy-related questions, data requests, or concerns:

York Code Limited
Privacy contact:
Website: www.yorkcode.co.uk