Legal
Privacy notice
One notice for everything 2M Technologies runs. Each service is described separately, because each collects different things for different reasons.
Who we are
2M Technologies Limited is the controller of the personal data described here. We are registered in England and Wales, company number 17141737, with a registered office at Suite RA01, 195-197 Wood Street, London, E17 3NU. You can reach us at [email protected]. We are registered with the Information Commissioner's Office under ZC260754.
What this notice covers
This notice applies to three services. Find the one you are using.
- This website, 2mtechnologies.co.uk
- 2M Cloud, the website builder at 2mcloud.co.uk and app.2mcloud.co.uk
- Career Optimiser, the job application assistant at careeropt.ai
Murmur is open source software. We do not run it as a service, so it collects nothing and is not covered here.
This website
Only what you type into the contact form or the free review form: your name, your email address, and optionally your business name, phone number and current website address, together with the message.
It is emailed to us and stored in no database of ours. It then lives in our email account like any other message, kept while we deal with your enquiry and for up to twelve months afterwards so we can pick up a conversation you return to. This site uses no analytics and sets no cookies.
Our lawful basis is legitimate interests, in replying to an enquiry you chose to send. Where the message is about work you want quoted, we also rely on taking steps at your request before entering a contract.
2M Cloud
The marketing site at 2mcloud.co.uk collects enquiries in the same way as above, except that those are stored, in our database, so we can track and answer them. They are kept for up to twelve months after the conversation ends.
The app at app.2mcloud.co.uk holds what you need an account and a website for:
- Your name, email address and a hashed password. We never store the password itself.
- Your business details and everything you tell us about it during the guided interview.
- The website we build for you, its content, and the record of each time it is published.
- If you connect or buy a domain, the domain name and the DNS records needed to make it work.
- Messages sent through the contact form on a website you publish, which belong to you.
Your interview answers and business details are sent to OpenAI to generate your website's wording. That is the core of the service and cannot be switched off while still using it. OpenAI processes the text to return a result and we do not permit its use for training.
Some of this applies only once you use the feature it belongs to:
- Paid plans are not available during the public preview, so 2M Cloud processes no payment data at all today. When they open, Stripe will take the payment: card details and Direct Debit instructions go to Stripe and never reach us, and we hold only your subscription status, plan and invoice history.
- If you buy a domain through us, the registrar needs your name, address, email and phone number as the registrant. That is required by ICANN for every domain registration and we cannot avoid it. Some of it may appear in public registration records unless the registrar offers privacy protection.
- If you connect a domain you already own, we need only the domain name and the DNS records. We never ask for your registrar login and never take over your registrar account.
- If we set up an email address on your domain, Cloudflare Email Routing forwards messages to the address you nominate. We do not store the contents.
- When your site is published, it is hosted on Cloudflare Pages and served to the public.
Our lawful basis is performance of a contract: we cannot provide the service without this. While 2M Cloud is in public preview it is free, paid plans are not available, and sites created during the preview may be removed when we launch. We keep your account and its content while your account is open, and delete it within 30 days of you closing it. Invoices and accounting records are kept for six years, as tax law requires.
Career Optimiser
This one handles the most sensitive material, so it is worth reading closely.
- Your account, held by our sign-in provider Clerk: email address, name and how you signed in.
- Your CV or résumé, including everything in it, which often means your employment history, education, address and phone number.
- Job descriptions and adverts you paste in, and the applications you track.
- What the service produces for you: tailored CVs, cover letters and CV reviews.
- Support tickets and replies, and a record of which pages you viewed, which we count ourselves rather than through a third-party analytics service.
- If you subscribe, your subscription status. Card details go to Stripe and never reach us.
The content of your CV, job descriptions and related text is sent to OpenAI when you ask for a tailored CV, a cover letter or a review. That is what the feature does. We do not permit its use for training. Uploaded files are stored on our own server in the United Kingdom, not in third-party object storage.
Our lawful basis is performance of a contract. We keep your data while your account is open and delete it within 30 days of you closing it, except records we must keep for tax and accounting, which are kept for six years.
Who else processes your data
Each acts on our instructions under a contract, and none may use your data for their own purposes.
| Who | What for | Service |
|---|---|---|
| Google Cloud | The servers everything runs on, in London | All |
| Cloudflare | Security and delivery for every site; DNS, email routing and hosting for published 2M Cloud sites | All |
| Zoho | Our own email | All |
| OpenAI | Generating the text you asked for | 2M Cloud, Career Optimiser |
| Clerk | Sign-in and account management | Career Optimiser |
| Stripe | Taking card and Direct Debit payments. Payment details go to them, never to us | Career Optimiser |
| Resend | Sending the emails the service needs to send, such as password resets and notifications | 2M Cloud |
| Name.com | Registering a domain in your name | 2M Cloud, if you buy a domain |
A provider only receives your data if you use the feature it belongs to. We do not sell personal data, and we share it with nobody else unless the law requires it.
Where your data is processed
Our servers are in the United Kingdom. Some of the providers above are based in the United States, so your data reaches them there. Those transfers rely on the UK Extension to the EU-US Data Privacy Framework where the provider is certified under it, and otherwise on the UK International Data Transfer Addendum to the Standard Contractual Clauses.
Your rights
You have the right to ask for a copy of the personal data we hold about you, to have it corrected or deleted, to restrict or object to how we use it, and to receive it in a portable form. Write to [email protected] and we will respond within one month. Tell us which service you mean, since we hold different things for each.
If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint, by telephone on 0303 123 1113, or by post to Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. We would rather you came to us first so we can put it right.
Cookies
What each service stores in your browser is set out in our cookie notice.
Changes to this notice
If we change how we use personal data we will update this page and the date below. Last updated 28 September 2026.