What this site measures, and what it does not.
This site can run Google Analytics, and nothing else. It asks you first, and it measures nothing until you accept. If you decline, or if you never answer, no analytics is loaded at all. You can change that answer from the link in the footer of any page.
Who holds what
The short version of everything below.
| What | Where it lives | Who can reach it |
|---|---|---|
| Your ledger, bank and card systems | Your own accounts, unchanged | Us, as named users with least privilege and a timestamp |
| Working papers for a close in progress | A folder you own, in your storage | You and us. You can see it while we are writing it |
| What you type into the enquiry form | Netlify, our hosting provider, and our inbox | Us. Not added to a list, not passed to anyone |
| Which pages you read on this site | Google Analytics, only if you accept | Us, in aggregate. Nothing loads if you decline |
| Anything an automation touches | Never retained by the tool. Zero data retention is contractual | Nobody. A named person reviews before it reaches your ledger |
The website
What we run
Google Analytics 4, and no other measurement of any kind. There is no tag manager, no advertising pixel, no session recording, no heatmap, no chat widget, and no A/B testing tool.
Nothing loads until you accept
Analytics is not on this page when it arrives. A small script asks you, and only fetches Google Analytics if you accept. Your answer is kept in your own browser, not on a server, and it is the only thing stored before you accept. Decline and nothing is fetched and no cookie is set. If your browser runs no JavaScript you are never asked and never measured, which is the correct default rather than a degraded one.
The enquiry form
The contact page carries a form, and so does the panel that opens from the button in the corner of every page. Both send what you type to our hosting provider, Netlify, which stores it and emails it to us. We see your name, your email address, whatever you write in the message box, and which language and page you sent it from. We use it to reply. We do not add you to a mailing list, and we do not pass it to anyone else. You can email or book a call instead; nothing on this site requires the form.
What that collects
Which pages you looked at and in what order, how long you stayed, roughly where in the world you are, what kind of device and browser you used, and how you arrived: a search, a link, or typing the address. Google Analytics sets cookies in your browser to recognise a return visit, and it truncates your IP address rather than storing it in full.
We use it for one thing: to find out whether anyone reads the pricing page, and what they read before they book a call. We do not build profiles, we do not run advertising, and we have not connected this property to Google Ads or to any audience or remarketing feature.
How to switch it off
Use your browser’s tracking protection, or block cookies for this site, or install Google’s official opt-out add-on at tools.google.com/dlpage/gaoptout. Any of the three stops the measurement, and none of them stops the site working. There is nothing here that depends on analytics running.
The one third party: Google Fonts
The typefaces on this site are served from fonts.googleapis.com and fonts.gstatic.com, which are operated by Google. Loading them means your browser makes a request to Google, and Google therefore receives your IP address, your user-agent string and the address of the page you are on, in the ordinary way that any request to any server does. Google states that it does not use Fonts requests to build advertising profiles; we cannot independently verify that, so we are telling you the request happens rather than claiming this site has no third parties on it.
That is the complete list. Nothing else on these pages is fetched from anywhere but this domain.
The Chinese pages additionally load Noto Sans and Noto Serif from the same two Google hosts, so that Chinese text is set properly rather than left to whatever your device happens to have. Same two hosts, same disclosure, no additional third party.
Server logs
Our static host keeps standard web-server logs, as every host does. We do not read them, we do not export them, and we do not connect them to anything. We hold no mailing list, and there is no newsletter to unsubscribe from.
Client data
Where it lives
In your systems. We work inside your general ledger, your bank portal, your card programme and your document storage, under user accounts that belong to you and that you can revoke without asking us. We do not take a copy of your books and keep it here. Where a working paper has to exist outside your systems, such as a reconciliation in progress or a schedule being built, it lives in a folder you own, in your storage, and you can see it while it is being written.
Who can reach it
- Read-only before you sign, working access afterTo quote, we look at your books read-only. Once the engagement starts we hold the access the work actually requires, because from week one we are doing the work: posting entries, raising invoices and preparing payment runs. What we never hold, at any stage, is signing authority on your accounts.
- Named accounts, least privilegeEvery person who works on your books has their own account with their own name on it. No shared logins, no shared passwords, and no access beyond what the work requires.
- Contracted specialists are covered by the same termsAnyone we bring in signs the same confidentiality and data terms we sign with you, before they are given an account.
- Access ends when the work doesWe remove our own accounts within five business days of an engagement ending and confirm in writing that we have. You should revoke from your side as well; belt and braces is the correct number of belts.
The three rules we put in writing about AI
Software is a large part of how this firm delivers a fixed fee, and it would be dishonest to pretend otherwise. So here are the constraints, and they are contractual rather than aspirational.
- Zero data retention, in the contractNo tool touches client data unless the vendor has agreed in writing that inputs and outputs are not retained and are not used to train anything. A marketing page saying so is not sufficient; it has to be in the agreement, and we will show you which agreements we hold.
- A human reviews anything before it reaches the ledgerSoftware may read, extract, classify, draft and reconcile. Nothing posts to your general ledger without a named person having looked at it and accepted it. There is no configuration of this firm in which an automated process books an entry unreviewed.
- Named user, timestamped, or we do not use itEvery action in your systems must be attributable to a human being with a time against it. If a tool can only write as a shared service account, or writes without an audit trail, we do not use it on your books. This one has cost us tools we liked.
Asking us about your data
Write to contact@millracefinance.com and ask what we hold, where it is and who has reached it. You will get a straight answer, in writing, within five business days. If you ask us to delete a working paper we hold outside your systems, we will delete it and tell you when it is done, subject only to records we are required to keep.
Last updated 29 August 2026. If this page changes materially we will tell existing clients directly rather than quietly reposting it.