Privacy Policy

1Who is responsible for your data

The data controller is MKTTOOL LLC, a Wyoming limited liability company, EIN 35-2985622, registered agent address 5830 E 2nd St #6400, Casper, WY 82609-4308, United States.

For anything on this page, write to privacy@mkttool.com. A real person reads it.

We are a small company and we do not have a statutory Data Protection Officer. The founder handles data protection questions personally.

2What we collect, and why

We do not collect special category data, we do not profile you for automated decisions with legal effects, and we do not knowingly collect anything from children under 16.

3Your card details

We never see or store your full card number. When you pay, the card fields on the checkout page belong to our payment provider, not to us. The data goes directly to them.

What comes back to us is a confirmation that the payment succeeded, the amount, the currency, the card brand and the last four digits. That is all we hold, and it is what we need to recognise your payment if you contact us about it.

4Unfinished orders

Our checkout saves the email address as soon as you type it, before you pay. If you then leave without completing the order, we may send you one reminder with a link back to your basket.

We think that is useful, and the law in the EU and the UK lets us do it on the basis of legitimate interest for an order you started yourself. You may disagree, and if you do:

• every reminder has an unsubscribe link that works immediately,
• you can write to privacy@mkttool.com and we delete the record,
• we delete unfinished order records automatically after 30 days in any case.

A reminder is never a marketing campaign in disguise. It mentions the order you started and nothing else.

5Who else processes your data

We use a small number of service providers. Each one processes data on our instructions, under a contract, and only for the purpose listed.

We do not sell personal data. We do not share it with data brokers. We do not pass it to advertisers. The only other circumstances in which we would disclose it are a legal obligation, a lawful request from an authority, the defence of a legal claim, or the sale of the business, in which case you would be told before any transfer.

6International transfers

MKTTOOL LLC is a United States company, so if you are outside the United States your data is transferred there.

Where that transfer is from the European Economic Area, the United Kingdom or Switzerland, it is covered by the European Commission Standard Contractual Clauses, together with the UK Addendum where relevant, and by the certification of the providers concerned under the applicable transatlantic framework where they hold one.

You can ask us for a copy of the transfer mechanism that applies to a specific provider at privacy@mkttool.com.

7How long we keep things

Order records are the one thing we cannot delete on request. Tax law requires us to keep them, and that obligation overrides a deletion request. Everything else goes.

8Your rights

Wherever you live, you can write to privacy@mkttool.com and ask us to:

• show you what we hold about you,
• correct anything that is wrong,
• delete it, subject to the retention obligations above,
• export it in a machine readable file,
• stop a particular use, including the unfinished order reminders,
• withdraw a consent you gave, which does not affect what was lawful before you withdrew it.

We answer within 30 days and we do not charge for it. We may ask you to confirm your identity first, usually by replying from the address on the order, because handing your data to the wrong person would be worse than the delay.

If you are in the EU, the EEA or the UK

You have the rights above under the GDPR and the UK GDPR, and you may complain to your national supervisory authority. We would appreciate the chance to put it right first.

If you are in California

You have the right to know, to delete, to correct, and to opt out of the sale or sharing of personal information. We do not sell or share personal information as those terms are defined by the CCPA and the CPRA, and we have not done so in the past twelve months. We will not discriminate against you for exercising a right.

9How we protect it

The site runs over HTTPS. Passwords are stored hashed, never in readable form. Administrative access is limited to the founder. Card data never reaches our servers. Backups are encrypted and held by our host.

No system is perfectly secure, and we will not pretend otherwise. If a breach occurs that is likely to put your rights at risk, we will notify the relevant authority within 72 hours and tell you directly without undue delay.

10Cookies

The site uses a small number of cookies, some necessary for the basket and the login to function, some for analytics. The full list, what each one does and how to refuse them is on the Cookie Policy page.

11Changes to this policy

When we add a tool or change how we handle data, this page is updated and the date at the top changes with it. Material changes are announced by email to account holders.

Previous versions are kept. If you need the text that applied on a given date, ask us.