This policy explains how Marvline LLP (“MARVLINE”, “we”, “us”) collects and uses personal data when you visit this website or get in touch with us, and the rights you have under UK data protection law, including the UK GDPR and the Data Protection Act 2018.
01Who we are
Marvline LLP is a limited liability partnership registered in England and Wales with registration number [Company number]. Our registered office is [Registered office address].
For the personal data described in this policy, Marvline LLP is the controller. You can reach us about anything in this policy at [email protected].
02What this policy covers
This policy covers personal data we collect through this website and through enquiries you send us. It does not cover data we process on behalf of customers as part of our services — for example application data in software we build, or call and message records in our voice and SMS services. That processing is governed by our contract with the customer, including any data processing agreement.
03Information we collect
Information you give us
When you use the contact form or email us, we collect:
- your name and work email address;
- your company name, if you provide it;
- the service you are interested in; and
- the content of your message and any later correspondence.
Please don’t include sensitive information (such as health data) in your message — we don’t need it.
Information collected automatically
When you visit the site, our servers and network provider automatically receive technical information such as your IP address, browser type, the page requested and the date and time of the request. This is standard for any website and is used to deliver the site, keep it secure and prevent abuse.
Cookies and tracking
This website does not use cookies, analytics, advertising pixels or other tracking technologies, and our fonts are served from our own servers rather than a third party. If that changes, we will update this policy and, where required, ask for your consent first.
04How we use it and our lawful bases
| Purpose | Data | Lawful basis |
|---|---|---|
| Replying to your enquiry and discussing a possible project or service | Contact form and correspondence | Steps at your request before entering a contract (Art. 6(1)(b)); otherwise our legitimate interest in responding to enquiries (Art. 6(1)(f)) |
| Operating, securing and protecting the website, including limiting repeated form submissions | Technical information, including IP address | Legitimate interests in running a secure website (Art. 6(1)(f)) |
| Keeping records and defending legal claims | Correspondence | Legitimate interests (Art. 6(1)(f)) and legal obligations (Art. 6(1)(c)) |
We do not sell your personal data, use it for automated decision-making that has legal or similarly significant effects on you, or add you to marketing lists. We will only send you marketing if you ask us to, and you can opt out at any time.
05Who we share it with
We share personal data only with service providers that help us run the website and our business, acting on our instructions:
- Website hosting — [Hosting provider], which hosts the website and the service that receives form submissions;
- Network and security — Cloudflare, Inc., which delivers the website and protects it from attacks;
- Email — [Email provider], which delivers and stores our email, including enquiries from the contact form.
We may also share data with professional advisers (such as lawyers and accountants), with a buyer or successor if our business is reorganised or sold, or where required by law or to protect our rights.
06International transfers
Some of our providers may process data outside the UK. Where that happens we make sure the transfer is protected — for example by relying on UK adequacy regulations (including the UK Extension to the EU–US Data Privacy Framework) or by using the UK International Data Transfer Agreement or Addendum to the EU Standard Contractual Clauses. Contact us if you would like more information.
07How long we keep it
- Enquiries and correspondence — up to 24 months after our last contact with you. If you become a customer, we keep it for as long as our contract requires and for up to six years afterwards to meet legal and accounting obligations.
- IP addresses used to limit form submissions — held in memory for no more than 10 minutes.
- Server and security logs — kept for a short period, normally no more than 30 days, unless needed to investigate an incident.
08Security
The website is served over encrypted HTTPS connections, access to our systems is restricted to people who need it, and our providers are bound by confidentiality and security obligations. No system is completely secure, but we take appropriate technical and organisational measures to protect your data.
09Your rights
Under UK data protection law you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased in certain circumstances;
- restrict how we use your data in certain circumstances;
- object to processing based on our legitimate interests, and to direct marketing at any time;
- data portability — receive data you gave us in a reusable format, where the processing is based on a contract.
To exercise any of these rights, email [email protected]. We may need to confirm your identity, and we will respond within one month. Exercising your rights is free in most cases.
10Complaints
If you have a concern, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data protection regulator: ico.org.uk/make-a-complaint, or call 0303 123 1113.
11Children
Our website and services are intended for businesses and are not directed at children. We do not knowingly collect data from anyone under 18.
12Changes to this policy
We may update this policy from time to time. The “last updated” date at the top shows when it last changed; significant changes will be highlighted on this page.
13Contact us
Marvline LLP
[Registered office address]
[email protected]