Legal

Privacy Policy

Last updated: June 2025

1. Who We Are

Marktional Web is a trading name of Marktional, a web design and development service based in the United Kingdom. We operate the website at marktional-web.vercel.app.

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:

We are the data controller for the personal data collected through this website.

2. What Personal Data We Collect

We collect the following categories of personal data:

  • Contact information - your name, email address, phone number, and business name, provided when you submit our contact form.
  • Message content - any information you choose to include in your enquiry message.
  • Usage data - information about how you interact with our website, including pages visited, time spent on pages, referring URLs, browser type, operating system, and approximate location (country/region level). This data is collected via Google Analytics and is anonymised before processing.

We do not collect any special categories of personal data (such as health information, ethnic origin, or political opinions), and we do not knowingly collect data from individuals under the age of 16.

3. How We Collect Your Data

  • Contact form - when you submit an enquiry through our website contact form, we collect the information you provide directly.
  • Google Analytics - we use Google Analytics 4 to collect anonymised usage data about how visitors interact with our website. Google Analytics uses cookies to gather this information. See our Cookie Policy for full details.
  • Cookies - our website uses cookies for analytics and to remember your cookie preferences. Please refer to our Cookie Policy for a full list of cookies in use.

4. Why We Collect Your Data and Our Legal Basis

Under UK GDPR, we must have a lawful basis for processing your personal data. We process your data for the following purposes:

  • To respond to your enquiries - when you contact us via our form, we use your name, email, and message details to respond. Our lawful basis is legitimate interests (Article 6(1)(f) UK GDPR) - we have a legitimate business interest in communicating with prospective clients.
  • To improve our website - we use anonymised analytics data to understand how our website is used and to make improvements. Our lawful basis is legitimate interests in operating and improving our online presence.
  • Analytics cookies - where we use non-essential cookies (Google Analytics), we rely on your consent (Article 6(1)(a) UK GDPR) obtained through our cookie consent mechanism. You may withdraw consent at any time.

5. How Long We Keep Your Data

  • Enquiry data (contact form submissions) - retained for up to 2 years from the date of your enquiry, after which it is securely deleted. If we enter into a client relationship, we may retain relevant correspondence for the duration of that relationship and for a reasonable period afterwards for legitimate business purposes.
  • Google Analytics data - retained for 26 months, in line with Google's standard data retention settings, after which it is automatically deleted.
  • Cookie preference data - retained for 12 months, after which you will be asked to confirm your preferences again.

6. Who We Share Your Data With

We do not sell, rent, or trade your personal data with third parties for marketing purposes. We share data only where necessary with the following service providers:

  • Google LLC (Google Analytics) - we share anonymised website usage data with Google for analytics purposes. Google may process this data in the United States. Google is certified under the EU-US Data Privacy Framework and provides adequate safeguards. You can opt out of Google Analytics tracking via tools.google.com/dlpage/gaoptout.
  • Vercel Inc. (website hosting) - our website is hosted on Vercel's infrastructure. Vercel may process data such as IP addresses in server logs as part of providing hosting services. Vercel provides appropriate safeguards for international data transfers.

We may also disclose personal data where required by law, by court order, or to comply with regulatory obligations.

7. Your Rights Under UK GDPR

Under UK data protection law, you have the following rights in relation to your personal data:

  • Right of access - you have the right to request a copy of the personal data we hold about you (a Subject Access Request).
  • Right to rectification - you have the right to ask us to correct personal data that is inaccurate or incomplete.
  • Right to erasure - you have the right to request that we delete your personal data where there is no longer a legitimate reason for us to hold it.
  • Right to restrict processing - you have the right to ask us to pause the processing of your personal data in certain circumstances.
  • Right to data portability - where processing is based on consent or contract, you have the right to receive your data in a structured, commonly used, machine-readable format.
  • Right to object - you have the right to object to processing based on legitimate interests. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests.
  • Right to withdraw consent - where processing is based on consent (such as analytics cookies), you may withdraw consent at any time without affecting the lawfulness of prior processing.

8. How to Exercise Your Rights

To exercise any of the rights listed above, please contact us by email at hello@marktional.com. Please include your name and enough information to allow us to identify your data.

We will respond to all legitimate requests within one calendar month. If your request is complex or we receive a high volume of requests, we may extend this by a further two months, and we will notify you if this is the case.

We will not charge a fee for exercising your rights unless a request is manifestly unfounded or excessive, in which case we may charge a reasonable fee or decline to act on the request.

9. Right to Complain to the ICO

If you believe we have not handled your personal data in accordance with UK data protection law, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection.

We would appreciate the opportunity to address your concerns before you contact the ICO, so please contact us first at hello@marktional.com.

10. Cookies

Our website uses cookies to enable certain functionality and to collect anonymous analytics data. For full details of the cookies we use, their purpose, duration, and how to manage them, please see our Cookie Policy.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make significant changes, we will update the "last updated" date at the top of this page. We encourage you to review this policy periodically.

Continued use of our website after any changes constitutes your acknowledgement of the updated policy.

12. Data Controller Details

The data controller responsible for your personal data is:

For any data protection enquiries, please contact us at the email address above.

13. Legal Bases for Processing

Under UK GDPR, we rely on the following legal bases to process your personal data:

  • Contractual necessity (Article 6(1)(b)): Processing required to fulfil a contract with you or take pre-contractual steps at your request - for example, responding to enquiries and delivering services.
  • Legitimate interests (Article 6(1)(f)): Processing for our legitimate business interests, such as improving our website and services, where these interests are not overridden by your rights and freedoms.
  • Consent (Article 6(1)(a)): Where we seek your consent - for example, for analytics cookies. You may withdraw consent at any time via our Cookie Settings.
  • Legal obligation (Article 6(1)(c)): Where processing is required to comply with a legal obligation, such as responding to lawful requests from public authorities.

14. International Data Transfers

Our website is hosted on Vercel, whose infrastructure is operated from servers in the United States and other countries. When you visit our website, your data may be transferred to and processed in countries outside the UK.

Such transfers are covered by UK adequacy regulations and standard contractual clauses where applicable. Vercel maintains compliance with GDPR-equivalent data protection standards. For more information, see Vercel's Privacy Policy.

By using this website, you acknowledge that your data may be processed in these locations under appropriate safeguards.

15. ICO Registration

UK-based data controllers are required to register with the Information Commissioner's Office (ICO) unless an exemption applies. We comply with all applicable UK data protection law requirements.

If you have a concern about how we handle your data, you have the right to complain to the ICO at ico.org.uk or by calling 0303 123 1113.

16. Electronic Marketing (PECR)

The Privacy and Electronic Communications Regulations (PECR) sit alongside UK GDPR and give people specific privacy rights in relation to electronic communications.

We do not send marketing emails, text messages, or automated calls without your prior consent. If you contact us via our enquiry form and indicate an interest in our services, we may follow up on your specific enquiry - this does not constitute unsolicited marketing.

You can withdraw any marketing consent at any time by contacting us at hello@marktional.com.

17. Cookies Under PECR

PECR requires that we obtain your informed consent before storing or accessing non-essential cookies on your device. We comply with this requirement through our cookie consent system, which:

  • Presents you with a clear choice before any non-essential cookies are set.
  • Records your consent choice in your browser's localStorage.
  • Does not load Google Analytics or any other analytics cookies until you have given consent.
  • Allows you to change or withdraw your consent at any time via the "Cookie Settings" link in the page footer.

Strictly necessary cookies (which are essential for the website to function) do not require consent under PECR and are set regardless of your preference. For full details of every cookie we use, see our Cookie Policy.