Privacy notice

Who is responsible

The data controller for the personal data described here is [Legal entity name], registered at [registered address] under company number [company registration number] (“PowerMTA Experts”, “we”, “us”). For any question about this notice or your data, contact us at [email protected].

What we collect

We collect three kinds of data, and no more than we need.

• Information you give us. When you submit the audit request, the contact form or the emergency form, we receive what you enter: your name, work email, company, and depending on the form your phone or messaging handle, affected domains, sending platform and volume, and the message or incident details you write.
• Technical data. Like any web server, ours records standard request information — IP address, browser type, referring page and timestamps — in logs used to keep the site secure and working.
• Cookies and similar. This site self-hosts its fonts and does not load third-party tracking scripts by default, so it sets only what is strictly necessary to function. If we later add analytics or other non-essential technologies, we will update this notice and, where the law requires it, ask for your consent first.

Why we process it, and our legal basis

Under the GDPR and equivalent laws, every use of your data rests on a legal basis.

• To respond and to provide our services — answering your message, running the audit, and carrying out an engagement you ask for. Legal basis: performance of a contract or steps taken at your request before one (Art. 6(1)(b)).
• To keep the site and our systems secure and to communicate about an engagement. Legal basis: our legitimate interests in operating and protecting our service (Art. 6(1)(f)), balanced against your rights.
• To send you material you opt into, if and when we offer it. Legal basis: your consent (Art. 6(1)(a)), which you can withdraw at any time.
• To meet legal and accounting obligations where they apply. Legal basis: compliance with a legal obligation (Art. 6(1)(c)).

How we use it

We use the information to reply to you, to assess and deliver the work you request, and to keep records of our dealings. We do not sell your personal data, and we do not use it for advertising or automated decisions that produce legal effects about you.

Who we share it with

We share data only with the service providers we rely on to operate — for example the form-processing backend that delivers your submissions to us, our hosting and email providers, and professional advisers where necessary. Each acts as a processor under contract and may only use the data to provide its service to us. The current list is on our sub-processors page. We disclose data to authorities only where we are legally required to.

International transfers

We work across Europe, North America and Latin America, so your data may be processed outside your own country. Where it leaves the European Economic Area, we rely on an adequacy decision or on appropriate safeguards such as the Standard Contractual Clauses. We can provide details of the safeguard used on request at [email protected].

How long we keep it

We keep your data only as long as we need it for the purpose it was collected: enquiry and audit data for as long as it takes to handle your request and for a reasonable follow-up period, engagement records for the duration of the relationship and the period our legal and accounting obligations require, and server logs for a short rolling window. When a purpose ends, we delete or anonymise the data.

Your rights

Subject to the conditions in the law, you have the right to access the personal data we hold about you, to have it corrected or erased, to restrict or object to its processing, to receive it in a portable form, and — where we rely on consent — to withdraw that consent at any time without affecting prior processing. To exercise any of these, write to [email protected]. You also have the right to lodge a complaint with your data protection authority; our lead supervisory authority is [lead supervisory authority].

How we protect it

Connections to this site are encrypted with TLS, access to submitted data is limited to the people who need it, and we apply the same infrastructure discipline to our own systems that we bring to client work. No method of transmission or storage is ever completely secure, but we take reasonable technical and organisational measures to protect your data.

Children

This site and our services are intended for businesses and the professionals who run them. They are not directed at children, and we do not knowingly collect data from them.

Changes to this notice

We may update this notice as our service or the law changes. When we do, we will revise the date above, and we will flag any significant change by a more prominent notice where appropriate.

Contact

For any privacy question, or to exercise your rights, reach us at [email protected]. [If you appoint a data protection officer or an EU/UK representative, name them and their contact here.]