1. Who we are
This website is operated by [to be provided before launch] (“MkkFx”, “we”, “us”), of [to be provided before launch]. We are the controller of the personal data described in this policy. You can contact us at [to be provided before launch] or through the contact form.
2. What we collect, why, and our lawful basis
- Account details (name, email address, a hashed password managed by our authentication provider). To create and run your account. Lawful basis: performance of a contract.
- Orders (products bought, amount, currency, tax, Stripe session and payment references, your email, and the time you confirmed you wanted immediate access to digital content). To deliver what you bought, give you access to downloads, handle refunds and keep the financial records we are legally required to keep. Lawful basis: contract and legal obligation. We never see or store your card number: payment is handled by Stripe.
- Learning activity (lessons you mark complete or save). To show your progress in your dashboard. Lawful basis: contract.
- Messages you send us through the contact form. To reply to you. Lawful basis: our legitimate interest in answering enquiries (and steps at your request before a contract).
- Community waitlist (your email address and the time you agreed). To send you occasional updates about MkkFx. Lawful basis: your consent, which you can withdraw at any time.
- Website analytics. We count visits without cookies. For each page view we record the page path, the website you came from (hostname only), a device class (mobile, tablet or desktop), and a one-way daily-changing hash of your IP address and browser details that lets us count unique visitors without being able to identify or follow you. We do not store your IP address in our analytics. We do not collect analytics if your browser sends a Do Not Track signal. Lawful basis: our legitimate interest in understanding how the site is used.
- MkkFx Intelligence (AI assistant). The text you type is sent to our AI provider to generate a reply. We do not store your conversations. Please do not enter personal, financial or sensitive information. Lawful basis: your request for the service.
- Security data. Your IP address is processed briefly by our hosting provider and by our rate limiter to keep the site secure and prevent abuse. Lawful basis: legitimate interest.
5. How long we keep data
- Account and learning data: until you delete your account.
- Order records: as long as the law requires for tax and accounting, normally six years.
- Contact messages: up to 24 months after the conversation ends.
- Waitlist addresses: until you unsubscribe.
- Analytics page views: up to 14 months.
6. Your rights
Under data protection law you can ask us to: give you a copy of your data; correct it; erase it; restrict or object to how we use it; and give you your data in a portable format. Where we rely on consent, you can withdraw it at any time. You can update your details and request account deletion from your account settings, or contact us. Some order records must be kept for legal reasons even after an account is deleted.
If you are unhappy with how we handle your data, you have the right to complain to the Information Commissioner’s Office (ico.org.uk) or to your local data protection authority. We would appreciate the chance to put things right first.
7. How we protect your data
Data is encrypted in transit. Access to personal data is restricted by database access policies so that you can only reach your own records, and administrative access is limited to authorised administrators. Paid downloads are held in private storage and delivered only to the buyer through short-lived links. No system is perfectly secure, and we will tell you and the regulator promptly if a breach affecting you occurs.
8. Children
This website is for adults. It is not directed at anyone under 18 and we do not knowingly collect their data.
9. Changes to this policy
We will update this page when our practices change and show the date at the top. Material changes will be flagged on the site or by email.