Skip to content

What we collect, why, who sees it, and the rights you have. Written to be read.

Last updated: 11 October 2026

1. Who we are

This website is operated by [to be provided before launch] (“MkkFx”, “we”, “us”), of [to be provided before launch]. We are the controller of the personal data described in this policy. You can contact us at [to be provided before launch] or through the contact form.

2. What we collect, why, and our lawful basis

  • Account details (name, email address, a hashed password managed by our authentication provider). To create and run your account. Lawful basis: performance of a contract.
  • Orders (products bought, amount, currency, tax, Stripe session and payment references, your email, and the time you confirmed you wanted immediate access to digital content). To deliver what you bought, give you access to downloads, handle refunds and keep the financial records we are legally required to keep. Lawful basis: contract and legal obligation. We never see or store your card number: payment is handled by Stripe.
  • Learning activity (lessons you mark complete or save). To show your progress in your dashboard. Lawful basis: contract.
  • Messages you send us through the contact form. To reply to you. Lawful basis: our legitimate interest in answering enquiries (and steps at your request before a contract).
  • Community waitlist (your email address and the time you agreed). To send you occasional updates about MkkFx. Lawful basis: your consent, which you can withdraw at any time.
  • Website analytics. We count visits without cookies. For each page view we record the page path, the website you came from (hostname only), a device class (mobile, tablet or desktop), and a one-way daily-changing hash of your IP address and browser details that lets us count unique visitors without being able to identify or follow you. We do not store your IP address in our analytics. We do not collect analytics if your browser sends a Do Not Track signal. Lawful basis: our legitimate interest in understanding how the site is used.
  • MkkFx Intelligence (AI assistant). The text you type is sent to our AI provider to generate a reply. We do not store your conversations. Please do not enter personal, financial or sensitive information. Lawful basis: your request for the service.
  • Security data. Your IP address is processed briefly by our hosting provider and by our rate limiter to keep the site secure and prevent abuse. Lawful basis: legitimate interest.

3. Cookies and local storage

We use only what is strictly necessary to run the site, so we do not show a cookie consent banner. These are: a secure session cookie that keeps you signed in; and entries in your browser’s local storage that remember your cart, your pre-trade checklist ticks and (while the opening sequence plays) a flag so you do not see it twice in one session. We do not use advertising, tracking or third-party analytics cookies. If that ever changes, we will ask for your consent first.

4. Who we share data with

We use a small number of service providers (“processors”) who handle data only on our instructions:

  • Supabase: database, authentication and file storage.
  • Stripe: card payments, receipts and fraud prevention. Stripe is also an independent controller of some payment data.
  • Vercel: website hosting and delivery.
  • Anthropic: the AI model behind MkkFx Intelligence, only when you use it and only if it is enabled.

We do not sell your personal data. Some of these providers process data outside the UK and European Economic Area; where they do, we rely on appropriate safeguards such as the UK International Data Transfer Addendum, standard contractual clauses or an adequacy decision.

5. How long we keep data

  • Account and learning data: until you delete your account.
  • Order records: as long as the law requires for tax and accounting, normally six years.
  • Contact messages: up to 24 months after the conversation ends.
  • Waitlist addresses: until you unsubscribe.
  • Analytics page views: up to 14 months.

6. Your rights

Under data protection law you can ask us to: give you a copy of your data; correct it; erase it; restrict or object to how we use it; and give you your data in a portable format. Where we rely on consent, you can withdraw it at any time. You can update your details and request account deletion from your account settings, or contact us. Some order records must be kept for legal reasons even after an account is deleted.

If you are unhappy with how we handle your data, you have the right to complain to the Information Commissioner’s Office (ico.org.uk) or to your local data protection authority. We would appreciate the chance to put things right first.

7. How we protect your data

Data is encrypted in transit. Access to personal data is restricted by database access policies so that you can only reach your own records, and administrative access is limited to authorised administrators. Paid downloads are held in private storage and delivered only to the buyer through short-lived links. No system is perfectly secure, and we will tell you and the regulator promptly if a breach affecting you occurs.

8. Children

This website is for adults. It is not directed at anyone under 18 and we do not knowingly collect their data.

9. Changes to this policy

We will update this page when our practices change and show the date at the top. Material changes will be flagged on the site or by email.