1. About this policy
This policy explains how personal data is handled on the Marshfellow website.
For privacy questions or to exercise your rights, email info@marshfellow.eu. You do not need to use the website contact form to make a privacy request.
This policy covers marshfellow.eu, www.marshfellow.eu and company enquiries relating to this website. It does not replace the separate privacy information provided with any Marshfellow app.
2. Information we process
When you visit, our hosting and security providers process technical request information, such as your IP address, browser information, requested page, request time and security events, to deliver and protect the website. The hosted site also includes platform-provided performance and traffic measurement; see section 4 and the Cookie Notice.
When you email us, we process your email address, name where provided, message, normal email metadata and any information you choose to include. Contact-form fields are first name, optional last name, email address, enquiry topic and message. Required fields are identified in the form. Please do not send passwords, payment-card details or unnecessary sensitive information.
You can browse without submitting a name or email address. We may be unable to answer an enquiry without a way to reply and enough information to understand it.
3. Contact forms and company updates
Email is currently the direct contact route: info@marshfellow.eu. Website contact-form delivery is not connected. A form submission is sent to the website server for validation and abuse prevention, but it is not forwarded to our inbox or saved in a contact database. An unavailable or failed response is not a delivery confirmation.
Company-update subscriptions are not active. An attempted signup is validated for abuse prevention, but no mailing-list subscription is created and no confirmation email is sent. We will update this policy and provide a separate opt-in, confirmation and unsubscribe process before enabling company-update emails. Contacting us does not subscribe you to marketing.
Form drafts are held in browser memory while the form is open, not in our localStorage or sessionStorage. Browser refresh or reset clears that application state. Submitted email addresses and request times are also used in the temporary abuse-prevention records described below.
4. Why we use information
We process company enquiries, relevant correspondence, basic website operation, security and proportionate technical diagnostics on the basis of legitimate interests under GDPR Article 6(1)(f). Those interests are answering questions, maintaining business communications, preventing abuse and providing a reliable website. Where you personally request steps towards a contract, Article 6(1)(b) may apply; where we must meet a legal duty or handle a data-rights request, Article 6(1)(c) applies.
The hosting platform supplies website performance and traffic measurements. Its published deployment includes a measurement script configured to send events to Tinybird. This is separate from advertising: we do not use this website to build advertising profiles or run targeted-advertising pixels. Technical diagnostics serve the reliability interests above. Any optional measurement that requires consent needs that separate consent; visiting this page or accepting these website terms is not consent to tracking or marketing.
We do not make decisions based solely on automated processing that have legal or similarly significant effects on you. Automated spam checks can temporarily limit repeated form submissions; you can contact us by email instead.
5. Providers and other recipients
Lovable supplies website hosting and platform services, with Cloudflare providing delivery and security. The published platform measurement script is configured to use Tinybird. Our business email is hosted by Google. These providers may process the data necessary for their respective services. While website-form delivery is disabled, submitted form content is not sent to an external email-delivery provider.
We may also share relevant information with professional advisers or competent authorities where necessary to address a legal matter or comply with law. We do not sell your personal data. Links to other websites take you to services with their own privacy information.
These providers may process information outside the European Economic Area, including in the United States. GDPR restrictions apply to such transfers: relevant safeguards can include an applicable European Commission adequacy decision or EU Standard Contractual Clauses with additional measures where necessary. The providers publish their data-protection and transfer terms. Contact info@marshfellow.eu for information about the safeguards applicable to your data or to request a copy.
Provider information: Lovable data processing terms; Cloudflare data processing terms; Google data processing terms; Tinybird data processing terms.
6. How long information is kept
Enquiry correspondence is kept while needed to respond, handle related follow-up and maintain an ongoing business relationship. If a message is needed to meet a legal obligation or establish, exercise or defend a legal claim, the relevant record may be kept for the applicable obligation or claim period. Otherwise it is deleted when no longer needed; we do not set an unlimited marketing-retention purpose for enquiries.
The website does not maintain a contact or subscriber database. Abuse-prevention records are held in temporary server memory. After 10 minutes of inactivity they are removed when that server next handles a request or restarts. They are not added to a mailing list.
Technical logs and platform measurements follow the hosting providers’ schedules and the purposes of security, fault investigation and service operation. Their retention may differ by service. Browser-cookie lifetimes are listed in the Cookie Notice; cookie expiry does not by itself delete server logs. Email or other necessary backup copies may remain until replaced through the relevant provider’s backup cycle.
7. Your rights
Depending on the circumstances, you may ask for access to your personal data, correction, deletion, restriction of processing or a portable copy where the right to portability applies. You may object to processing based on legitimate interests, including explaining your particular situation. If processing is based on consent, you can withdraw it at any time without affecting the lawfulness of earlier processing. You have an unconditional right to object to direct marketing.
Send requests to info@marshfellow.eu. We may request proportionate information to confirm your identity where necessary; please do not send an identity document unless requested. We respond without undue delay and normally within one month. Where the law permits an extension because of complexity or the number of requests, we will explain the reason within that first month.
You may complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), info@aki.ee, or use the complaint information at aki.ee. You may also contact the supervisory authority in the EU/EEA country where you live, work or believe an infringement occurred. You do not have to contact us first.
8. Security and changes
We use HTTPS and limit use of personal data to the purposes described here. No website or email system can guarantee absolute security. Let us know at info@marshfellow.eu if you believe information has been sent to us in error or exposed.
We update this policy when the website or its data handling changes and revise the date above. Where a change requires fresh notice or consent, updating this page alone does not replace that requirement.
