Privacy Policy

We are committed to protecting your personal data and being transparent about how we use it. This policy explains what we collect, why, and your rights under UK GDPR.

Last updated: 30 April 2026

1. What Data We Collect

We collect the following categories of personal data when you use Marko Marketing:

  • Account data — your name, email address, password (hashed), and profile information you provide on registration.
  • Business data — your company name, website, industry, and any social media accounts you connect to the platform.
  • Usage data — pages visited, features used, session duration, and interaction logs to help us improve the product.
  • Content data — posts, captions, images, and scheduling data you create or upload within the platform.
  • Payment data — billing name, address, and card details. Card data is processed and stored by our payment provider (Stripe) and never held on our servers.
  • Technical data — IP address, browser type, device information, and cookies.

2. How We Use Your Data

We use your personal data to:

  • Provide, operate, and maintain the Marko Marketing platform
  • Process transactions and send related billing communications
  • Send service notifications, security alerts, and support messages
  • Improve and personalise your experience through usage analytics
  • Send marketing communications where you have opted in (you may opt out at any time)
  • Comply with legal obligations under UK and EU law
  • Detect and prevent fraud or misuse of the platform

We rely on the following legal bases under UK GDPR: contract performance (to deliver the service), legitimate interests (to improve the platform and prevent fraud), consent (for marketing emails), and legal obligation (for compliance purposes).

3. Third-Party Sharing

We do not sell your personal data. We may share it with trusted third parties only where necessary:

  • Stripe — payment processing
  • Vercel / hosting providers — infrastructure and deployment
  • Analytics providers — aggregated, anonymised usage analytics
  • Social media platforms — when you connect accounts (e.g. Meta, LinkedIn) to publish content
  • Legal authorities — where required by law or court order

All third-party processors are bound by data processing agreements and must handle your data in compliance with applicable privacy law.

4. Cookies

We use cookies and similar tracking technologies to operate the platform and understand how it is used. These include:

  • Essential cookies — required for authentication and core functionality. Cannot be disabled.
  • Analytics cookies — help us understand usage patterns. Can be declined via our cookie banner.
  • Preference cookies — remember your settings and preferences across sessions.

You can manage cookie preferences at any time via your browser settings or our in-app cookie controls. Note that disabling essential cookies may affect platform functionality.

5. Your Rights

Under UK GDPR and the Data Protection Act 2018, you have the following rights:

  • Right of access — request a copy of the personal data we hold about you
  • Right to rectification — ask us to correct inaccurate or incomplete data
  • Right to erasure — request deletion of your personal data ("right to be forgotten")
  • Right to restrict processing — ask us to limit how we use your data
  • Right to data portability — receive your data in a machine-readable format
  • Right to object — object to processing based on legitimate interests or for direct marketing
  • Rights related to automated decision-making — we do not make solely automated decisions with significant legal effects

To exercise any of these rights, use our Data Request form or contact us at privacy@markomarketing.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

6. Data Retention

We retain your personal data only for as long as necessary to provide the service and fulfil our legal obligations:

  • Account data — retained for the duration of your account, plus 90 days after deletion to allow for recovery
  • Billing records — retained for 7 years in line with UK tax and accounting law
  • Usage logs — retained for up to 12 months, then anonymised
  • Support correspondence — retained for 2 years

After the applicable retention period, data is securely deleted or anonymised.

7. Contact & Data Controller

Marko Marketing is the data controller for personal data processed through this platform. We are registered in England & Wales and comply with the UK GDPR and Data Protection Act 2018.

For any privacy-related queries, requests, or concerns:

We aim to respond to all privacy enquiries within 5 business days.

This policy applies to markomarketing.com and all associated subdomains. Marko Marketing is registered in England & Wales and complies with the UK GDPR and Data Protection Act 2018. For data deletion requests, visit our Data Deletion page.