Privacy Policy

Marrowfield LLC is an Ohio limited liability company. We build and manage ecommerce businesses and brands, manage and scale digital advertising for ecommerce businesses, and develop mobile applications and software. For the purposes of the UK and EU General Data Protection Regulation, Marrowfield LLC is the controller of the personal information described in this policy.

We operate from the United States, and the information we collect is processed there. You can reach us about anything in this policy at info@marrowfieldllc.com, or by writing to us at the address at the end of this policy.

We collect only what we need to answer you and to keep this website working. We do not buy personal information from third parties, and we do not build profiles of the people who visit this site.

Information you give us

When you use our contact form, we collect your name, your email address, your company if you choose to provide it, the inquiry type you select, and the contents of your message. Your company is optional; everything else on the form is needed in order to reply.

Information collected automatically

Our hosting provider records basic technical data in its server logs, including your IP address, your browser and device type, the pages you request, and the date and time of each request. We also use a cookieless analytics service that reports aggregate page views and referrers. Neither is used to identify you.

Please do not send us sensitive personal information through the contact form. We do not ask for it and we do not need it in order to respond.

We use the information described above to:

• respond to your inquiry and correspond with you about it, including any follow-up discussion of a partnership or service;
• operate, maintain and secure this website, including detecting and preventing abuse of the contact form;
• understand in aggregate how the website is used, so that we can improve it; and
• comply with our legal obligations and establish, exercise or defend legal claims where that becomes necessary.

We do not use your information to send marketing messages, and we will not add you to a mailing list because you contacted us. We do not sell personal information, and we do not share it for cross-context behavioural advertising.

If you are in the United Kingdom or the European Economic Area, we rely on the following legal bases under the UK GDPR and the EU GDPR:

Legitimate interests

Responding to inquiries, keeping the website secure and available, protecting the contact form from abuse, and understanding in aggregate how the site is used. We have considered these interests against your rights and consider them proportionate, because the information involved is limited and is used only for the purpose you provided it for.

Steps prior to entering into a contract

Where your inquiry concerns a possible partnership or engagement, handling that correspondence is part of taking steps at your request before entering into a contract.

Legal obligation

Where we are required to retain or disclose information in order to comply with applicable law.

We keep the number of parties who handle your information as small as we practically can. The following providers process personal information on our behalf, under contracts that limit them to our instructions:

Vercel

Hosts this website and provides cookieless analytics. Vercel processes server log data, including IP addresses, in the course of serving the site.

Resend

Delivers the email generated by the contact form, both the message sent to us and the confirmation sent to you.

Cloudflare

Provides Turnstile, which protects the contact form from automated abuse. Turnstile receives technical signals from your browser in order to tell a person from a bot.

We may also disclose personal information where we are legally required to do so, or where it is necessary to establish, exercise or defend legal claims. We do not sell or rent personal information to anyone.

We operate from the United States, and the information described in this policy is processed there. If you are located in the United Kingdom or the European Economic Area, this means your information is transferred outside your country.

Where such a transfer takes place and the destination is not covered by an adequacy decision, we rely on appropriate safeguards, including the Standard Contractual Clauses approved by the European Commission and, for the United Kingdom, the International Data Transfer Addendum. You may request further information about these safeguards by writing to info@marrowfieldllc.com.

We keep contact form correspondence for as long as it is useful for the matter you raised, and then for a reasonable period afterwards in case the matter resumes or a legal claim arises. In practice this means we delete inquiries that did not lead to an engagement within approximately two years.

Server logs are retained for a short period by our hosting provider for security and troubleshooting. Aggregate analytics data contains no personal information and is kept in that aggregate form.

This website is served exclusively over HTTPS. Access to contact form correspondence is limited to the people within Marrowfield who need it in order to respond. Our service providers are chosen in part for their own security practices, and the credentials used to reach them are held server-side and are never exposed to your browser.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If you need to send us something confidential, please contact us first rather than putting it in the form.

Depending on where you live, you may have some or all of the following rights over your personal information. We honour these requests regardless of where you are, so far as applicable law allows.

Under the UK GDPR and the EU GDPR you have the right to access your personal information, to have inaccurate information corrected, to have information deleted, to receive it in a portable form, to object to processing carried out on the basis of legitimate interests, and to ask us to restrict processing in certain circumstances.

Under the California Consumer Privacy Act as amended by the California Privacy Rights Act, and under comparable laws in other United States states, you have the right to know what personal information we have collected and how we use it, to have it deleted, to have it corrected, and to opt out of its sale or sharing. We do not sell or share personal information for cross-context behavioural advertising, so there is nothing to opt out of, and we will not discriminate against you for exercising any right.

To exercise any of these rights, email us at info@marrowfieldllc.com. We will ask for enough information to be confident the request is genuinely yours, and we will respond within the period applicable law requires. You may use an authorised agent where the law permits.

If you are in the United Kingdom or the European Economic Area and you believe we have not handled your information properly, you also have the right to lodge a complaint with your supervisory authority. We would appreciate the chance to address your concern first.

This website is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please write to info@marrowfieldllc.com and we will delete it.

This site sets no advertising or analytics cookies. Our Cookie Notice explains what is and is not used, and how to control cookies in your browser.

We may update this policy as our practices or the law change. The date at the top of this page shows when it was last revised. If a change materially affects how we handle information you have already given us, we will take reasonable steps to tell you.

For any question about this policy, or to exercise a right described in it, write to us at info@marrowfieldllc.com or at the postal address below.