Privacy Policy

Marketlyzer is operated by Neurotext Consulting Ltd (Company No. 15922577), a company registered in England and Wales. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our platform and services, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Controller

The data controller responsible for your personal data is:

2. Information We Collect

We collect the following categories of personal data:

a) Information you provide directly

• Account data: First name, last name, email address, and password when you create an account
• Payment data: Billing information processed securely through Stripe (we do not store card details on our servers)
• Contact data: Name, email, company name, phone number, and messages submitted via our contact or demo request forms
• Analysis inputs: Locations, business categories, and search parameters you enter when running analyses

b) Information collected automatically

• Session data: Authentication cookies required to keep you signed in (8-hour expiry, SameSite Lax)
• Rate limiting data: IP addresses are used temporarily for rate limiting purposes only and are not stored long-term
• Analytics: We use Google Analytics (Google Ads tag) to understand aggregate traffic patterns

3. Lawful Basis for Processing

We process your personal data on the following legal bases under the UK GDPR:

• Contract (Article 6(1)(b)): To provide our location intelligence platform, process your subscription, and deliver analysis reports
• Legitimate interests (Article 6(1)(f)): To improve our services, prevent fraud, and ensure platform security (e.g., rate limiting)
• Consent (Article 6(1)(a)): For marketing communications — you can withdraw consent at any time by unsubscribing
• Legal obligation (Article 6(1)(c)): To comply with applicable laws, regulations, or legal processes

4. How We Use Your Information

We collect your information solely to operate the Service — to authenticate your account, process payments, and deliver your analysis reports. We do not use your personal data for profiling, advertising, training models, or any purpose beyond providing the Service to you.

5. Information Sharing

We do not sell, rent, trade, or share your personal data with any third parties. Your data stays with us and is used solely to provide the Service.

6. International Data Transfers

Some of our third-party processors are based outside the United Kingdom. Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, including UK International Data Transfer Agreements or reliance on adequacy decisions, in compliance with UK GDPR requirements.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this policy:

• Account data: Retained for the duration of your account and for 30 days after deletion
• Analysis data: Retained as long as your account is active
• Contact form data: Retained for up to 24 months
• Payment records: Retained as required by applicable tax and accounting laws (typically 6 years)
• Rate limiting data: Automatically expires after 10 minutes

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

• Password hashing (passwords are never stored in plain text)
• HTTPS encryption for all data in transit
• Secure session management with SameSite cookie policies
• Time-limited password reset tokens (1-hour expiry)
• Input validation and sanitisation to prevent injection attacks
• Rate limiting to prevent brute force and abuse

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal data, we cannot guarantee absolute security.

9. Your Rights Under UK GDPR

Under the UK GDPR, you have the following rights:

• Right of access — Request a copy of the personal data we hold about you
• Right to rectification — Request correction of inaccurate or incomplete data
• Right to erasure — Request deletion of your personal data ("right to be forgotten")
• Right to restrict processing — Request that we limit how we use your data
• Right to data portability — Receive your data in a structured, machine-readable format
• Right to object — Object to processing based on legitimate interests or for direct marketing
• Right to withdraw consent — Where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us using the details in the Contact Us section below. We will respond to your request within one month, as required by law.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

10. Cookies

We use the following types of cookies:

• Essential cookies: Required for authentication and session management (cannot be disabled)
• Analytics cookies: Google Analytics cookies to understand aggregate traffic patterns

You can control non-essential cookies through your browser settings. Disabling essential cookies will prevent you from signing in and using the platform.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated Privacy Policy on this page with a new effective date. We encourage you to review this page periodically.

12. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us at: