Privacy policy

Last updated: 22 October 2026

What we collect

Only what we need to quote the work, do it and invoice it:

• Contact details: name, email, company and phone, when you write to us or start an engagement.
• Project information: your site URL, the access credentials you choose to share, and the content you send for the work.
• Billing records: which engagement you bought, the amount and the date.
• Correspondence: the emails between us.
• Basic site analytics: pages visited and device type, in aggregate.

What we do not collect

We never store card numbers. Payment is processed entirely by our payment provider; we receive back a confirmation and the last four digits, nothing more.

We do not ask for government identification, tax numbers or health data, and we have no reason to.

Credentials you share with us

To do the work we usually need administrative access to your platform. We ask you to create a separate account for us rather than share your own password, and to revoke it when the engagement closes. Where a shared credential cannot be avoided, we store it in an encrypted password manager and delete it at handover.

Why we use it

• To scope, quote and carry out the work.
• To answer your questions and handle refunds.
• To meet our accounting and tax obligations.

We do not sell, rent or trade your data, and we do not use your project to train anything.

Who we share it with

Only the providers that make the work possible: our payment processor, our email provider and, where an engagement requires it, the hosting or platform vendor you already use. Each receives the minimum needed and cannot use it for anything else.

We may also disclose information where a competent authority requires it by law.

How long we keep it

Billing records are kept for seven years, as our accounting obligations require. Project files and correspondence are kept for twelve months after handover, in case you come back with a question, and then deleted. Credentials are deleted at handover.

Your rights

You can ask us at any time to show, correct or delete the personal data we hold about you. Write to contact@mryallc.com with the subject "Privacy" and we respond within 30 days.

If you are in California, the CCPA gives you the right to know what we hold, to request deletion and not to be discriminated against for asking. As we do not sell personal data, there is no sale to opt out of.

Cookies

This site uses only the technical cookies needed for the pages to work. No advertising or profiling cookies from third parties.

Security

The site is served over HTTPS. Access to project data is limited to the people working on your engagement.

Children

Our services are sold to businesses. This site is not directed at children and we do not knowingly collect their data.