Privacy Policy

Effective date: October 2, 2025

1) Who we are

Controller: Magnummy Ltd.

2) Scope

This Policy explains how we collect, use, disclose, and protect personal data when you visit magnummy.com, use our services, or contact us.

3) Data we process

  • Usage and device data: IP, user-agent, pages viewed, timestamps, referrers.
  • Cookie identifiers and similar technologies.
  • Contact data: name, email, company, role.
  • Billing records: billing name, address; payments via PCI-DSS processors.
  • Support data: messages, attachments, call notes.
  • Marketing preferences: consents, unsubscribes.

4) Purposes and legal bases (GDPR)

Purpose Examples Legal basis
Service delivery Provide accounts, billing, support Art. 6(1)(b) contract
Improvement and safety Debug, prevent abuse, ensure uptime Art. 6(1)(f) legitimate interests
Marketing Newsletters with opt-in Art. 6(1)(a) consent; or Art. 6(1)(f) where permitted
Compliance Tax and accounting records Art. 6(1)(c) legal obligation

5) Sharing

We share data with hosting, analytics, communications, and payment vendors under data-processing terms. We may disclose information to advisors or authorities where required by law, and to a successor in case of merger or acquisition.

We do not sell personal data.

6) International transfers

When data leaves your country, we use safeguards such as Standard Contractual Clauses and transfer impact assessments. Copies available on request.

7) Retention

We retain data only as long as needed for the purposes above, then delete or irreversibly anonymize it. Typical periods: account data for the life of the account + 6 years; logs up to 12 months unless needed for safety.

8) Your rights (GDPR/UK GDPR)

  • Access, rectification, erasure.
  • Restriction and objection.
  • Data portability.
  • Withdraw consent at any time without affecting prior processing.
  • Lodge a complaint with your supervisory authority.

Send requests to privacy@magnummy.com. Identity verification is required.

9) Children

Our services are not directed to children under 16. We delete such data if discovered.

10) Security

Administrative, technical, and organizational measures appropriate to risk, including encryption in transit, access controls, and logging.

11) Cookies Policy

We use cookies and similar technologies.

Type Examples Retention
Strictly necessary Session ID, consent status Session to 12 months
Performance Aggregated analytics Up to 12 months
Functionality Language and preference storage Up to 12 months
Marketing Campaign attribution Up to 12 months

Consent

Where required, we obtain consent through a banner before setting non-essential cookies.

Managing cookies

You can control cookies via your browser settings. Blocking some cookies may affect site functionality.

12) Third-party services

Our site may include links or SDKs from third parties. Their privacy practices apply to their services.

13) Changes

We may update this Policy. Material changes will be posted here with a new effective date.