Privacy Policy
Last updated: 7 April 2026
This Privacy Notice for Marmot Data ("we", "us", or "our") describes how and why we collect, store, use, and share your personal information when you use our website at marmotdata.io or engage with us in other related ways, including marketing communications.
Questions or concerns? Contact us at privacy@marmotdata.io.
1. What information do we collect?
We only collect personal information that you voluntarily provide to us. We do not use cookies, analytics, or any form of automatic tracking. The information we collect depends on how you interact with us:
| Form | Data collected |
|---|---|
| Cloud waitlist | Email address, marketing preference |
| Contact / enquiry | Name, email address, message content |
We do not collect sensitive personal information, and we do not collect any information from third parties.
2. How and why do we process your information?
We process your personal information for the following purposes:
- To notify waitlist registrants when Marmot Cloud launches — fulfilling the purpose for which you signed up.
- To respond to enquiries — replying to messages you send us via the contact form.
- To send marketing and product updates — only if you have given us explicit consent by ticking the marketing checkbox. You can opt out at any time by clicking the unsubscribe link in any email, or by contacting us.
3. What legal bases do we rely on?
Under the UK GDPR and EU GDPR, we rely on the following legal bases:
- Consent — for sending marketing and promotional communications. You can withdraw your consent at any time.
- Legitimate interests — for notifying waitlist registrants when the product launches, and for responding to enquiries you have sent us. These interests do not outweigh your rights and freedoms given the limited data involved and your reasonable expectations when submitting the forms.
- Legal obligations — where necessary for compliance with applicable law.
4. Who processes your data?
We share your personal information with the following service providers who act as data processors on our behalf:
| Provider | Purpose | Location |
|---|---|---|
| Cloudflare | API request processing | Ireland (EU) |
| Resend | Email delivery and contact list management | United States |
We do not sell, rent, or share your personal information with any third party for their own marketing purposes. We may transfer your information in connection with a merger or acquisition of our business.
5. International transfers
Your data is processed by Cloudflare Workers and stored by Resend in the United States for email delivery and contact list management.
Where data is transferred outside the UK or EEA, we rely on the European Commission's Standard Contractual Clauses (SCCs) and the UK's International Data Transfer Agreement to ensure your personal information receives an adequate level of protection.
6. How long do we keep your information?
- Waitlist contacts — retained until the product launches or for up to 12 months, whichever is sooner, then removed.
- Newsletter subscribers — retained until you unsubscribe.
- Contact enquiries — used only to send a notification email and not stored beyond delivery.
When we have no ongoing legitimate business need to process your personal information, we will delete or anonymise it.
7. How do we keep your information safe?
We have implemented appropriate technical and organisational security measures, including encrypted connections (TLS), access controls, and EU-region data storage. However, no electronic transmission over the internet can be guaranteed to be 100% secure.
8. Children
We do not knowingly collect data from or market to anyone under 18 years of age. If we learn that we have collected personal information from a child, we will promptly delete it. Please contact us at privacy@marmotdata.io if you believe we have inadvertently collected such data.
9. Your rights
Depending on your location, you may have the following rights under applicable data protection laws (including UK GDPR, EU GDPR, CCPA, and other regional laws):
- Access — request a copy of the personal information we hold about you.
- Rectification — request correction of inaccurate data.
- Erasure — request deletion of your personal information.
- Restriction — request that we limit how we use your data.
- Portability — receive your data in a structured, machine-readable format.
- Objection — object to processing based on legitimate interests.
- Withdraw consent — where we rely on consent (e.g. marketing), you can withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, email us at privacy@marmotdata.io. We will respond within one month (or sooner where required by law).
We do not sell your personal data, do not engage in targeted advertising, and do not profile users. US residents have the right to non-discrimination for exercising their privacy rights.
If you believe we are unlawfully processing your personal information, you have the right to lodge a complaint with your local data protection authority. In the UK, this is the Information Commissioner's Office (ICO).
10. Updates to this notice
We may update this Privacy Notice from time to time. The updated version will be indicated by a revised "Last updated" date at the top of this page. If we make material changes, we will notify you by prominently posting a notice on our website.
11. Contact us
If you have any questions about this Privacy Notice or wish to exercise your rights, contact us at:
Marmot Data
Email: privacy@marmotdata.io
United Kingdom