Privacy Policy

Effective Date: July 7, 2025
Last Updated: July 7, 2025

At Margen Group, LLC, we value your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, share, and protect your data in compliance with global privacy regulations including:

• General Data Protection Regulation (GDPR - EU/EEA)

• UK GDPR

• California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA)

• Lei Geral de Proteção de Dados (LGPD - Brazil)

• ePrivacy Directive (EU Cookie Law)

• Other applicable privacy laws worldwide

By using our website, you agree to the practices outlined below.

1. Information We Collect
We collect personal and non-personal data to provide our services effectively.

a. Personal Data
Collected via forms, user input, or transactions:

• Name

• Email address

• Billing and payment details (if applicable)

• Account credentials (if login is required)

• Any communications sent via contact forms

b. Technical & Usage Data
Collected automatically via cookies or analytics tools:

• IP address (anonymized where required)

• Browser type and version

• Device and operating system

• Pages visited and session duration

• Referrer URLs

• Locale and language settings

2. Lawful Basis for Processing (GDPR, UK GDPR, LGPD)
We process your personal data only when there is a lawful basis:

• Consent (e.g., newsletter subscriptions)

• Contractual necessity (e.g., purchases or service access)

• Legal obligation (e.g., tax compliance)

• Legitimate interests (e.g., analytics, UX improvements), unless overridden by your rights

3. How We Use Your Information
We use your data for:

• Providing and maintaining the website

• Responding to inquiries or support requests

• Sending transactional or marketing communications

• Processing payments

• Analyzing usage and improving performance

• Ensuring security and fraud prevention

• Meeting legal obligations

We do not sell or rent your personal data.

4. Your Rights
Depending on your location, you may exercise the following rights:

GDPR & UK GDPR (EU/UK Residents)

• Right to access

• Right to rectification

• Right to erasure (“right to be forgotten”)

• Right to restrict processing

• Right to data portability

• Right to object

• Right to withdraw consent at any time

CCPA/CPRA (California Residents)

• Right to know what personal data we collect, use, and disclose

• Right to delete personal data

• Right to opt-out of data “sales” or “sharing” (we do not sell data)

• Right to non-discrimination for exercising rights

• Right to correct inaccurate data

• Right to limit use of sensitive personal information

LGPD (Brazil)

• Confirmation of data processing

• Access, correction, and deletion of personal data

• Data portability and anonymization

• Revocation of consent

5. Cookies and Similar Technologies
We use cookies and similar technologies in accordance with the EU ePrivacy Directive and global cookie laws.

Types of cookies:

• Essential: Required for site operation

• Analytics: Help measure site usage (e.g., Google Analytics, Plausible)

• Functional: Remember user settings or preferences

• Marketing: Personalize ads or measure campaign effectiveness

6. Data Sharing and Third Parties
We share your data only with trusted providers who are contractually bound to protect it:

Purpose

• Hosting

• Analytics

• Email Communication

Third-Party Service

• Framer

• Google Analytics

• Substack

We ensure all data transfers are governed by appropriate safeguards (e.g., SCCs, DPAs, and international frameworks such as the EU-U.S. Data Privacy Framework).

7. Data Security
We use industry-standard practices to protect your data:

• TLS/SSL encryption (HTTPS)

• Access control and authentication

• Secure cloud infrastructure

• Data minimization and anonymization

8. Data Retention
We retain personal data:

• For as long as necessary to fulfill purposes stated above

• To meet legal, accounting, or reporting obligations

• Until you withdraw consent (where applicable)

9. Children’s Privacy
Our website is not intended for children under the age of 13 (or equivalent age under local law). We do not knowingly collect personal data from children. If you believe we have inadvertently done so, please contact us immediately.

10. Updates to This Policy
We may update this Privacy Policy periodically. Any changes will be posted here with an updated effective date. If changes are material, we will notify users (e.g., via email or website banner).

11. Do Not Track (DNT)
Our website currently does not respond to “Do Not Track” signals, as there is no uniform DNT standard.

12. Accessibility
This Privacy Policy is available in accessible formats upon request to accommodate all users.