Privacy policy
Last updated 2026-10-06
Draft pending owner and legal review. Entity and jurisdiction details are preserved from the previous site and editable in site settings.
This policy explains how the operator of MarketAlleys [legal entity name to be confirmed] (“MarketAlleys”, “we”, “us”) handles personal data when you use marketalleys.com. It replaces the policy that took effect on 20 March 2024 and reflects the features of the rebuilt site.
Data controller: the operator of MarketAlleys [legal entity name to be confirmed] ([registration number to be confirmed]), [registered address to be confirmed]. Contact: support@marketalleys.com.
We process personal data in accordance with the GDPR (Regulation (EU) 2016/679) and, where applicable, the UK GDPR.
What we collect
When you simply read the site
- Aggregate, privacy-aware analytics: the page viewed, the article category, a coarse device type (mobile/tablet/desktop), the referring website’s domain and, where our hosting provider supplies it, your country. We do not store your IP address and we do not set analytics cookies for this. To count unique visits we use a one-way hash of your IP address and browser identifier combined with a secret that changes daily, so visits cannot be linked across days. Raw events are deleted after a few days; only daily totals are kept.
- Standard server logs kept by our hosting provider for security and reliability.
If you create an account
- Your email address, display name, password (stored only as a salted hash), timezone and the market preferences you choose.
- Your watchlist, saved articles, saved searches and notification preferences.
- Session records (including IP address and browser user-agent) to keep you signed in and protect your account.
If you subscribe to MarketAlleys Pro
- Payments are handled by Stripe. We receive your Stripe customer and subscription identifiers, plan, status and renewal dates. We never receive or store your full card details.
If you sign up for a newsletter
- Your email address, the lists you chose, when you confirmed, and a token used for one-click unsubscribe and preference links.
If you enable browser notifications
- The push subscription endpoint and keys issued by your browser, and the topics you chose.
If you contact us, request a media plan or submit a press release
- The details you provide in the form, plus the referring page and campaign (UTM) parameters for advertising enquiries.
How we use data and our legal bases
| Purpose | Legal basis (where UK/EU GDPR applies) |
|---|---|
| Providing accounts, watchlists, saved items and alerts | Performance of a contract |
| Processing Pro subscriptions via Stripe | Performance of a contract; legal obligation (tax/accounting records) |
| Sending newsletters you requested | Consent (you can withdraw at any time) |
| Service and security emails (verification, password reset, billing) | Performance of a contract; legitimate interests |
| Aggregate analytics and advertiser reporting | Legitimate interests (understanding readership without identifying individuals) |
| Optional Google Analytics | Consent — only loaded if you accept it in cookie settings |
| Responding to enquiries and advertising leads | Legitimate interests; steps prior to a contract |
| Preventing fraud, abuse and bot traffic | Legitimate interests |
Advertising
Ads on MarketAlleys are served from our own first-party system. We count impressions and clicks using the same daily-salted hashing described above, with no advertising cookies and no cross-site tracking. Clicking an ad takes you to the advertiser’s website, where their own privacy policy applies. Sponsored content and press releases are labelled.
Automated content tools
Automated reports are generated from public market data and published sources using third-party language-model providers. We do not send readers’ personal data to these providers for report generation.
Who we share data with
We use service providers (“processors”) who act on our instructions: our hosting and database provider (Render), payments (Stripe), email delivery (Resend), browser push services operated by your browser vendor, market-data providers (which receive no personal data) and, only if you consent, Google Analytics. We do not sell personal data. We may disclose data where required by law or to protect our rights and users.
International transfers
Our providers may process data in countries outside your own, including the United States. Where UK or EU data-protection law applies, transfers rely on appropriate safeguards such as adequacy decisions or standard contractual clauses.
Retention
- Account data: for as long as your account is open, then deleted within 30 days of closure (except records we must keep by law).
- Newsletter data: until you unsubscribe; we then keep a minimal suppression record so we do not email you again.
- Raw analytics and ad events: up to 7 days; aggregated daily totals contain no personal data.
- Billing records: as required by tax and accounting law.
Your rights
Depending on where you live, you may have rights to access, correct, delete, restrict or object to the processing of your personal data, to data portability and to withdraw consent. Signed-in users can export or delete their data from account settings. To exercise any right, email support@marketalleys.com. If UK or EU GDPR applies to you, you may also complain to your data-protection authority (in the UK, the Information Commissioner’s Office).
Children
MarketAlleys is not directed at children under 16 and we do not knowingly collect their personal data.
Security
We use encryption in transit (HTTPS), hashed passwords, secure http-only cookies, access controls and audit logging for administrative actions. No system is perfectly secure; we will notify affected users and authorities of breaches where the law requires.
Changes
We will update this page when our practices change and show the date of the latest version above.