Privacy Policy

1. Who we are

LMA39OL ("we", "us", or "our") operates the LMA39OL merchant-issued rating and trust platform. This Privacy Policy explains how we handle personal data when you visit our website, create an account, or use our services.

For the purposes of the EU General Data Protection Regulation (GDPR) and equivalent laws, LMA39OL is the data controller for the personal data described in this policy.

2. Information we collect

Account data: name, business name, email address, and credentials you provide when you register.

Transaction and rating data: information merchants submit when issuing ratings, and metadata associated with those records.

Technical data: IP address, browser type, device information, and pages visited, collected through cookies and similar technologies.

Communications: messages you send to our support or sales teams.

3. How we use your information

We use personal data to provide and maintain the service, authenticate users, process merchant-issued ratings, respond to enquiries, improve our platform, and comply with legal obligations.

We do not sell your personal data.

4. Legal bases for processing

Where GDPR applies, we rely on the following legal bases: performance of a contract (to deliver the service you request), legitimate interests (to secure and improve the platform), consent (for optional cookies and marketing), and compliance with legal obligations.

You may withdraw consent at any time where processing is based on consent.

5. Cookies and tracking

We use cookies and similar technologies to operate the site, remember your preferences, and measure usage. See our Cookie Policy for full details and how to manage your choices.

6. How we share information

We share personal data with service providers who process it on our behalf (such as hosting, analytics, and payment providers) under contractual safeguards, and with authorities where required by law.

We may share data as part of a merger, acquisition, or asset sale, subject to appropriate confidentiality protections.

7. Data retention

We keep personal data only for as long as necessary to fulfil the purposes described in this policy, to comply with legal obligations, resolve disputes, and enforce our agreements. When data is no longer needed, we delete or anonymise it.

8. International transfers

Where we transfer personal data outside your country or the European Economic Area, we use appropriate safeguards such as the European Commission's Standard Contractual Clauses to protect your data.

9. Your rights

Depending on your location, you have the right to access, correct, delete, or port your personal data, to restrict or object to processing, and to lodge a complaint with a supervisory authority.

To exercise your rights, contact us using the details on our Contact page. We will respond within the timeframes required by applicable law.

10. Data security

We implement technical and organisational measures including encryption in transit, access controls, and continuous monitoring to protect personal data against unauthorised access, loss, or misuse.

11. Children's privacy

Our services are intended for businesses and are not directed at children. We do not knowingly collect personal data from anyone under the age of 16.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the "Last updated" date above. Material changes will be communicated where required by law.