dmarcreport.co.uk Back to site
Legal

Privacy Policy

Version 1.0 · Last updated 7th July 2026

This policy explains what personal data dmarcreport.co.uk collects, why, and what your rights are. It is written to comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

The data controller is Shaun Cooke, trading as SealedMail, of Bellingham House, 2 Huntingdon Street, St Neots, Cambridgeshire, PE19 1BG. dmarcreport.co.uk is a wholesale/white-label brand operated by the same business as sealedmail.co.uk.

Contact for all data protection matters: [email protected]. SealedMail is registered with the Information Commissioner's Office.

2. What data we collect, and why

Partner enquiries

Data: your name, email address, MSP/business name, a client domain (if you give one), and any message you send us.

Lawful basis: steps taken at your request, and our legitimate interest in responding to enquiries about a pilot (UK GDPR Article 6(1)(b) and (f)).

Retention: 12 months after your enquiry is closed, then deleted. Enquiring does not add you to any marketing list.

Website visitors

Data: privacy-focused, self-hosted analytics (Umami) - pages visited, referrer, country, and device/browser type - and, on a sampled (~15%), masked basis, session replays of on-page interactions (mouse movement, clicks, scrolling, and masked form activity) used solely to find and fix usability problems. Umami does not track you across other sites and does not retain IP addresses; the analytics script stores a small token in your browser's local storage, and the replay script stores nothing on your device.

Lawful basis: consent (Article 6(1)(a)) - analytics and session replay load only after you opt in via the on-site banner, and you can withdraw at any time.

Retention: aggregated analytics statistics are retained indefinitely as they contain no personal data; session replays are retained for 30 days then deleted.

3. DMARC report data - not yet applicable

dmarcreport.co.uk does not currently process DMARC or TLS report data for any domain. We are in a pilot/enquiry stage: no wholesale monitoring service has gone live for any partner yet. When the first pilot goes live, this policy will be updated with a new version describing exactly what report data is processed, on whose instructions, and for how long, before that processing begins.

4. Who we share data with (sub-processors)

We do not sell personal data. Data is shared only with the service providers needed to run this site:

Our automation and form tooling (n8n) is self-hosted on our own infrastructure. No third party processes enquiry data beyond email delivery via Fastmail.

5. Where data is stored

Our infrastructure is hosted in the United Kingdom (Contabo). Backups are held in the UK across two independent providers - Contabo (server snapshots) and AWS's London region (off-site, encrypted copies). No personal data is transferred outside the UK or EEA without adequate safeguards in place.

6. Your rights

Under UK GDPR you have the right to: access the personal data we hold about you; rectification of inaccurate data; erasure; restriction of processing; portability; and to object to processing based on legitimate interests.

To exercise any right, email [email protected]. Requests are answered within one calendar month.

7. Cookies and similar technologies

This site sets no advertising cookies. Self-hosted Umami analytics is cookieless but stores a small analytics token in your browser's local storage, and the optional session-replay tool records masked on-page interactions. Because these are not strictly necessary, they load only with your consent via the on-site banner, which you can change at any time using the "Cookie settings" link in the footer. Full details are in our Cookie Policy.

8. Complaints

If you are unhappy with how your data has been handled, please contact [email protected] first so it can be put right. You also have the right to complain to the Information Commissioner's Office (ICO): ico.org.uk · 0303 123 1113.

9. Changes to this policy

Material changes are announced on this page. The version and date at the top always reflect the current policy.