Privacy Policy

Priority Notice

We gather various types of information to provide you with our services and improve your experience. The information we collect includes:

Personal Information

This may include your name, address, phone number, email address, payment history, and domain details. Personal information is mainly used for billing, account, and reporting purposes.

Customer Data Services

Our website uses cookies to enhance your experience and track usage for statistical purposes. You can also use personal settings to reject cookies, but some features of the website may not function if cookies are blocked.

Social Media

Our website features social media buttons that may collect your IP address and browsing information. Interactions with these buttons are governed by the relevant social media company's privacy policy.

Business Contact and Personal Data

MarketXY provides business, company, domain, internet infrastructure, and business contact information for legitimate business purposes.

Some information available through MarketXY may identify or relate to an individual acting in a professional or business capacity. Depending on applicable law, such information may be considered personal data, personal information, or personally identifiable information ("Personal Data").

We do not treat information as non-personal merely because it is publicly available or connected with a business.

Categories of Personal Data We May Process

Depending on the source and applicable law, MarketXY may process limited professional and business-related information, such as:

• professional name;
• job title or business role;
• company or organization;
• professional email address;
• professional telephone number;
• business address;
• company website;
• professional social profile or publicly available business profile;
• domain and company associations;
• professional or business information published by the individual, their employer, an organization, or another lawful source; and
• technical or business information connected with companies, domains, websites, networks, or internet infrastructure.

MarketXY is primarily designed for business-to-business use.

We do not intentionally build our business contact database from sensitive personal information such as medical information, racial or ethnic origin, religious beliefs, sexual orientation, biometric information, private financial credentials, passwords, or other categories of sensitive personal data, except where processing is specifically permitted or required by applicable law.

Sources of Business Contact Information

We may obtain information from sources including:

• publicly accessible business websites;
• company and organization websites;
• public professional profiles;
• government or corporate registries;
• public internet and domain records;
• publicly accessible web pages;
• licensed data providers;
• data partners;
• customers;
• information supplied directly by businesses or individuals; and
• information derived or inferred from business, domain, website, and internet infrastructure data.

Information being publicly accessible does not necessarily mean that it is not Personal Data.

Where required by law, MarketXY provides information about its processing of Personal Data and the categories of sources from which the information was obtained.

Purposes of Processing

MarketXY may process business and professional information for legitimate business purposes, including:

• business research;
• B2B sales intelligence;
• lead generation;
• business contact discovery;
• company research;
• cybersecurity;
• fraud and risk prevention;
• domain and website intelligence;
• data verification;
• business data enrichment;
• identifying relevant employees or business representatives;
• maintaining and improving data quality;
• maintaining suppression and opt-out records;
• preventing abuse of MarketXY services; and
• providing MarketXY products, APIs, datasets, search tools, and related services.

Customers may only use MarketXY data for lawful purposes and remain responsible for complying with laws that apply to their own use of the information.

Our Legal Bases

Where the GDPR, UK GDPR, or similar laws apply, MarketXY processes Personal Data only where an appropriate legal basis is available.

Depending on the processing activity, this may include:

Legitimate Interests

MarketXY may rely on legitimate interests under applicable data protection law for certain B2B processing activities.

These interests may include:

• providing business intelligence services;
• helping businesses identify and understand companies and professional contacts;
• maintaining accurate business information;
• preventing fraud and misuse;
• improving data quality;
• protecting our systems and customers; and
• supporting legitimate B2B research, sales, marketing, cybersecurity, and compliance activities.

Before relying on legitimate interests where required, we consider:

1. the legitimate purpose for processing the information;
2. whether processing is necessary and proportionate for that purpose; and
3. whether the individual's rights, freedoms, and reasonable privacy expectations outweigh our interests.

Legitimate interests are not used as an automatic justification for all processing.

Consent

Where applicable law requires consent for a particular processing activity, marketing communication, or category of information, we or our customers must obtain the required consent.

Contractual Necessity

We may process information where necessary to provide services requested under a contract.

Legal Obligations

We may process or retain information where required to comply with applicable laws, regulations, court orders, regulatory requests, or other legal obligations.

Professional Data and Direct Marketing

The inclusion of business contact information within MarketXY does not by itself give a customer unlimited permission to contact an individual.

Customers using MarketXY for sales, recruiting, advertising, email marketing, telephone marketing, or other direct marketing are responsible for determining whether consent or another legal basis is required under the laws applicable to them and the recipient.

This may include compliance with GDPR, UK GDPR, PECR, ePrivacy rules, CAN-SPAM, CCPA/CPRA, and other applicable privacy, electronic communications, telemarketing, and anti-spam laws.

MarketXY does not represent that publicly available information can always be used for marketing without restrictions.

Data Minimization

We seek to limit Personal Data to information reasonably relevant to professional, commercial, cybersecurity, research, compliance, or other legitimate business purposes.

Where practical, we may:

• limit the visibility of certain fields;
• mask portions of contact information;
• restrict access based on account type;
• restrict bulk downloads;
• apply rate limits;
• prevent access to sensitive information;
• provide aggregated information instead of individual-level information; or
• require additional verification before certain information is disclosed.

Accuracy and Correction

Business information changes over time.

MarketXY uses automated and manual processes to improve data quality, but we cannot guarantee that every data point is always complete, current, or accurate.

Individuals may request correction of inaccurate Personal Data relating to them where applicable law provides such a right.

Right to Object and Opt Out

Where applicable law provides the right to object to processing based on legitimate interests, an individual may submit an objection to MarketXY.

Individuals may also request that their business contact information not be used for direct marketing.

Where a valid objection or opt-out applies, MarketXY may place identifying information on a suppression list instead of completely removing every record. This allows us to remember the request and helps prevent the information from being added again in the future.

Suppression information will only be used for privacy and compliance purposes.

Data Removal and Privacy Requests

Depending on applicable law and subject to legal exceptions, individuals may have rights to:

• request access to their Personal Data;
• request information about the sources of their Personal Data;
• request correction;
• request deletion;
• object to certain processing;
• restrict certain processing;
• opt out of direct marketing;
• opt out of certain sales or sharing of Personal Data;
• withdraw consent where processing is based on consent; and
• lodge a complaint with an appropriate data protection authority.

MarketXY provides a privacy request process at: marketxy.com/data-removal

Requests may also be submitted to: privacy@marketxy.com

We may take reasonable steps to verify the identity of the person making a request before disclosing, correcting, or deleting Personal Data.

Sale or Sharing of Personal Information

Some privacy laws use specific legal definitions for terms such as "sell," "sale," "share," or "sharing."

Where MarketXY activities fall within these definitions, we provide applicable consumers with the rights and mechanisms required by law, including the ability to opt out where required.

Residents of jurisdictions that provide a right to opt out of the sale or sharing of Personal Data may submit a request through: marketxy.com/data-removal

Where legally required, MarketXY also recognizes applicable browser-based opt-out preference signals, such as Global Privacy Control.

Data Obtained From Third Parties or Public Sources

MarketXY may receive Personal Data from sources other than the individual.

Where required by applicable law, we provide the information required by law concerning:

• our identity;
• our purposes for processing;
• the categories of Personal Data involved;
• the legal basis relied upon;
• our legitimate interests where applicable;
• categories of data sources;
• recipients or categories of recipients;
• retention practices;
• international transfers; and
• the individual's applicable privacy rights.

Retention

MarketXY does not intend to retain Personal Data longer than reasonably necessary for the purposes for which it is processed.

Retention periods may depend on:

• the nature of the data;
• how frequently the information changes;
• the source;
• legal requirements;
• data accuracy;
• contractual obligations;
• security requirements; and
• privacy or suppression requests.

Suppression records may be retained for a longer period where necessary to ensure that an individual's opt-out or deletion preference continues to be respected.

Data Security

MarketXY uses reasonable technical and organizational measures designed to protect Personal Data against unauthorized access, loss, misuse, alteration, or disclosure.

Access to certain types of information may be controlled through authentication, authorization, access limits, logging, monitoring, masking, and other security controls.

Customer Responsibilities

Customers must not use MarketXY services to:

• harass individuals;
• send unlawful spam;
• unlawfully discriminate;
• conduct unlawful surveillance;
• commit identity theft or fraud;
• obtain passwords or authentication credentials;
• make decisions prohibited by applicable law;
• process sensitive Personal Data unlawfully; or
• violate privacy, marketing, communications, employment, credit, consumer protection, or other applicable laws.

Customers are responsible for establishing their own lawful basis where required for their use of Personal Data obtained through MarketXY.

MarketXY may suspend or terminate access where it reasonably believes the services are being used unlawfully or in violation of our Terms.

Contact

Questions or requests concerning privacy or Personal Data may be sent to:

MarketXY Privacy Team

Email: privacy@marketxy.com

Privacy Request: marketxy.com/data-removal

Company: AllHeart Web Inc.

Address: Canada

Where required, details of our Data Protection Officer, EU Representative, UK Representative, or other local privacy representative will also be provided.

Information We Collect

We use the information provided for billing, service provision, and customer support. Non-identifying aggregated data may be used for promotional purposes. We take necessary measures to protect your data privacy and will never sell your personal information to third parties for commercial purposes. We may share information with trusted partners in strict accordance with the law.

Disclosure of Information

We may share your information with partners, sponsors, and customer support. Non-identifying aggregated information may be used for promotional purposes. We take necessary measures to protect your data privacy and will never sell your personal information to third parties for commercial purposes. We may share information when requested by law or to protect our rights or the safety of individuals.

Options & Control

You can review, update, or delete your personal data at any time by contacting us. You can opt out of newsletters or promotional communications at any time. However, this will not affect essential communications that you may receive as part of our services.

Security

We employ technical security measures to protect unauthorized access to, disclosure of, or use of your data. Sensitive information is collected using SSL encryption.

Children's Privacy

Our services are not intended for children under 18, and we do not knowingly collect personal data from them.

Changes to This Policy

We reserve the right to change this Privacy Policy. Major changes will be communicated to visitors.

How We Use Your Information

We have a legal obligation to comply successfully with all relevant laws and regulations as and when they pertain to our efforts. We use the information we collect about you for numerous reasons unless you withdraw your consent:

1. To provide you with the services we offer.
2. To respond to your requests and address any issues.
3. To inform you about changes to our services.
4. To improve the quality of our services and user experience.
5. To send you marketing or promotional materials (with your consent).
6. To process your payments.
7. To manage customer relationships.
8. To track site usage and engagement through third-party analytic tools.
9. To send service updates or newsletters.
10. To protect against fraudulent or malicious activity.
11. To fulfill legal obligations.
12. To send you account notifications.
13. To target appropriate ads based on your preferences.

Sharing of Information

Sharing With Partners

When we share personal information with our trusted third-party partners, those partners have certain obligations to protect your data and use it only for lawful, contractually agreed purposes. This includes:

• To provide you with our products and services.
• To provide you with customer support.
• To process transactions on our behalf.
• To improve our services and the user experience.
• To provide analytics services that help us understand how our services are used.

Corporate Reorganizations

If we are involved in a merger, acquisition, or sale of a considerable portion of our assets, or other similar corporate event, your information will be transferred as part of that transaction.

Legal Process

We comply with valid legal requests and respond to subpoenas and similar legal requests. We may also take steps to comply with a valid subpoena or other legal process.

Retention of Information

We keep account, billing, and subscription records for as long as your account is active and afterward for as long as required to meet our own legal, tax, and contractual obligations.

For personal contact details we collect outside of an active account relationship — such as a name, email, or phone number left through our chat assistant or a similar contact form — we keep the real value for up to 24 months from when it was collected, after which it is automatically anonymized by a scheduled process; a record that the contact once existed may be kept longer in de-identified form for our own reporting. A data-removal request itself (see Options & Control below) is kept only long enough to prove the removal was actually carried out, with the requester's own contact details anonymized on the same 24-month schedule once the request is resolved.

These figures are a current operating policy, not a fixed legal maximum — we may shorten them, and will update this page if we do.

Data Transfer

In order for you to access our services, it may be necessary for your personal information to be transferred internationally. We will take reasonable steps to ensure that your personal information is treated securely and in accordance with this privacy policy.

Brazil (LGPD) & International Rights

If you are located in Brazil, our processing of your personal data is also governed by the Lei Geral de Proteção de Dados (LGPD). In addition to the rights described elsewhere in this policy, you may:

• Confirm whether we process your data, and access it.
• Correct incomplete, inaccurate, or outdated data.
• Request anonymization, blocking, or deletion of unnecessary, excessive, or non-compliant data.
• Request portability of your data to another provider.
• Be informed of the public and private entities with whom we share your data.
• Be informed of the possibility of, and the consequences of, not giving consent.
• Revoke your consent at any time, where consent is our basis for processing.

These rights are exercised through the same channel as any other privacy request — privacy@marketxy.com or our data-removal request form — regardless of where you are located; we don't operate a separate process for Brazilian data subjects. If we become aware of a security incident affecting your data, we will notify Brazil's National Data Protection Authority (ANPD) and affected individuals where the law requires it.

The same rights, in substance, are available to data subjects in other jurisdictions with similar laws (for example the EU/UK GDPR and U.S. state privacy laws) through this same contact channel.

Notification of Changes

We reserve the right to modify this privacy policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their posting on the website. We will add a "last updated" date at the top of the page.