Privacy Policy | Marval Software As A Service

Marval Website Privacy Policy

1. About this policy

This policy explains how Marval collects, uses and protects personal information when you visit marval.global, register for our events and webinars, request a demo, or contact us.

Marval provides IT Service Management (ITSM) and Enterprise Service Management (ESM) software to organisations worldwide. [Marval Software Ltd], a company registered in [England and Wales] under company number [02425318], with its registered office at [3rd Floor, 86-90 Paul Street, London, EC2A 4NE, UK], is the controller of your personal information. In this policy, "Marval", "we", "us" and "our" refer to that company [and its group companies, including Marval offices in [Australia / other regions]].

We process personal information in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the EU General Data Protection Regulation (EU GDPR) where it applies, and other local laws such as the Australian Privacy Act 1988.

This policy covers our website and marketing activities only. Personal data processed within the Marval software on behalf of our customers is governed by our customer agreements and data processing terms.

2. Information we collect

We collect information you give us directly, information collected automatically when you use our website, and limited information from third parties.

Information you give us

Contact and business details: name, job title, company, work email address, phone number and country, when you fill in a form, request a demo or contact us.
Event and webinar registrations: the details above, plus session choices, dietary requirements or accessibility needs you choose to share for in-person workshops.
Marketing preferences: the topics and channels you want to hear from us about.
Communications: the content of emails, messages or calls you have with us.
Job applications: your CV and the information you include when applying for a role with us.

Information collected automatically

Device and usage data: IP address, browser type, device type, pages visited, referring site and time spent on pages.
Email engagement data: whether you open our emails and which links you click.
Cookies and similar technologies: see section 4.

Information from third parties

Business contact sources: publicly available business information, for example from LinkedIn or company websites, and details from event partners when you have agreed to share them with us.
Our partners and resellers: when they refer you to us.

3. How we use your information

We only use your information where we have a lawful basis to do so. Below is what we use it for and why.

Responding to enquiries and demo requests: based on our legitimate interests in responding to people interested in our software, and on taking steps before entering a contract.
Running events, workshops and webinars you register for, including reminders and follow-up: based on our legitimate interests, and on performance of a contract where you have booked a place.
Sending marketing emails about our products, events and insights: based on your consent, or on our legitimate interests for existing business contacts where the law allows. You can opt out at any time.
Business-to-business outreach to relevant contacts at organisations: based on our legitimate interests in promoting our software to organisations it may benefit.
Providing services to existing customers, including account and support communications: based on performance of a contract.
Analysing and improving our website and marketing: based on your consent for non-essential cookies, and on our legitimate interests.
Keeping our website secure and preventing misuse: based on our legitimate interests.
Assessing job applications: based on taking steps before entering a contract, and on our legitimate interests.
Meeting legal and regulatory obligations: based on legal obligation.

Where we rely on legitimate interests, we have weighed our interests against your rights and freedoms. You can ask us for more detail about this assessment. We do not use your information for automated decision-making that has legal or similarly significant effects on you.

4. Cookies and similar technologies

We use strictly necessary cookies to make our website work, and only use other cookies if you agree to them through our cookie banner.

Strictly necessary cookies keep the website running, secure and able to remember your cookie choices. These do not need your consent.
Analytics cookies tell us how visitors use the site so we can improve it, for example [Google Analytics]. We only use these with your consent.
Marketing cookies track interactions with our website and emails so we can tailor content and measure campaigns, for example [HubSpot / LinkedIn Insight Tag]. We only use these with your consent.

You can change your cookie preferences and you can also block or delete cookies in your browser settings, though some parts of the site may then not work properly. For a full list of the cookies we use, see our [Cookie Policy].

5. Who we share your information with

We do not sell your personal information. We share it only with the parties below, and only as needed for the purposes in section 3.

Marval group companies: so that the right regional team, for example in [the UK, Europe or Australia], can respond to you.
Service providers acting on our behalf: including website hosting ([Wix]), CRM and email marketing ([HubSpot]), webinar platforms ([Microsoft Teams]), analytics providers, and IT and cloud services. They may only use your information on our instructions.
Event venues and partners: limited details such as attendee names and dietary or accessibility requirements, where needed to run an in-person event.
Authorised resellers and partners: where you have asked to be put in touch with one, or where they support your organisation on our behalf.
Professional advisers and authorities: such as lawyers, auditors, regulators or law enforcement, where required by law or to protect our rights.
A buyer or successor: if Marval is involved in a merger, acquisition or sale of assets.

International transfers

Some of our group companies and service providers are based outside the UK and the European Economic Area (EEA), including in [the United States and Australia]. When we transfer your information outside the UK or EEA, we make sure it is protected by an appropriate safeguard. These include adequacy decisions, the UK International Data Transfer Agreement or Addendum, or the European Commission's Standard Contractual Clauses. You can contact us for a copy of the relevant safeguards.

6. How long we keep your information and how we protect it

We keep personal information only for as long as we need it for the purposes in this policy, then delete or anonymise it.

Marketing contacts with no engagement: [24 months] after your last interaction with us.
Event and webinar registrations: [24 months] after the event. Dietary and accessibility details are deleted within [30 days] after the event.
Enquiries and demo requests: [3 years] after our last contact.
Customer account information: for the length of the contract, plus [6 years] for legal and tax purposes.
Unsuccessful job applications: [6 months] after the role is filled, unless you agree to us keeping it longer.
Marketing opt-outs: indefinitely, on a suppression list, so we do not contact you again.

Security

We use appropriate technical and organisational measures to protect your information. These include encryption in transit, access controls, staff training and vetting of our service providers. No method of transmission over the internet is completely secure, but we work to protect your information and will notify you and the relevant regulator of a breach where the law requires.

7. Your rights

You have rights over your personal information, and you can exercise them free of charge by emailing [privacy@marval.global].

Depending on where you live, these include the right to:

Access the personal information we hold about you and receive a copy.
Correct information that is inaccurate or incomplete.
Delete your information where we no longer have a reason to keep it.
Restrict how we use your information in certain circumstances.
Object to processing based on legitimate interests, and to direct marketing at any time.
Data portability: receive information you gave us in a portable format, or have it sent to another organisation.
Withdraw consent at any time where we rely on it. This does not affect processing that took place before.

We will respond within one month. We may need to confirm your identity before acting on a request.

Stopping marketing

You can unsubscribe from our marketing emails at any time using the link at the bottom of any email, or by contacting us. We will still send you essential service messages if you are a customer.

Complaints

If you are unhappy with how we have handled your information, please contact us first so we can try to put it right. You also have the right to complain to a data protection regulator. In the UK, this is the Information Commissioner's Office (ico.org.uk). In the EU, it is the supervisory authority in your country, for example the Swedish Authority for Privacy Protection (IMY). In Australia, it is the Office of the Australian Information Commissioner (oaic.gov.au).

8. Other information

Children

Our website and services are for businesses and are not aimed at children. We do not knowingly collect information from anyone under 16.

Links to other websites

Our website may link to other sites, such as social media platforms and partner websites. We are not responsible for their privacy practices, so please read their policies.

Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated. If we make significant changes, we will let you know where appropriate.

Last updated: 23/10/2026

If you have any questions about this policy or how we handle your information, please contact:

Marval Software Ltd

Email: info@marval.co.uk