What we collect, what we process, and why.

This site sets no cookies and runs no third-party analytics, advertising or tracking script of any kind. There is nothing here to consent to, because there is nothing collected. Fonts are self-hosted from this domain rather than fetched from a third-party font service at request time, so visiting this site never sends your IP address anywhere else to render text.

The Talk to us page links to Calendly so you can choose a thirty-minute slot. Calendly is not embedded on this site; if you follow that link, you leave MarginLoop and Calendly receives whatever it needs to run the booking. If you would rather not use Calendly, the phone number, WhatsApp link and email address are published beside it.

There is no newsletter sign-up. There is one callback form, on the Talk to us page, and it collects only what you type into it: your name, mobile number, business name and site count. It is sent to us and to nobody else, it is not wired to any third-party marketing service, and it sets no cookie.

If you call, message or email us, what you send, typically your name, business name and contact details, is handled like any business correspondence. Our lawful basis is legitimate interest: you have contacted a business about its product, and we use what you sent to have that conversation and for our own record-keeping obligations. It is never added to a marketing list you did not ask to join, never sold, and never passed to a third party for marketing. Ask us to delete it and we will.

Once a business becomes a customer, MarginLoop processes the sales, purchase, stock, supplier and customer-account data that business sends us, in order to build its own morning list. This is business commercial data, processed for that business. It is never pooled with, or used to advise, a different customer.

The one exception is narrow and factual, not commercial:

• A product fact, a barcode, a pack size, a unit of measure, may be used to improve a shared product catalogue that helps every customer's own data map correctly.
• Your prices, volumes, margins, suppliers, customers and any commercial figure stay in your tenancy, and are never used to inform another customer's morning list.

One phrase on the home page deserves precision here, because marketing language and legal architecture have to match exactly or one of them is a lie. Your commercial data is isolated from other customers and is never sold, never pooled, never used to benchmark you, and never shared with your suppliers or with another MarginLoop customer. It is not true, and we will not claim, that literally nobody else ever processes it: our hosting provider, our named sub-processors and a controlled number of our own authorised personnel technically process it in order to run and support the service. Every one of them is named in the Data Processing Agreement, and that agreement is provided before any of your data is shared with us.

On customer data specifically: MarginLoop analyses payment behaviour without needing to know who anybody is. Customer account identifiers and payment dates are enough to measure days-to-pay against an account's own history. Names, addresses, phone numbers and email addresses are not requested, not required, and should not be included in the export you send. Payment behaviour is a property of an account, not of a person, and keeping it that way is what keeps the volume of personal data in scope close to nil.

Data a customer sends us is processed under a data processing agreement with that customer, on their instruction, to deliver the service they have asked for. The customer remains the data controller for their own commercial and customer data. Where the data includes personal data about a customer's own staff or trading contacts, a buyer's name on a purchase order for instance, we process it as a processor acting on the controller's instructions.

• Data is held in UK-region infrastructure.
• Tenant separation is enforced at the database level for every tenant-owned record, not left to application code to remember to filter correctly.
• A Data Processing Agreement, naming every sub-processor we use, is provided before any customer data is shared with us.

Customer data is retained for as long as the subscription is active, plus a limited period afterwards to allow for export and account wind-down, then deleted. Specific retention periods are set out in the Data Processing Agreement signed with each customer.

If you are a MarginLoop customer, or a contact whose details appear in data a customer has sent us, you can ask us to:

• export a copy of the data held about you or your business;
• correct data that's inaccurate;
• delete data we hold, subject to what we're required to keep for legal or accounting reasons;
• tell you what we hold and why.

Write to the address below and we'll respond directly, not through an automated form.

Email aghakhan@marginloop.co.uk, or call 07447 019910 for anything on this page, including a rights request. A person will answer, and a rights request never has to go through a form.

MarginLoop Ltd, registered in England and Wales. Company no. 17430365. Registered office: 66 Paul Street, London, EC2A 4NA, England, United Kingdom. ICO registration no. ZC236427.