Privacy Policy
MalayGlen builds websites and small apps for local businesses. We're based in Rock Hill, South Carolina. This page explains what information malayglen.com collects, why, who helps us handle it, and what you can ask us to do with it. We've kept it short and plain.
Questions? Email info@malayglen.com.
The short version
- We collect what you type into our interest form so Jason can get back to you about your project.
- We save each step of the form as you go, so we keep what you entered even if you don't finish (see below).
- If you click Try the App, we ask for just your name and email. We send you one email with your private trial link, and Jason may follow up personally by email. We don't add you to a mailing list.
- We don't sell your information or share your form answers for marketing or advertising. We don't add you to a mailing list.
- Two tools that help us improve the site, Google Analytics and Microsoft Clarity, run only if you click Accept on our cookie banner. If you accept, Clarity records how you move around our pages, such as clicks and scrolling. It never records what you type into our forms. If you click Decline, both tools stay off.
- You can ask us to show you, fix or delete your information at any time.
What we collect
When you fill out our interest form
The form has three steps:
- Step 1: your zip code
- Step 2: your name and a description of your project
- Step 3: your email address and phone number
Each step is saved as soon as you move on to the next one. That means we keep what you entered even if you don't finish. For example, we might have just your zip code, or your zip code, name and project description.
With each step we also store:
- A scrambled code made from your internet address (IP address). In our form database we store a one-way, scrambled ("hashed") version, not the address itself. We use it only to block spam and to stop the same visitor from sending the form over and over.
- Your browser type (the "user agent," which says things like "Chrome on an iPhone"). We use it for the same spam protection.
The form also has a hidden field that people can't see but spam robots fill in. It helps us spot and ignore junk submissions.
When you ask to try one of our apps
On our homepage, two app panels have a Try the App button. If you use it, we collect:
- your name
- your email address
- which app you asked to try (our CRM app or our event guide app)
- the date and time you asked
We also store a scrambled ("hashed") code made from your IP address and your browser type, the same way we do for our interest form. We use them only to block spam and to stop the same visitor from asking over and over. We don't store your actual IP address.
We then send you one email from jason@malayglen.com with a private link to your trial. Jason also gets an email telling him who asked, so he may follow up personally by email to ask what you thought. We don't add you to a mailing list. We don't sell your name or email, or share them with anyone for their own marketing.
The trial apps are filled with made-up sample data. They live on separate pages at malayglen.com/trial/. Please don't type real personal information or real customer information into a trial.
Anything you type into the CRM trial is saved only in your own browser's storage on your device; it is never sent to us, and clearing your browser data erases it. The event guide trial stores nothing.
When you visit the site
- Server logs. Like nearly every website host, our host keeps basic records of visits, such as IP address, browser type, pages requested and the time. The host uses these to keep the site running and secure.
- Google Analytics and Microsoft Clarity, only if you agree. See "Cookies, analytics and session recording" below.
If you're a MalayGlen client using the client portal
Clients we invite can sign in at malayglen.com/client/ with an email and password. We keep your sign-in details and the project documents you or we upload there, so you can view and share files about your project. Only you and MalayGlen can see your documents. Please don't upload documents that contain Social Security numbers, driver's license numbers, or bank or card account numbers unless we've asked for them.
How we use it
- To get back to you about your project. Jason may call, text or email you about the project you described. These are personal messages from Jason, one at a time. We don't use automated dialing or texting systems, and we don't send marketing blasts. Tell us to stop at any time and we will.
- To send your app trial. If you click Try the App, we email you your trial link, and Jason may email you personally to ask what you thought. Reply "no thanks" and he'll stop.
- To keep our forms free of spam.
- To understand how the site is used and make it easier to use, but only if you accepted analytics.
- To run the client portal for invited clients.
We don't sell your information. We don't share your form answers with anyone for their own marketing or for advertising.
Who helps us handle your information
We use a few service providers. Supabase, Postmark and SiteGround handle information only to provide their service to us. Google and Microsoft run only if you click Accept, and they also use some data under their own privacy policies (explained below).
| Provider | What it does for us | What it handles |
|---|---|---|
| Supabase | Our database and client-portal sign-in. Data is stored in the United States. Only MalayGlen can access it. | Form answers, app trial requests, the scrambled IP code, browser type, portal accounts and documents |
| Postmark | Sends Jason an email when a form is completed or someone asks for a trial, and sends you the email with your trial link | The details you entered in the form, including your name and email address |
| SiteGround | Hosts our website and runs the code that passes form answers to our database | Server logs; form answers as they pass through |
| Google (Google Analytics) | Counts visits and shows which pages are useful. Only if you click Accept. | Pages viewed, how you got to the site, device and browser type, general location (such as city), and identifiers stored in cookies |
| Microsoft (Microsoft Clarity) | Session recordings and heatmaps that show how visitors use our pages. Only if you click Accept. | Clicks, scrolling, mouse movement, pages viewed, device and browser type, general location worked out by Microsoft, and identifiers stored in cookies. Never what you type into our forms. |
When a form is completed or someone asks for a trial, the notification email lands in MalayGlen's business inbox, where Jason reads it.
We may also share information if the law requires it, or to protect MalayGlen or others from fraud or harm.
Cookies, analytics and session recording
Both tools are off unless you turn them on. The first time you visit, a banner asks whether you're OK with analytics. Nothing from Google Analytics or Microsoft Clarity loads until you click Accept. If you click Decline, both stay off.
You can change your choice at any time with the "Cookie settings" link at the bottom of every page. If you accepted before and then click Decline, we turn both tools off and remove their cookies from our site.
Google Analytics
If you accept, Google Analytics sets cookies (small files in your browser) to count visits and tell new visitors from returning ones. Google may combine this with what it learns from other websites that use Google services. Learn more at How Google uses information from sites or apps that use our services.
Microsoft Clarity (session recording and heatmaps)
If you accept, Microsoft Clarity records how you use our pages: where you click, how far you scroll, how you move the mouse, and which pages you view. We can play this back as a recording of your visit, and see it combined with other visits as a "heatmap." It helps us find confusing spots and fix them.
What Clarity does not capture:
- Anything you type into our forms. Your zip code, name, project description, email and phone number, and the name and email you give us to try an app, are hidden from Clarity before anything leaves your browser. Microsoft never receives them.
- The text on our pages. We've set Clarity to its strictest privacy setting, so recordings show page layout and movement, with the words blanked out.
Clarity sets its own cookies (for example, ones named _clck and _clsk) to link the pages of one visit together. Microsoft may also use its own cookies on Microsoft domains, which Microsoft says it uses for things like advertising, site analytics and keeping its services running. Microsoft says Clarity doesn't sell data. Microsoft keeps most recordings for 30 days; a small sample, and any we save, can be kept for up to 9 months. Learn more in the Microsoft Privacy Statement.
Things we store in your browser (not cookies)
- Your Accept or Decline choice, so we don't ask again on every page.
- If you're a client, your portal sign-in, so you stay signed in.
- A setting used only on MalayGlen's own devices so our own visits aren't counted.
Fonts
Our fonts are stored on our own server, so loading them doesn't send anything to a font company.
"Do Not Track"
Some browsers can send a "Do Not Track" signal. Our site doesn't change what it does based on that signal. Instead, analytics and session recording are off by default and run only if you click Accept.
We don't run advertising pixels or ad networks ourselves. If you accept analytics, Microsoft sets some of its own cookies; see the Microsoft Clarity section above.
How long we keep it
[PROPOSED, Jason to confirm before publishing: 24 months for completed forms and app trial requests, 12 months for unfinished forms.]
- Completed form submissions: up to 24 months after your last contact with us, unless you ask us to delete them sooner. If you become a client, we keep project records for as long as we work together and as needed for our business records.
- Unfinished forms (you stopped before the last step): deleted within 12 months.
- App trial requests: up to 24 months after your last contact with us, unless you ask us to delete them sooner.
- Client portal accounts and documents: for as long as you're a client, then deleted on request or when we close the account.
- Session recordings: kept by Microsoft as described above (most for 30 days).
- Server logs and email notifications: kept by our providers for a limited time under their own policies.
Your choices and rights
No matter which state you live in, you can email info@malayglen.com and ask us to:
- tell you what information we have about you,
- correct it,
- delete it, or
- stop contacting you.
Session recordings aren't linked to your name or form answers, so we can't pick out one person's recordings to delete them. They expire on Microsoft's schedule described above. To stop new recordings, click "Cookie settings" and choose Decline.
We'll reply within 30 days. [PROPOSED, Jason to confirm before publishing: 30-day reply time.] We may need to confirm it's really you, usually by replying from the email address or calling the phone number you gave us.
How we protect it
- Our site uses a secure connection (HTTPS).
- Our database is locked so only MalayGlen can read it.
- In our form and trial-request database, we store a scrambled version of your IP address instead of the real one.
- Session recordings never include what you type into our forms.
No website is perfectly secure, but we work to keep your information safe. If we learn that your information was exposed, we'll let you know.
Children
Our site is for adults looking for help with their business. It isn't meant for anyone under 18, and we don't knowingly collect information from children under 13. If you think a child has sent us information, email info@malayglen.com and we'll delete it.
Changes to this policy
If we change this policy, we'll post the new version here and update the "Last updated" date at the top. If it's a big change, like using your information in a new way, we'll also point it out at the top of this page.
Contact us
MalayGlen
Rock Hill, South Carolina
Email: info@malayglen.com
Template prepared by MalayGlen; not legal advice.