Legal

Privacy Policy

Last updated: 7 September 2026

Information we collect

Information you give us

• Domain name. When you run a scan, you enter a domain. We look it up against public DNS records to assess its email authentication.
• Contact details for your report. To receive a PDF report you provide your email address, and optionally your name and phone number.
• Marketing preference. Whether you chose to receive email authentication tips and product updates from us.
• Booking information. If you book a call, you submit details through our scheduling provider (see Third parties below).

Information collected automatically

• Scan results. The output of a scan you request (such as the overall score and the status of SPF, DKIM, and DMARC) is associated with your contact record if you ask us for a report.
• IP address. We process your IP address temporarily to apply rate limits and prevent abuse of the scanner. It is held only in memory for the length of the rate-limit window and is not stored in a database.
• Usage data and cookies. We use Google Analytics to understand how the site is used (for example, pages viewed and actions such as running a scan or booking a call). This is described under Cookies and analytics below.

How we use your information

• To run the scan you request and generate your report.
• To send the report and respond to your enquiries.
• To send marketing emails, where you have opted in or where otherwise permitted by law. You can unsubscribe at any time.
• To operate, secure, and improve the Service, including preventing abuse.
• To comply with legal obligations.

Cookies and analytics

We use Google Analytics, which sets cookies to measure how visitors use the site. You can opt out of Google Analytics using the Google Analytics Opt-out Browser Add-on, by adjusting your browser’s cookie settings, or, where supported, by enabling a Global Privacy Control (GPC) signal. Where required by law, we will ask for your consent before setting non-essential cookies.

How we share your information

We do not sell your personal information for money. We share it only with service providers that process it on our behalf under contract:

• GoHighLevel (HighLevel Inc.). Our customer relationship and scheduling platform, which stores your contact details, marketing preference, scan results, and any booking information.
• Google. Google Analytics for usage measurement, and Google Cloud for hosting the Service.
• Legal and safety. We may disclose information where required by law or to protect our rights, users, or the Service.

International data transfers

Our service providers store and process personal data in the United States, so your personal data is transferred outside the Kingdom. We do this only to the extent needed to provide the Service, under contracts that require those providers to protect your data to a standard no lower than the PDPL.

Data retention

We keep contact and lead records for up to 24 months after your last interaction with us, or until you ask us to delete them sooner. We may retain information for longer where needed to meet a legal obligation, after which we delete or anonymise it. Scan results are cached briefly to serve repeat requests and then discarded. IP addresses used for rate limiting are not retained beyond the rate-limit window.

Security

We use technical and organisational measures designed to protect personal information, including transport encryption and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Your rights in Saudi Arabia

If you are in the Kingdom of Saudi Arabia, the Personal Data Protection Law (PDPL) applies. We process your personal data on the following bases: your consent (marketing emails and analytics cookies); the steps you ask us to take (running a scan and sending your report); and our legitimate interest in operating and securing the Service, where that interest does not override your rights. You have the right to:

• Be informed of how we collect and use your personal data, as set out here.
• Access the personal data we hold about you and obtain a copy of it.
• Have inaccurate or incomplete data corrected.
• Have your personal data deleted when it is no longer needed for the purpose it was collected for.
• Withdraw your consent at any time, without affecting processing that took place before.

To exercise these rights, contact us using the details below. We respond within the period the PDPL allows. You may also complain to the Saudi Data and Artificial Intelligence Authority (SDAIA), the competent authority under the PDPL.

Marketing emails

If you receive marketing emails from us, you can opt out at any time using the unsubscribe link in any message, or by contacting us. We honour opt-out requests promptly. We do not need your permission to send service-related messages, such as the report you requested.

Children’s privacy

The Service is intended for businesses and is not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

Links to other websites

Our site and reports may link to websites we do not operate, including our scheduling provider. This Privacy Policy does not cover those sites, and we are not responsible for their content or privacy practices. We encourage you to read the privacy policy of any site you visit.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Material changes will be made clear on this page.

Contact us

For privacy questions or to exercise your rights, contact us at privacy@readydmarc.com or by post at Trowbex Company (Unified National Number 7054845164), Building 3998, Anas Ibn Malik Street, Al Yasmeen District, Riyadh 13326, Additional No. 6622, Kingdom of Saudi Arabia.