1. Who We Are and When This Notice Applies

Majenta Solutions Limited, company number 03056978, provides My MX Data and the MX secure file exchange platform. In this notice, "Majenta," "My MX Data," "MX," "we," "us" and "our" refer to Majenta Solutions Limited.

This notice applies when you visit our US website, request a trial or demonstration, contact us, receive marketing communications, or use an MX account where Majenta determines how the relevant personal information is handled.

When an organization uses MX to exchange files, that organization normally decides what information is uploaded, who may receive it and how long it should remain available. For that customer-controlled content, Majenta generally acts as a service provider or processor under the customer's instructions and applicable agreement. Questions about that content should usually be directed to the organization that provided your account or sent the transaction.

2. Personal Information We Collect

The information we collect depends on how you interact with us and may include:

• Identity and account information: name, username, organization, role and account identifiers.
• Contact information: business email address, phone number, mailing address and communication preferences.
• Commercial information: products or services considered, account plan, orders, invoices and support history.
• Technical information: IP address, device and browser information, time zone, authentication events and security logs.
• Usage information: pages viewed, actions taken, transaction events, downloads, uploads and feature interactions.
• Communications: messages, support requests, survey responses and other information you choose to provide.
• Customer content: files, filenames, recipient details, comments and related transaction metadata submitted through MX.

We may create aggregated or deidentified information that cannot reasonably be linked to an individual. We use that information for service analysis, security, capacity planning and product improvement.

3. How We Collect Information

We collect information directly from you when you create or use an account, submit a form, ask for support, attend a demonstration or communicate with us.

We also collect technical and usage information automatically through the website and service, including through cookies, logs and similar technologies. Business customers, account administrators, transaction senders, service providers and publicly available business sources may also provide information to us.

4. How We Use Personal Information

We use personal information for legitimate business and operational purposes, including to:

• provide, administer and secure the website, accounts and MX service;
• authenticate users and apply account, recipient, expiration and permission settings;
• process trials, demonstrations, orders, payments and customer requests;
• deliver transaction, security, service and support communications;
• detect misuse, investigate incidents, maintain audit records and protect users and systems;
• monitor reliability, diagnose faults, plan capacity and improve product performance;
• comply with legal obligations and enforce our agreements; and
• send business communications where permitted, subject to your marketing choices.

We do not use customer files to build advertising profiles. We do not sell customer content.

5. How We Disclose Information

We may disclose personal information to:

• your organization and authorized MX participants where required to provide the exchange, account administration or audit functionality;
• service providers that support hosting, security, communications, analytics, payment processing and customer support under contractual safeguards;
• professional advisers and insurers where reasonably necessary;
• government, regulatory or law-enforcement bodies when disclosure is required by law or necessary to protect legal rights and safety; and
• a successor organization in connection with a merger, acquisition, financing or sale of relevant business assets, subject to appropriate protections.

MX recipients only receive access according to the transaction and account controls configured by the relevant customer or sender.

6. Cookies and Website Analytics

Our website may use essential cookies needed for security, navigation and form operation, together with analytics technologies that help us understand site performance. Where consent is required, optional technologies are used only after the relevant choice has been made.

You can control cookies through the consent controls provided on the website and through your browser settings. Blocking essential cookies may prevent parts of the website or account experience from working correctly.

7. US State Privacy Rights

Depending on your state of residence and the applicable law, you may have the right to request access to, correction of, deletion of or a portable copy of certain personal information. You may also have the right to opt out of certain sales, sharing or targeted advertising, limit particular uses of sensitive personal information, or appeal a decision about a request.

California residents may have rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act. We do not discriminate against anyone for exercising an applicable privacy right.

Some information and business-to-business activity may be exempt from particular requirements. Where Majenta holds information only on behalf of an MX customer, we may direct your request to that customer.

To submit a request, use our contact page and identify it as a US privacy request. We may need to verify your identity and authority before acting. An authorized agent may submit a request where permitted by law, subject to verification.

8. Health, Defense and Other Regulated Data

MX provides technical controls that can support regulated workflows, but the service does not make an organization compliant by itself. Customers remain responsible for determining whether MX is appropriate for their data, configuring it correctly and putting required agreements and procedures in place.

Do not submit protected health information, export-controlled technical data or other specially regulated information unless your organization has confirmed that the intended MX environment, contract, user access and configuration are approved for that use. Where required, a business associate agreement or other specific contractual terms must be agreed before the relevant data is processed.

9. Security and Retention

We use administrative, technical and organizational safeguards designed to protect personal information, including access controls, authentication, encryption, logging and monitoring appropriate to the service. No system can be guaranteed completely secure.

We retain information for as long as reasonably required to provide the service, meet contractual commitments, maintain security and audit records, resolve disputes and comply with law. MX file availability may also depend on expiration, download and retention controls selected by the customer or sender. When information is no longer required, it is deleted, anonymized or securely isolated in line with applicable processes.

10. International Data Transfers

Majenta is based in the United Kingdom and may use service providers in other countries. Personal information may therefore be processed outside your state or country. Where required, we use contractual and other safeguards intended to protect information during international transfers.

11. Children

The website and MX service are intended for business use and are not directed to children under 16. We do not knowingly collect personal information from children through these services. Contact us if you believe a child has provided information to us.

12. Marketing Choices and External Links

You can unsubscribe from marketing emails through the link in the message or by contacting us. Service, account and security communications are not marketing and may still be sent where necessary.

Our website may link to third-party websites. Their privacy practices are governed by their own notices, not this one.

13. Changes and Contact

We may update this notice as our services, practices or legal obligations change. The date at the top identifies the latest version.

For questions, complaints or privacy requests, contact Majenta Solutions Limited through the My MX Data contact page or write to Majenta Solutions Limited, 3 Argosy Court, Scimitar Way, Whitley Business Park, Coventry CV3 4GA, United Kingdom.