Privacy Policy

Last updated: October 28, 2026

MacDougall Email (“I”, “me”) operates this website and related services. This policy explains what personal data is collected, why, how long it is retained, and what your rights are.

Summary

• Contact form — name, email, message, IP address and referrer page. Stored in secure storage for 90 days, also emailed to my inbox.
• The Brief newsletter — email address, name and chosen frequency stored in secure storage. Unconfirmed signups deleted after 7 days.
• DMarcus Lite — company name, domain, contact email stored in a database. Unverified signups purged after 30 days; verified customers’ data retained for as long as the service is active.
• Aggregate DMARC reports — for monitored domains, raw report data (including source IPs and sending domains from third-party mailbox providers) is stored and aggregated into weekly summaries.
• Analytics — none. No Google Analytics, no advertising cookies, no third-party trackers of any kind.
• No other collection — free tools run entirely in your browser. Nothing you enter leaves your device.

There are no user accounts, no advertising, and no tracking cookies.

Data I Collect

Contact form

If you use the contact form, I collect the name, email address, message, IP address and referring page you provide. This information is stored in a secure Cloudflare KV namespace restricted to EU jurisdiction and forwarded by email to my inbox via Cloudflare Email Sending. The submission is retained in storage for 90 days.

Your data is used solely to respond to your enquiry. Submitting the form does not add you to any mailing list.

Newsletter (The Brief)

When you subscribe to The Brief, I store your email address, name (if provided), chosen frequency, and subscription status in a secure Cloudflare KV namespace restricted to EU jurisdiction. You must confirm via a double opt-in email. Unconfirmed signups are deleted after 7 days. Once confirmed, your data is retained until you unsubscribe via the link in any email.

DMarcus Lite

For DMarcus Lite signups, I store your company name, domain to monitor, and contact email in a Cloudflare D1 database. A unique token is generated for verification and for unsubscribing from the weekly summary.

During activation, the domain name is queried via Cloudflare’s public DNS-over-HTTPS resolver to verify the DNS records. This is a standard DNS lookup and reveals only the domain name being checked.

For verified customers, aggregate DMARC reports from mailbox providers are received, parsed and stored. This includes:

• Source IPs of third-party sending platforms
• Sending domains reported by mailbox providers
• Authentication pass/fail results (SPF, DKIM, DMARC)

These reports are the same data your mailbox providers already generate and would send to any rua address you publish. They are not sent anywhere beyond Cloudflare’s infrastructure.

Unverified signups are deleted after 30 days. Verified customers retain their data for as long as the service is active. Deletion requests can be made by replying to any DMarcus email or contacting me directly.

Analytics

This site uses no client-side analytics, no tracking cookies and no third-party trackers. Cloudflare, the site’s infrastructure provider, processes standard technical logs (as any web host does), but no browsing-behaviour profiling takes place.

No other collection

The authentication checker, DMARC report viewer, SPF generator, preflight checklist, ROI calculator and cost comparison tool run entirely in your browser. Domains you check and figures you enter never leave your device.

Legal Basis

• Contact form — necessary to respond to your enquiry (legitimate interests, or performance of a contract once one is formed)
• Newsletter — your consent (double opt-in confirms); withdraw anytime via unsubscribe link
• DMarcus — legitimate interests for the operational data required to deliver the monitoring service (verification tokens, domain, contact email); for report data, contractual necessity to deliver the service you signed up for. Report data is processed on your behalf under the terms of the Data Processing Agreement; I act as processor for that data and as controller for your account details.

Retention

Your Rights

Under UK GDPR you have the right to access, correct, delete or restrict processing of your personal data, to object to processing, to withdraw consent, and to lodge a complaint with the Information Commissioner’s Office (ico.org.uk).

To exercise any right:

• Newsletter — use the unsubscribe link in any email
• DMarcus — reply to any weekly summary email with a deletion request
• All data — use the self-service delete my data page

I will respond to any request within 30 days.

Sharing

I do not sell or rent personal data. It is shared only with the processors named above (Cloudflare for storage and delivery), and if ever required by law.

International Transfers

All personal data collected by this website — contact enquiries, newsletter subscriptions, and DMarcus customer and report data — is durably stored in Cloudflare services restricted to EU jurisdiction.

Cloudflare operates a global network: requests may be transiently processed at, and short-lived caches may exist in, data centres outside the UK/EU, and Cloudflare, Inc. (the infrastructure provider) is a US company. Where any such processing outside the UK/EU occurs, transfers rely on recognised safeguards such as the UK International Data Transfer Agreement or adequacy regulations.

Changes

If this policy changes materially, the “Last updated” date above will change and the revised policy will appear on this page.

Contact

Questions about this privacy policy? Email: info@macdougallemail.com

MacDougall Email
Office 1879
3 Fitzroy Place, 1/1
Sauchiehall Street
Glasgow, G3 7RH

Contact Form