Privacy policy

If you fill out the contact form, it asks for your name, email address and message.

When the form accepts a request, it also records when you sent it. Please leave passwords, payment details and sensitive personal information out of your message.

You choose whether to send a request. The required fields let us understand it and reply; without them, the form cannot accept it.

A Maptimal account holds your email address and the business it is for: the business’s name, its website or Google Maps link, and the location and searches we check. It also keeps what you do there, such as the tasks you tick off, the searches you add and your brand questionnaire answers. The sections below explain each part.

Messages you send through the contact form are stored with Cloudflare, this website’s hosting provider, and read by the Maptimal team. Each message is kept for 12 months and then deleted automatically.

Once a day, the messages received in the previous 24 hours are also emailed to the Maptimal team through Cloudflare Email Service.

If the form cannot accept your message, email info@maptimal.com.

Your account has no password. You sign in with a link we email to you, which works once, within an hour of being sent.

We store only a scrambled copy (a hash) of each sign-in link and each signed-in session, so no working link or session can be read from our records. Old ones are cleared out as new ones are made.

To stop misuse, we count how often each email address and each IP address asks for a sign-in link in an hour. Once ordering opens, we also count how often each IP address starts an order or comes back from paying. Each count is stored under a one-way keyed hash of the address, a code made with a secret key that only our server holds, so the address cannot be worked out from our records. The address itself is never stored, and old counts are cleared out as new requests come in.

The Maptimal team can see what your account holds, including your reports and questionnaire answers, so we can do the work and help when you ask.

No analytics service has been activated, and no cookie is used for analytics or advertising. Any future use will be explained here, with consent requested where required.

Signing in sets two cookies, both needed for your account to work:

• mt_session keeps you signed in, and scripts on the page cannot read it. It lasts 30 days, and the 30 days start again on each later day you visit. Signing out deletes it.
• mt_in tells this website’s pages that you are signed in, so the header can show “Your account”. It holds only the date it was last renewed and never gives access to anything.

Once ordering opens on October 13, 2026, a third cookie, mt_checkout, is set when you start an order. It lasts one hour and lets us recognize the browser that comes back from Stripe’s checkout page.

After you send a message successfully, this website keeps a confirmation marker in your browser for that tab session. It lets the confirmation stay visible when you reload. That marker contains no name, email address or message.

Closing the tab clears the marker. You can also clear the contact confirmation by choosing “Send another message.”

In a report, your browser remembers whether you switched “Show answers” on. That choice stays in your browser and is never sent to us.

When your audit is ready, its report (a web page, a PDF and the data behind them) is stored in Cloudflare’s file storage in western Europe. You open it from your account, and only you and the Maptimal team can see it. Searches you add on the report screen are saved with your account.

Preparing a report means looking up your business and your searches with outside services. This notice will name those services, and what they receive, before ordering opens.

Weekly checks come with the monthly plan: each week we check your map rank and the AI answers for your searches. The results are kept in your account, and a short summary is emailed to you unless you turn it off under Weekly checks.

Clients on the monthly plan can fill in a questionnaire about their business. What you type is saved as you go, including answers you have not submitted yet.

When you submit an answer, we may send it to Google’s Gemini API with the question and some of your earlier answers, so Gemini can suggest a follow-up question. When you finish a level, we send its answers to Gemini, along with your business’s name and a few details from the first level such as where it is based, so Gemini can write a draft text from them. The email address you sign in with is never sent.

Your answers, the follow-up questions and the drafts are stored with your account. For each request to Gemini we keep a record of what it was for, its size and its cost, without the text.

Our emails are about your account and the work you order:

• a sign-in link, when you ask for one;
• once ordering opens, a confirmation with a sign-in link after you pay;
• a note when your audit is ready;
• on the monthly plan, a weekly summary of your rankings, unless you turn it off.

They come from info@maptimal.com, are plain text and are sent through Cloudflare Email Service. Replying reaches the same address.

Nothing can be bought on this website yet. Ordering opens on October 13, 2026, and payments will be handled by Stripe.

When you order, you will pay on Stripe’s own checkout page, so your card details go to Stripe and never reach us. This notice will be updated with the details of orders and payments before ordering opens.

• Cloudflare runs this website. Your account, orders, weekly checks and questionnaire answers are kept in its database in western Europe, and your reports in its file storage, also in western Europe. Cloudflare also stores contact form messages, sends our emails and keeps logs of requests to the site for a limited time, to keep it running and secure; sign-in links are left out of those logs.
• Google runs the Gemini API that reads brand questionnaire answers, and the mailbox that receives email sent to info@maptimal.com.
• Stripe will handle payments once ordering opens on October 13, 2026.

Some of these companies may handle your information outside the UK. Any safeguards needed for transfers outside the UK are being finalized. This notice will be updated when those arrangements are confirmed.

Your details let us look into your question and reply to you. In your account, they let us sign you in, prepare and deliver the work you order, send the emails described above and keep the account secure.

UK data protection law, including the UK GDPR and the Data Protection Act 2018 as amended, requires a lawful reason for using personal information. The lawful basis for these uses is being finalized. This notice will be updated when it is confirmed.

• Contact form messages: 12 months, then deleted automatically.
• Sign-in links: they work once, within an hour, and are cleared out after that.
• Signed-in sessions: until you sign out, and never more than 30 days after your last visit.
• Your account, orders, reports, weekly checks and questionnaire answers: kept while your account is open. How long we keep them after that is being finalized, and this notice will be updated when it is decided.

Under UK data protection law, you can ask to see the personal information held about you and have inaccurate information corrected. Depending on the circumstances, you can also ask for deletion, limits on its use or a portable copy.

Your right to object: you can object to uses based on legitimate interests, and to direct marketing. If a use relies on your consent, you can withdraw that consent.

To make a request, email info@maptimal.com or use the contact form. Say which information or request you mean. We may need to check your identity before sharing or changing personal details. If you have an account, you can also ask us to close it.

You can also raise a concern with the Information Commissioner’s Office (ICO), the UK data protection regulator. Its guide to your information rights explains the rights and their limits.

Your state may give you additional privacy rights where its law applies to this business. These can include access, correction, deletion, a copy of your data, and opting out of certain uses.

California residents may have rights concerning the sale or sharing of personal information, limits on certain uses of sensitive information, and protection from discrimination for exercising their rights. The California Attorney General’s guide explains when those rights apply.

Use the same contact route above for a state privacy request. Include your state so we can identify the rules that apply.

Maptimal is responsible for personal information collected through this website, including your account. Email info@maptimal.com with any question about your information, or write to Maptimal, 5 Holden Brook Close, Leigh, Greater Manchester, WN7 2HL, England.

ICO registration details are being finalized. This notice will be updated as the outstanding arrangements are confirmed.