This policy explains how Berkat Ltd ("we", "us") collects and uses personal data when you visit maricdn.com, sign up for MariCDN, or use the MariCDN WordPress plugin.
Who we are
MariCDN is a service of Berkat Ltd, registered in England and Wales, company number 15864991. Registered office: White Poppy, Talbot Road, Talbot Green, CF72 8AH.
We are the controller of the personal data described here. For any privacy question or request, email hello@maricdn.com.
What we collect
When you sign up or buy a plan
When you create an account: your email address and a password, which we store only in scrambled (hashed) form. We email you a link to confirm your address. When you buy a plan: your name, billing address, company name and phone number if you give them, the website you'll use MariCDN with, your plan, and your order and payment history.
When you pay
Card payments are handled by Stripe. We never see or store your full card number. Stripe may collect information about your device and browser to prevent fraud.
When you use the service
To deliver files, prevent abuse and measure your bandwidth, our CDN infrastructure processes technical details about each request, such as the IP address, the file requested, the time and the browser type. We keep usage totals for your plan. These details mostly concern the visitors to your website (see "Your website's visitors" below).
When you use the WordPress plugin
The plugin sends our servers your connection key, your site's address, and the plugin and WordPress versions. It does this when it checks your plan (when you save your key, change mode or press Check now, and every hour while the CDN is on), when you open its stats, and when it purges files, when it also sends the addresses of those files. It also fetches a small test file from your CDN hostname every 15 minutes. Nothing it sends is about your visitors or users. Your settings, key, check results and stats stay on your own site, and are removed when you delete the plugin. Anyone who opens a preview link you share gets one cookie on your site, wp-postpass_maricdn_preview, for 24 hours. Other visitors get none. In Preview and Live, your visitors' browsers load files from your CDN hostname (see "Your website's visitors").
When you contact us
Your name, email address and message, and anything else you put in the form. The form also records your IP address, browser and the date, and uses Cloudflare Turnstile to block spam.
When you browse this website
Our hosting keeps standard server logs (IP address, pages requested, time and browser) for security. See Cookies below.
How we use it, and why we're allowed to
| What we do | Legal basis |
|---|---|
| Set up and run your plan, send your CDN details, take payments and send invoices | Contract |
| Send service emails, such as receipts, failed payments and the free-plan check | Contract, and our legitimate interest in running the service |
| Keep accounting and tax records | Legal obligation |
| Protect the service and this website from fraud, spam and abuse | Legitimate interests |
| Answer your messages | Legitimate interests, or steps before a contract |
We don't sell your data, and we don't send marketing emails unless you've agreed to them.
Who we share it with
Only the providers we need to run MariCDN:
- Stripe, for card payments.
- Our hosting and CDN infrastructure providers, who host this website and deliver files for MariCDN.
- Our email delivery provider, which sends our service emails.
- Cloudflare, for Turnstile, which checks that people contacting us, signing up, buying or logging in aren't bots. On those pages, your browser connects to Cloudflare's servers, which see your IP address and browser details.
- Professional advisers such as our accountants, and authorities when the law requires it.
A list of the providers we use is available on request.
International transfers
Some of these providers process data outside the UK. When they do, we rely on the UK's adequacy regulations or on approved contract terms, such as the International Data Transfer Agreement or the UK Addendum to the EU's Standard Contractual Clauses.
How long we keep it
- Account and plan details: while your account is open. When an account is closed, we delete it. A free plan cancelled after the free-plan check doesn't close your account.
- Accounts that aren't confirmed: we send a reminder after 6 days, and delete the account after 7.
- Orders and invoices: 6 years, for tax and accounting.
- Contact form messages: 12 months, unless they become part of a customer record.
- Technical request logs: only as long as needed for delivery, security and bandwidth figures.
Cookies
This website only uses cookies it needs to work:
- WordPress login cookies, when you log in to your account.
- WooCommerce cookies that remember your cart and checkout session.
- Stripe cookies on the plan, cart and checkout pages, to prevent fraud.
We don't use analytics or advertising cookies.
Your website's visitors
When you use MariCDN on your website, we process your visitors' technical data (such as IP addresses, browser details and the address of the page that asked for each file) on your behalf, only to deliver your files and keep the service secure. You are the controller of that data, so mention your use of a CDN in your own privacy policy.
Your rights
You can ask us to:
- give you a copy of your personal data,
- correct it,
- delete it,
- restrict or object to how we use it,
- send it to you or another service in a portable format.
Email hello@maricdn.com. We'll reply within one month.
If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk. We'd appreciate the chance to sort it out first.
Changes to this policy
If we make important changes, we'll update the date at the top and, for customers, let you know by email.