Legal

Privacy Policy

Last updated: 7 September 2026

This Privacy Policy explains how Trowbex Company (“readyDMARC”, “we”, “us”) collects, uses, shares, and protects personal information when you use our website and our free domain scanner (the “Service”). It also describes the privacy rights you have and how to exercise them. By using the Service, you acknowledge the practices described in this Privacy Policy.

The Service is available globally, and we process personal information about visitors from many countries. Depending on where you are located, additional rights may apply to you. If you are in the European Economic Area (EEA) or the United Kingdom (UK), the section Your rights in the EEA and UK applies to you.

Information we collect

Information you give us

  • Domain name. When you run a scan, you enter a domain. We look it up against public DNS records to assess its email security.
  • Contact details for your report. To receive a PDF report you provide your email address, and optionally your name and phone number.
  • Marketing preference. Whether you chose to receive email security tips and product updates from us.
  • Booking information. If you book a call, you submit details through our scheduling provider (see Third parties below).

Information collected automatically

  • Scan results. The output of a scan you request (such as the overall score and the status of SPF, DKIM, and DMARC) is associated with your contact record if you ask us for a report.
  • IP address. We process your IP address temporarily to apply rate limits and prevent abuse of the scanner. It is held only in memory for the length of the rate-limit window and is not stored in a database.
  • Usage data and cookies. We use Google Analytics to understand how the site is used (for example, pages viewed and actions such as running a scan or booking a call). This is described under Cookies and analytics below.

How we use your information

  • To run the scan you request and generate your report.
  • To send the report and respond to your enquiries.
  • To send marketing emails, where you have opted in or where otherwise permitted by law. You can unsubscribe at any time.
  • To operate, secure, and improve the Service, including preventing abuse.
  • To comply with legal obligations.

Cookies and analytics

We use Google Analytics, which sets cookies to measure how visitors use the site. You can opt out of Google Analytics using the Google Analytics Opt-out Browser Add-on, by adjusting your browser’s cookie settings, or, where supported, by enabling a Global Privacy Control (GPC) signal. Where required by law, we will ask for your consent before setting non-essential cookies.

How we share your information

We do not sell your personal information for money. We share it only with service providers that process it on our behalf under contract:

  • GoHighLevel (HighLevel Inc.). Our customer relationship and scheduling platform, which stores your contact details, marketing preference, scan results, and any booking information.
  • Google. Google Analytics for usage measurement, and Google Cloud for hosting the Service.
  • Legal and safety. We may disclose information where required by law or to protect our rights, users, or the Service.

International data transfers

Our service providers store and process personal information in the United States. If you are located outside the United States, your information will be transferred to, and processed in, a country that may not provide the same level of data protection as your own. Where we make such transfers, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses (with the UK Addendum or International Data Transfer Agreement where applicable), or our providers’ certification under the EU-US and UK Extension of the Data Privacy Framework.

Data retention

We keep contact and lead records for up to 24 months after your last interaction with us, or until you ask us to delete them sooner. We may retain information for longer where needed to meet a legal obligation, after which we delete or anonymise it. Scan results are cached briefly to serve repeat requests and then discarded. IP addresses used for rate limiting are not retained beyond the rate-limit window.

Security

We use technical and organisational measures designed to protect personal information, including transport encryption and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Your US privacy rights

Depending on your state of residence (for example, under the California Consumer Privacy Act as amended by the CPRA, and similar state laws), you may have the right to:

  • Know and access the personal information we hold about you.
  • Request deletion of your personal information.
  • Request correction of inaccurate personal information.
  • Opt out of the “sale” or “sharing” of your personal information. We do not sell your information, and you can limit analytics as described under Cookies and analytics.
  • Not receive discriminatory treatment for exercising your rights.

To exercise these rights, contact us using the details below. We will verify your request before acting on it. You may use an authorised agent where the law allows.

Your rights in the EEA and UK

If the EU General Data Protection Regulation or the UK GDPR applies to you, our legal bases for processing are: performing the scan and providing the report you request (our legitimate interest in responding to you, or steps taken at your request before any contract); sending marketing emails (your consent); and securing and improving the Service (our legitimate interests). You have the right to:

  • Access the personal data we hold about you.
  • Have inaccurate data corrected and incomplete data completed.
  • Have your data erased.
  • Restrict or object to our processing.
  • Receive your data in a portable format.
  • Withdraw consent at any time, without affecting prior processing.

You also have the right to complain to a supervisory authority. In the UK this is the Information Commissioner’s Office (ico.org.uk); in the EEA it is your local data protection authority.

Marketing emails

If you receive marketing emails from us, you can opt out at any time using the unsubscribe link in any message, or by contacting us. We honour opt-out requests promptly. We do not need your permission to send service-related messages, such as the report you requested.

Children’s privacy

The Service is intended for businesses and is not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

Links to other websites

Our site and reports may link to websites we do not operate, including our scheduling provider. This Privacy Policy does not cover those sites, and we are not responsible for their content or privacy practices. We encourage you to read the privacy policy of any site you visit.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Material changes will be made clear on this page.

Contact us

For privacy questions or to exercise your rights, contact us at privacy@readydmarc.com or by post at Trowbex Company, Building 3998, Anas Ibn Malik Street, Al Yasmeen District, Riyadh 13326, Additional No. 6622, Kingdom of Saudi Arabia.