Privacy Policy

Privacy Policy

Marking Services, Inc. Privacy Policy

Marking Services, Inc. and its affiliates (collectively, the “MSI Group,” “we,” “us,” or “our”) respect your concerns about privacy. The MSI Group is the entity responsible for the processing of your personal information and is generally the entity that collects your personal information. For purposes of the EU General Data Protection Regulation (“GDPR”), the relevant MSI Group entity acts as the data controller. For purposes of the Singapore Personal Data Protection Act 2012 (“PDPA”), the relevant MSI Group entity is the data intermediary or organization responsible for the collection, use, and disclosure of your personal data.

This Privacy Policy applies to the personal information we obtain through our website and mobile applications; offline collection in connection with sales, marketing, and partner and supplier engagement; third-party sources, including ad networks; and any other means by which you interact with us. This Privacy Policy applies to individuals located in the United States, the European Economic Area (“EEA”), the United Kingdom (“UK”), Singapore, and all other jurisdictions in which we operate.

This Privacy Policy describes the types of personal information we obtain, the legal bases for processing, how we may use your personal information, with whom we may share it, how long we retain it, how we transfer it internationally, and how you may exercise your rights regarding our processing of your personal information. This Privacy Policy also describes the measures we take to safeguard the personal information we obtain and how you can contact us about our privacy practices and to exercise your rights.

Definitions 

Unless otherwise stated, as provided in this policy, the following terms have the meaning described below:

  • Personal Data refers to any information that relates to a natural person who can be identified, directly or indirectly, by reference to an identifier. 
  • Processing refers to any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means including, but not limited to, collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.
  • Controller is any entity that, alone or jointly with others (“Joint Controllers”), decides why and how personal data is processed. 
  • Processor refers to any entity that processes personal data on behalf of a data Controller.

 

Personal Information We Collect

The types of personal information (including “personal data” as defined under the GDPR and the PDPA) we may collect include the following:

  • Contact information (such as your name, phone and fax number, email, and postal address);
  • Information used to create your online account (such as your username, password, and security question and answer);
  • Your purchase and customer service history;
  • Location data (such as data derived from your IP address, country, and zip code) when      we have obtained your prior explicit consent;
  • Contact information you provide about friends or other people you would like us to contact;
  • Clickstream data and other information about your online activities (such as information about your devices, browsing actions, and usage patterns); and
  • Other personal information contained in content you submit to us.

 

We do not intentionally collect sensitive personal information (also known as “special category data” under the GDPR), such as data revealing racial or ethnic origin, political opinions, religious beliefs, health data, sexual orientation, or biometric data.  Under the CCPA/CPRA, if we collect sensitive personal information, you have the right to limit its use and disclosure to purposes necessary to provide the goods or services you have requested.

We use Google Analytics, which uses cookies and similar technologies to collect data (such as IP addresses) to evaluate use of and interaction with our website. For more information about Google Analytics and its opt-out mechanisms, please visit: https://analytics.google.com/. For information on how Google uses data from partner sites, please visit: https://policies.google.com/technologies/partner-sites.

Please note that providing personal information to us is voluntary. However, if you choose not to provide certain information, we may not be able to offer you certain products and services, and you may not be able to access certain features available on our website or applications. We will not condition the provision of goods or services on consent to the collection of personal information beyond what is necessary to provide those goods or services.

Information from Third Parties. We may collect user information about you from third party sources, such as public databases, joint marketing partners, social media platforms or other third parties, as described in this section. 

  • Social media pages and platforms. If you post information about us or engage with us on third party platforms, we may collect user information about you from that third party platform or account. The third-party platforms and services control the information they collect and share about you. For information about how they may use and disclose your information, including any information you make public, please consult their respective privacy policies.

Other sources. We may engage with third parties to enhance or update our customer information and obtain information about prospective customers that may be interested in our Services. For example, we may engage third parties to assist with our direct mailing campaigns, in order to help us better reach existing customers as well as prospective customers who may be interested in MSI Group and our Services. 

Information Collected Automatically.  We use cookies, web beacons, pixels, Google Analytics, and other technologies to recognize your browser or device, learn more about your interests, and provide you with essential features and services. These technologies collect certain information about your equipment and internet connection (IP address, operating system, and browser type) and your browsing actions and patterns (traffic data, location data, logs, and other communication data). This information does not include personal information, but we may maintain it or associate it with information we collect in other ways or receive from third parties. 

  • Device and browsing information. We use cookies, log files, pixel tags and other tracking technologies to automatically collect information when users access or use our Services, such as IP address, general location information, domain name, page views, a date/time stamp, browser type, device type, device ID, Internet service provider, referring and exiting URLs, operating system, language, clickstream data, and similar device and usage information. 
  • Activities and usage. We also collect activity information related to your use of the Services, such as information about the links clicked, searches, features used, items viewed, time spent within the Services, products and items you view and items you add to your cart, and your interactions with us and others within the Services.
  • Location information. We may collect or derive location data (such as data derived from your IP address, country, and zip code). 

 

Legal Bases for Processing Your Information (EEA, UK, and Singapore)

If you are located in the EEA, UK, or Singapore, we collect and process your personal information only where we have a valid legal basis to do so. Our legal bases for processing include:

  • Consent: Where you have given us clear, affirmative consent to process your personal information for a specific purpose (e.g., marketing communications, cookies, precise geolocation). Under the PDPA, we will obtain your consent (express or deemed) before collecting, using, or disclosing your personal data, unless an exception applies. You may withdraw your consent at any time by contacting us as described below, and we will cease processing within a reasonable time, subject to legal or contractual restrictions.
  • Performance of a Contract: Where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract (e.g., order processing, account management, customer support).
  • Legitimate Interests: Where processing is necessary for our legitimate interests or those of a third party, provided those interests are not overridden by your rights and freedoms (e.g., fraud prevention, network security, direct marketing to existing customers, internal analytics, and improving our products and services). We conduct balancing tests at least once a year to ensure our legitimate interests do not override your fundamental rights.
  • Legal Obligation: Where processing is necessary to comply with a legal obligation to which we are subject (e.g., tax reporting, responding to lawful government requests, or compliance with applicable regulations).
  • Vital Interests: In rare circumstances, where processing is necessary to protect your vital interests or those of another person.

How We Use Your Personal Information

We may use your personal information for the following reasons:

  • To process and fulfill orders and to keep you informed about the status of your order;
  • To communicate with you regarding our products, services, events, programs, and promotions;
  • To perform data analytics (such as market research, trend analysis, financial analysis, and customer segmentation);
  • To engage in ad retargeting and evaluate the effectiveness of our marketing efforts (including through our participation in ad networks);
  • To provide customer support;
  • To process, evaluate, and respond to requests, inquiries, and applications;
  • To create, administer, and communicate with you about your account (including any purchases and payments);
  • To conduct marketing and sales activities (including generating leads, pursuing marketing prospects, performing market research, determining and managing the effectiveness of our advertising and marketing campaigns, and managing our brand);
  • To operate, evaluate, and improve our business (such as by administering, enhancing, and improving our products and services; developing new products, managing our communications and customer relationships; and performing accounting, auditing, billing, reconciliation, and collection activities);
  • To verify your identity and protect against and prevent fraud and other unlawful activity, unauthorized transactions, claims and other liabilities and to manage risk exposure and quality;
  • To conduct investigations and to comply with and enforce applicable legal requirements, relevant industry standards, contractual obligations, and our policies and terms (such as this Privacy Policy); 
  • To maintain and enhance the safety and security of our products, services, website, information resources, and employees; and
  • To communicate with you as part of our recruitment and/or employment onboarding processes. 

 

We may also use aggregate, anonymous, and in some cases de-identified, information related to our business and the services in order to analyze, improve and develop our business and services, and for similar research and analytics purposes. Where we use, disclose or process de-identified data (data that is no longer reasonably linked or linkable to an identified or identifiable natural person, household, or personal or household device) we will maintain and use the information in de-identified form and not to attempt to re-identify the information, except in order to determine whether our de-identification processes are reasonable and adequate pursuant to applicable privacy laws.

Short Message Services (“SMS”) Messages

You may opt-in to receive SMS messages from the MSI Group in the following ways:

 

  • Verbally during a conversation; 
  • By submitting an online form; or
  • By filling out a paper form opting in. 

 

By opting into SMS messages from a web form or other medium, you are agreeing to receive SMS messages from MSI Group. This includes SMS messages for appointment scheduling, appointment reminders, post-visit instructions, and billing notifications. Message frequency varies. Message and data rates may apply, depending on your carrier’s pricing plan. These fees may vary if the message is sent domestically or internationally. If you are experiencing any issues with SMS messages, you can reply HELP to any message. 

You can opt-out of receiving SMS messages at any time. To do so, simply reply STOP to any SMS you receive. 

If you need assistance from us directly to address any issues you’re experiencing or to request removal from our message list, you can contact us as specified in the “Contact Us” section of this Privacy Policy. 

How We Share Your Personal Information

We do not sell your personal information to third parties, and we have not sold personal information in the preceding 12 months. Mobile opt-in, SMS consent, and personal information collected for SMS communication purposes will not be shared with third parties or affiliates for marketing purposes. We may disclose your personal information only for the following reasons and to the following categories of recipients:

  • We may share user information to fulfill any purpose for which you provide it and with your consent.
  • We may share personal information within the MSI Group for the purposes described in this Privacy Policy;
  • We may share personal information with service providers and processors we have retained to perform services on our behalf (such as payment processing, order fulfillment, customer support, cloud hosting, and data analytics). These service providers are contractually required to process personal information only on our instructions and to implement appropriate technical and organizational security measures. Under the GDPR, we enter into data processing agreements with such processors in accordance with Article 28. Under the PDPA, we require comparable contractual protections.
  • We may disclose personal information about you (a) if we are required or permitted to do so by applicable law or legal process (such as a court order, subpoena, or warrant); (b) to law enforcement authorities or other government officials to comply with a legitimate legal request; (c) when we believe disclosure is necessary to prevent physical harm or financial loss; (d) to establish, exercise or defend our legal rights; (e) in connection with an investigation of suspected or actual fraud or illegal activity; or (f) otherwise with your consent.
  • We may share Information if all or part of the MSI Group is sold, merged, dissolved, acquired, or disbanded to any extent, or in connection with steps that may need to be taken in anticipation of such events. 
  • We may disclose certain information that includes user data to third-party ad network providers, sponsors and/or traffic measurement services, who may use this data to improve and measure the effectiveness of our ads and those of third parties. We may also engage third party analytics companies to collect information about site usage in order to help us to understand how users access and use the services, to improve our services and other products and offerings, and for other research and analytical purposes.

 

How We Protect Your Information

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of personal information in transit and at rest, access controls limiting access to authorized personnel on a need-to-know basis, regular security assessments, employee training on data protection and security, and incident response procedures. All sensitive information you supply (including credit card data) is encrypted via Secure Socket Layer (SSL) or Transport Layer Security (TLS) technology.

We implement a variety of security measures when a user places an order, enters, submits, or accesses their information to maintain the safety of your personal information. We regularly review and update our security practices to address emerging threats and evolving regulatory requirements.

Credit card information is processed through a gateway provider and is not stored or processed on our servers.

How Long We Retain Your Data

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the personal information; the potential risk of harm from unauthorized use or disclosure; the purposes for which we process it; whether we can achieve those purposes through other means; and applicable legal, regulatory, tax, accounting, or other requirements. When personal information is no longer necessary for its intended purpose, we will securely delete or anonymize it in accordance with applicable law, including the PDPA’s requirement that personal data no longer needed for any business or legal purpose be disposed of.

How We Transfer Data Internationally

Your personal information may be transferred to, stored in, and processed in countries other than the country in which it was collected, including the United States. These countries may have data protection laws that differ from those in your country of residence. 

When we transfer personal information from the EEA or UK, we implement appropriate safeguards as required by the GDPR, including: (a) transfers to countries that the European Commission has determined provide an adequate level of protection; (b) Standard Contractual Clauses (SCCs) approved by the European Commission; or (c) other valid transfer mechanisms such as Binding Corporate Rules. For transfers of personal data from Singapore, we comply with the PDPA’s requirements under Section 26, ensuring that the recipient provides a comparable standard of protection, including through contractual arrangements. You may request a copy of the applicable transfer safeguards by contacting us as specified in the “Contact Us” section below.

Your Privacy Choices

We strive to provide you with choices regarding the information you provide to us. We have created mechanisms to provide you with the following control over your information: 

  • Marketing communications. You can opt out of receiving marketing emails from us by using the unsubscribe link in the footer of each marketing email we send to you or going to the “Manage Preferences” menu in your account. If you have opted in to receive text messages from MSI Group, you can opt out of receiving marketing text messages from us at any time by replying “STOP”. For more information, please see our Mobile Terms of Service.
  • Browser settings and controls. If you wish to prevent cookies from tracking your activity on our website or visits across multiple websites, you can set your browser to block certain cookies or notify you when a cookie is set. The Help portion of the toolbar on most browsers will tell you how to prevent your device from accepting new cookies, how to have the browser notify you when you receive a new cookie, or how to disable cookies altogether. Visitors to our Site and Services who disable cookies will be able to browse the Site, but some features may not function. 
  • Targeted advertising/cookie preferences. If you do not want us to use information that we collect or that you provide to us to deliver advertisements according to our advertisers' target-audience preferences, you can opt-out or adjust your cookies settings through our Cookies Preference Manager or enable a “global privacy control” (or GPC) signal to opt that browser on your device out of targeting cookies on our website. You can review or change your preferences for many cookies and tags on our website, other than those that are necessary for operation and functionality, by adjusting your cookie settings through our Cookies Preference Manager.  These preferences are browser and device specific, so you will need to set your preferences for each browser and device you use. If you subsequently delete or block cookies, you may need to reapply these settings. 

Our website responds to GPC signals, which means that if we detect that your browser is communicating a GPC signal, we will process that as a request to opt that particular browser and device out of sales and sharing (i.e., via cookies and tracking tools) on our website. Note that your preferences and settings are browser and device specific. If you come back to our website from a different device or use a different browser on the same device, you will need to opt out (or set GPC for) that browser and device as well. More information about GPC is available at: https://globalprivacycontrol.org/.

  • Industry ad choice programs. You can generally opt out of receiving personalized ads from third party advertisers and ad networks who are members of the Network Advertising Initiative (NAI) or who follow the Digital Advertising Alliance’s Self-Regulatory Principles for Online Behavioral Advertising by visiting the opt out pages on the NAI website and DAA website. You can control how participating third-party ad companies use the information that they collect about your visits to our Site and those of third parties, in order to display more relevant targeted advertising to you. You can obtain more information and opt out of receiving targeted ads from participating third-party ad networks at aboutads.info/choices (Digital Advertising Alliance).  You may also download the DAA AppChoices (https://youradchoices.com/appchoices) tool in order to help control interest-based advertising on apps on your mobile device.  
  • Accessing and correcting your information.  You can update much of the data we maintain about you, by logging into your account and updating your profile information. You can also request to correct/update or delete your user information by sending us a request as set forth in the Contact Us section below. We may maintain information about an individual sales transaction in order to service that transaction and for record keeping purposes.  We may require you to provide certain information to verify it is you making the request. To submit a request to correct or delete your data or for more information about our privacy practices and your privacy choices, you may contact us as set forth in the ‘Contact Us’ section below.  You can also opt-out of having your information shared with third parties by sending us a request as set forth in the ‘Contact Us’ section below.

 

Residents of certain states may have additional information rights and choices. 

State Privacy Rights 

State consumer privacy laws may provide their residents with additional rights regarding our use of their personal information. California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia provide (now or in the future) state residents with certain rights. Depending on your jurisdiction, you may have the following rights with respect to the personal information we hold about you. To exercise any of these rights, please contact us as specified in the “Contact Us” section of this Privacy Policy.

  • Correction. The right to correct inaccuracies in their personal information, taking into account the nature and purposes of the processing of the personal information. You can update much of the personal information we maintain about you by logging into your account and updating your profile information.
  • Deletion. To delete their personal information provided to or obtained by us.
  • Access. To confirm whether we are processing their personal information and to obtain a copy of their personal information in a portable and, to the extent technically feasible, readily usable format.
  • Opt-out. To opt out of certain types of processing, including:
    • To opt out of the “sale” of their personal information.
    • To opt out of targeted advertising by us.
    • To opt out of any processing of personal information for purposes of making decisions that produce legal or similarly significant effects.
  • Appeal. To appeal our decision to act regarding the rights above. 
  • Other Rights.  To not be discriminated against for exercising any of the rights listed above.

The exact scope of these rights may vary by state. In addition to the above, Delaware law provides residents with the right to obtain a list of the categories of third parties to whom we have disclosed the respective individual’s personal information. 

To help protect your privacy and maintain security, we may take steps to verify your identity before granting you access to your personal information or acting on your request. For U.S. residents, we will verify your identity using at least two pieces of information you have previously provided to us. For requests submitted by an authorized agent, we may require written proof of authority or power of attorney. We will respond to verified requests within the timeframes required by applicable law (generally within 30 days under the GDPR and 45 days under U.S. state privacy laws). If we need additional time, we will notify you of the extension and the reasons for it. Depending on your location, you may have the right to lodge a complaint with a supervisory authority (such as your local data protection authority in the EEA or UK, or the Personal Data Protection Commission in Singapore) if you are not satisfied with our response. To assert any of these rights, please email us at

dpo@markserv.com.

 

To opt out of targeted advertising by us, you can adjust your cookies settings through our Cookies Preference Manager or enable a “global privacy control” (or GPC) signal, and we will apply that to opt that browser on your device out of targeting cookies on our website. If you come to our website from a different device or from a different browser on the same device, you will need to set your preferences or apply GPC for that browser and/or device as well.

EEA and UK Privacy Rights

European Economic Area (EEA) and United Kingdom (UK): Your Rights

Please note: To protect your privacy, we may ask for additional information to verify your identity in order for us to respond to your request

 

Under EU Regulation 2016/679 of the European Parliament and the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, including the United Kingdom’s substantially similar law as it takes effect in the United Kingdom by virtue of the Data Protection Act 2018 (collectively the “GDPR”), you have a number of rights when it comes to your personal information. Further information and advice about your rights can be obtained from the data protection regulator in your country of residence. You can exercise any of these rights by contacting us through our email, phone or mailing address in the “Contact Us” section below.

 

  • The right to be informed. You have the right to be provided with clear, transparent and easily understandable information about how we use your Personal Information and your rights. This is why we’re providing you with the information in this Policy.
  • The right of access. You have the right to obtain access to your Personal Information, so you’re aware and can check that we’re using your information in accordance with data protection law.
  • The right to rectification. You are entitled to have your Personal Information corrected or amended if it is no longer inaccurate or incomplete or, as the case may be, collected in violation of the EU-US Data Processing Framework. 
  • The right to erasure. This is also known as ‘the right to be forgotten’ and, in simple terms, enables you to request the deletion or removal of your Personal Information where there is no compelling reason for us to keep using it. This is not a general right to erasure; there are exceptions.
  • The right to restrict processing. You have rights to ‘block’ or suppress further use of your Personal Information. When processing is restricted, we can still store your Personal Information, but may not use it further. We keep lists of people who have asked for further use of their information to be ‘blocked’ to make sure the restriction is respected in the future.
  • The right to data portability. You have rights to obtain and reuse your Personal Information for your own purposes across different services. This is not a general right and there are exceptions.
  • The right to object to processing. You have the right to object to certain types of processing, and may change your preferences as described above.
  • The right to lodge a complaint. You have the right to lodge a complaint about the way we handle or process your personal data with your national data protection regulator:
  • UK Information Commissioner’s Office (ICO) at www.ico.org.uk
  • EU authorities at http://ec.europa.eu/justice/article-29/structure/data-protectionauthorities/index_en.htm
  • Swiss FDPIC at https://www.edoeb.admin.ch/edoeb/en/home/the-fdpic/contact.html

  • The right to withdraw consent. As noted above, if you have given your consent to anything we do with your personal data, you have the right to withdraw your consent at any time (although if you do so, it does not mean that anything we have done with your Personal Information with your consent up to that point is unlawful). You can withdraw your consent to the processing of your personal information at any time.

     

Former, current, or prospective corporate customer contacts have the right to exercise choice (opt-out) from our use of their GDPR Personal Data for direct marketing purposes. To exercise this right, please follow the instructions in any direct marketing message you may have received (e.g., click the provided opt-out link in the email message or send us an email or postal mail request to opt-out in accordance the instructions provided in the direct marketing message). In certain situations, we may be required to disclose GDPR Personal Data in response to lawful requests by public authorities, including meeting national security or law enforcement requirements.

 

Please contact us at dpo@markserv.com.if you have any questions, wish to exercise your rights of access, or seek other assistance as described above.

 

Data Protection Safeguards and Principles

MSI Group safeguards personal data received in the United States from the UK, European Union, or EEA about former, current, or prospective corporate customer contacts and which is regulated by the (UK) GDPR. We are committed to protecting such GDPR Personal Data in accordance with our obligations under applicable law, such as GDPR Articles 45 to 50, and the Principles of Notice, Choice, Accountability for Onward Transfer, Security, Data Integrity and Purpose Limitation, Access, and Recourse, Enforcement and Liability.

To the extent permitted by applicable law, your use of this site constitutes your consent to the transfer of your Personal Data to MSI Group in the United States in the context of the EU-US Data Privacy Framework as set out in Commission Implementing Decision of July 10, 2023 pursuant to the GDPR on the adequate level of protection of personal data under the EU-US Data Privacy Framework.

In all cases where MSI Group transfers personal information to a third party acting as a controller, MSI Group will comply with the Notice and Choice Principles. MSI Group will enter into a contract with the third-party controller that provides that such data may only be processed for limited and specified purposes consistent with the consent provided by you and that the recipient will provide the same level of protection as the Principles and will notify MSI Group if it makes a determination that it can no longer meet this obligation. The contract also provides that when such a determination is made the third-party controller will cease processing or takes other reasonable and appropriate steps to remediate.

In all cases where MSI Group transfers personal data to a third party acting as an agent (processor for GDPR purposes), MSI Group will: 

  • Transfer such data only for limited and specified purposes; 
  • Ascertain that the agent is obligated to provide at least the same level of privacy protection as is required by the Principles; 
  • Take reasonable and appropriate steps to ensure that the agent effectively processes the personal information transferred in a manner consistent with the organization’s obligations under the Principles; 
  • Require the agent to notify MSI Group if it makes a determination that it can no longer meet its obligation to provide the same level of protection as is required by the Principles; 
  • Upon notice, including under IV, take reasonable and appropriate steps to stop and remediate unauthorized processing; and 
  • Provide a summary or a representative copy of the relevant privacy provisions of Our  contract with that agent to the U.S. Department of Commerce upon request.

 

When we transfer your information to third parties, we comply with the requirements of the legal protections that cover your information. For example, when we perform an onward transfer of your information protected under the GDPR, we remain responsible for the processing of your personal information. For information subject to an onward transfer by us under the Data Privacy Framework, we will remain liable under the Data Privacy Framework Principles if a recipient of your protected personal information processes such personal information in a manner inconsistent with the Principles, unless we are able to prove that we are not responsible for the event giving rise to the damage.

Global Privacy Control (GPC)

Global Privacy Control (“GPC”) is a browser-based signal that allows you to automatically communicate your preference to opt out of the sale or sharing of your personal information to every website you visit. Rather than submitting individual opt-out requests on each website, GPC sends a universal signal on your behalf as you browse the internet. Under the CCPA/CPRA and other applicable state privacy laws, we are required to honor GPC signals as valid requests to opt out of the sale or sharing of personal information. For more information about GPC, visit https://globalprivacycontrol.org/.

You can enable GPC by using a browser that supports it natively or by installing a browser extension. The following browsers include built-in GPC support that you can enable in your browser settings:

  • Mozilla Firefox (enable in Settings > Privacy & Security);
  • Brave Browser (GPC is enabled by default);
  • DuckDuckGo Privacy Browser (GPC is enabled by default).

 

If you use a browser that does not natively support GPC, such as Google Chrome, Microsoft Edge, or Apple Safari, you can install a browser extension that sends the GPC signal on your behalf. Available extensions include Privacy Badger (by the Electronic Frontier Foundation), Disconnect, OptMeowt, and Abine DeleteMe. These extensions can be downloaded from your browser’s extension or add-on store.

If you use multiple browsers or devices, you will need to enable GPC separately on each one. You can verify that GPC is active by visiting https://globalprivacycontrol.org/, which will display a confirmation banner if your GPC signal is being sent. Please note that enabling GPC will opt you out of targeted advertising and the sale or sharing of personal information on websites that honor the signal, which may affect your experience with personalized content and advertisements.

How We Utilize Cookies and Similar Technologies

We use cookies and similar tracking technologies (such as pixels, web beacons, and local storage) for remarketing, analytics, and search and display advertisements. Under the GDPR and ePrivacy Directive, we obtain your consent before placing non-essential cookies on your device (where applicable). Strictly necessary cookies that are essential for the operation of our website do not require consent.

We use the following categories of cookies and tracking technologies on our website. Cookies and technologies classified as “Strictly Necessary” do not require consent and are essential for the operation of our website. All other categories require your prior consent where applicable under the GDPR, the ePrivacy Directive, or similar laws, and you may withdraw your consent at any time through our cookie consent banner or preference center.

Analytics Cookies and Scripts

  • Google Analytics Tracking Script: We use Google Analytics, a web analytics service provided by Google LLC, to collect information about how visitors use our website. This script collects data such as pages visited, session duration, traffic sources, and anonymized IP addresses. The data is used to analyze website traffic and improve our online services. For more information, please visit Google’s privacy policy at https://policies.google.com/privacy. You may opt out by installing the Google Analytics Opt-Out Browser Add-on at https://tools.google.com/dlpage/gaoptout.

Advertising and Remarketing Cookies and Scripts

  • Google Ads (AdWords) Tracking Script: We use Google Ads conversion tracking and remarketing, provided by Google LLC, to measure the effectiveness of our advertising campaigns and to serve personalized advertisements to users who have previously visited our website. This script may collect data about your browsing behavior and interactions with our ads across Google’s advertising network. For more information, visit https://policies.google.com/privacy. You may opt out of personalized advertising at https://adssettings.google.com/.
  • In-Stream Video  Ads Tracking Script: (1) We use a connected television (CTV) advertising platform to measure the performance of our television advertising campaigns and to attribute website visits and conversions to CTV ad exposure. 
  • Microsoft Advertising Tracking Script: We use Microsoft Advertising Universal Event Tracking (UET), provided by Microsoft Corporation, to track conversions from Microsoft Advertising campaigns and to enable remarketing to users across the Microsoft Advertising network (including Bing, MSN, and Microsoft Edge). This script may collect data about your interactions with our website and ads. For more information, visit https://privacy.microsoft.com/. You may opt out of personalized advertising at https://account.microsoft.com/privacy/ad-settings.
  • Facebook (Meta) Tracking Script: We use the Meta Pixel (formerly Facebook Pixel), provided by Meta Platforms, Inc., to measure the effectiveness of our advertising on Facebook and Instagram, to deliver targeted advertisements, and to build custom audiences for remarketing purposes. This script may collect data about your browsing behavior, interactions with our website, and demographic information. For more information, visit https://www.facebook.com/privacy/policy/. You may manage your ad preferences at https://www.facebook.com/adpreferences.
  • LinkedIn Tracking Script: We use the LinkedIn Insight Tag, provided by LinkedIn Corporation (a Microsoft subsidiary), to track conversions from LinkedIn advertising campaigns, to retarget website visitors on LinkedIn, and to gain insights about the professional demographics of our website visitors. This script may collect data including IP addresses, device and browser information, timestamps, and page URLs. For more information, visit https://www.linkedin.com/legal/privacy-policy. You may opt out of LinkedIn targeted advertising at https://www.linkedin.com/psettings/advertising.

Functional and Customer Engagement Cookies and Scripts

  • Intercom AI Chat Bot Script: We use Intercom, a customer messaging platform provided by Intercom, Inc., to provide live chat and AI-assisted customer support on our website. This script may collect data such as your name, email address (if voluntarily provided during a chat session), browsing behavior, pages visited, and conversation history. Information collected through Intercom is used solely for customer support and service improvement purposes. For more information, visit https://www.intercom.com/legal/privacy.

Visitor Identification and B2B Intelligence Cookies and Scripts

  • ZoomInfo WebSights Tracking Script: We use ZoomInfo WebSights, a business-to-business visitor identification service provided by ZoomInfo Technologies LLC, to identify the companies visiting our website based on IP address resolution and to gain insights about organizational-level website traffic. This script collects data such as IP addresses, pages visited, and company-level firmographic information. ZoomInfo WebSights does not identify individual visitors by name unless you voluntarily submit personal information through our website. For more information, visit https://www.zoominfo.com/about/privacy-policy.

For all advertising and non-essential tracking technologies listed above, we will obtain your prior consent before activating these scripts where required by applicable law (including in the EEA and UK under the GDPR and ePrivacy Directive). You may withdraw your consent or opt out at any time through our cookie consent banner, by adjusting your browser settings, or by using the opt-out links provided above. Under the CCPA/CPRA, to the extent that any data collected by these scripts constitutes a “sale” or “sharing” of personal information for cross-context behavioral advertising, you may opt out as described in the Your Privacy Rights section of this Privacy Policy. We regularly review our use of tracking technologies to ensure compliance with applicable privacy laws and to minimize the collection of personal data to what is necessary for the stated purposes.

You can manage your cookie preferences through our cookie consent banner (where available), through your browser settings, or by using our preference center. Since each browser is different, please refer to your browser's Help Menu to learn how to modify your cookie settings. You may also opt out of interest-based advertising through the Digital Advertising Alliance (http://optout.aboutads.info/) or the Network Advertising Initiative (http://optout.networkadvertising.org/).

Please note, if you turn cookies off, it’s possible that some of our website features will be disabled that make your experience more efficient. However, you will still be able to place orders.

How Do We Respond to “Do Not Track” and Global Privacy Control Signals?

We honor “Do Not Track” signals and Global Privacy Control (GPC) signals. When we detect a GPC signal from your browser, we will treat it as a valid request to opt out of the sale or sharing of personal information associated with that browser, as required by the CCPA/CPRA and other applicable state laws. We do not track, plant cookies, or use advertising when a “Do Not Track” (DNT) browser mechanism is in place.

Third-Party Behavioral Tracking

We do not permit third-party behavioral tracking on our website for purposes unrelated to our services. We utilize Google Analytics for our own analytical purposes, which processes data in an anonymized or pseudonymized manner where feasible. Any behavioral tracking we perform does not involve the disclosure of your personal information to unaffiliated third parties for their independent marketing purposes.

Children Online Privacy Protection Act (COPPA)

We do not specifically market to children under the age of 13 years old (or under the age of 16 where required by applicable law, including the GDPR). We do not knowingly collect or solicit personal information from children under the age of 13 (or the applicable age threshold in your jurisdiction). If we become aware that we have collected personal information from a child below the applicable age threshold without verified parental consent, we will promptly delete the information from our records. If you believe that a child may have provided us with personal information, please contact us as specified in the Contact Us section of this Privacy Policy below. Under the CCPA/CPRA, we do not sell or share the personal information of consumers under 16 years of age without affirmative authorization.

Notice to Individuals in Singapore

If you are located in Singapore, the following additional information applies to you under the Personal Data Protection Act 2012 (PDPA). We collect, use, and disclose your personal data only for the purposes notified to you and with your consent, unless an exception under the PDPA applies. You may withdraw your consent at any time by contacting our Data Protection Officer, and we will inform you of the likely consequences of withdrawal. 

You have the right to request access to and correction of your personal data in our possession. We may charge a reasonable fee for processing access requests. We will respond to your access or correction request within 30 days of receiving it (or such extended period as permitted under the PDPA). Upon request, we will provide you with information about the ways in which your personal data has been or may have been used or disclosed by us within the year preceding your request, as required by Section 21 of the PDPA. We will make reasonable efforts to ensure that your personal data is accurate and complete. We will also make reasonable security arrangements to protect your personal data from unauthorized access, collection, use, disclosure, copying, modification, disposal, or similar risks.

Data Portability. Under Part VIA of the PDPA (as amended), you may have the right to request that we transmit a copy of your personal data that is in our possession or under our control to another organization in a commonly used machine-readable format, subject to the conditions and exceptions prescribed under the PDPA and its regulations. We will respond to any data porting request within a reasonable period and, where applicable, will work with the receiving organization to facilitate the transfer. A reasonable fee may be charged for processing data portability requests where permitted by the PDPA.

Data Breach Notification. In the event of a data breach that is likely to result in significant harm to you, or that is of a significant scale, we will notify the Personal Data Protection Commission (“PDPC”) and affected individuals as soon as practicable, and in any case no later than 3 calendar days after completing our assessment of a notifiable data breach, in accordance with Part VIA (Sections 26A–26E) of the PDPA.

Do Not Call Registry. If you have registered your Singapore telephone number with the national Do Not Call (“DNC”) Registry, we will not send you marketing messages via voice calls, text messages (including SMS and MMS), or fax to that number unless we have obtained your clear and unambiguous consent or you have an ongoing relationship with us and have not opted out, as permitted under Part IX of the PDPA.

Deemed Consent. In certain circumstances, your consent to the collection, use, or disclosure of your personal data may be deemed under the PDPA. This includes situations where you voluntarily provide your personal data for a purpose that would be considered appropriate by a reasonable person in the circumstances, or where we have notified you of the intended purpose and given you a reasonable opportunity to opt out and you have not done so (deemed consent by notification under Section 15A of the PDPA). Where we rely on deemed consent by notification, we will assess and take into account whether the collection, use, or disclosure of personal data could have any adverse effect on you.

Complaint to the PDPC. If you are not satisfied with our response to your request or believe that we have not complied with the PDPA, you have the right to lodge a complaint with the Personal Data Protection Commission (PDPC). You may contact the PDPC at https://www.pdpc.gov.sg/.

Notice to Individuals in the EEA and UK

If you are located in the EEA or UK, the GDPR provides you with additional rights as described in the EEA and UK Privacy Rights section above. The data controller for your personal information is the MSI Group entity identified in the Contact Us section below. You have the right to lodge a complaint with your local supervisory authority if you believe that our processing of your personal information infringes the GDPR.

A list of EU supervisory authorities is available at: https://edpb.europa.eu/about-edpb/about-edpb/members_en. For UK residents, you may contact the Information Commissioner’s Office (ICO) at: https://ico.org.uk/. Where we rely on legitimate interests as a legal basis, you may contact us to obtain information about the balancing test we have conducted.

CAN-SPAM Act

The CAN-SPAM Act is a law that sets the rules for commercial email, establishes requirements for commercial messages, gives recipients the right to have emails stopped from being sent to them and spells out tough penalties for violations.

To be in compliance with the CAN-SPAM Act of 2003, we agree to the following:

  • Not to use false or misleading subjects or email addresses;
  • Identify the message as an advertisement in some reasonable way;
  • Include the physical address of our business or site headquarters in email communications;
  • Monitor third-party email marketing services for compliance, if one is used;
  • Honor opt-out/unsubscribe requests quickly; and
  • Allow users to unsubscribe by using the link at the bottom of each email.

If at any time you would like to unsubscribe from receiving future emails, please contact us as specified in the Contact Us section of this Privacy Policy.

Contact Us / Data Protection Officer

If you have any questions, concerns, inquiries, or requests relating to this Privacy Policy or our data protection practices, or if you wish to exercise any of your rights described in this Privacy Policy, you may contact us or our designated Data Protection Officer using the information below.

  • Toll Free: 800.234.0135
  • Data Protection Officer: Roland Johnson
  • DPO Email: dpo@markserv.com

 

Additional Information for California Residents

In this section, we provide additional information to California residents about how we handle their personal information, as required under California privacy laws including the California Consumer Privacy Act (“CCPA”), the California Privacy Rights Act (“CPRA”), and other California privacy laws (collectively referred to as “CCPA” in this notice). Any terms defined in the CCPA and CPRA have the same meaning when used in this notice. This section does not address or apply to our handling of publicly available information lawfully made available by state or federal government records or other personal information that is exempt under the CCPA. 

While our collection, use and disclosure of personal information varies based upon our relationship and interactions with you, in this section we describe, generally, how we have collected and disclosed personal information about consumers in the prior 12 months. We retain the personal information we collect only as reasonably necessary for the purposes described above or otherwise disclosed to you at the time of collection.

Categories of Personal Information Collected. The list below identifies the categories of personal information (as defined by the CCPA) we have collected about consumers in the twelve months prior to the effective date of this Notice. Sensitive personal information is a subtype of personal information consisting of specific information categories. We do not collect sensitive personal information. 

  • Identifiers: Includes direct identifiers, such as name, alias, user ID, username, and other unique personal identifiers; email address, phone number, address and other contact information; IP address and other online identifiers.
  • Personal Information: Includes personal data, such as name, account name, user ID, contact information, and financial or payment information, that individuals provide us in order to purchase or obtain our products and services.  For example, this may include information collected when an individual registers for an account, submits and order or request to us, or makes a purchase on our Site and Services.
  • Protected classification characteristics: We collect limited information that is considered a protected classification under California/federal law (e.g., your gender and disability status).
  • Commercial Information: Includes records of personal property, products or services purchased, obtained, or considered, or other purchasing or use histories or tendencies. For example, this may include demographic information that we receive from third parties in order to better understand and reach our customers.
  • Internet or other electronic network activity information: Including, but not limited to, browsing history, clickstream data, search history, and information regarding interactions with an internet website, application, or advertisement, including other usage data related to your use of any of our Services or other online services. 
  • Geolocation Data: Includes the location of your device if you agreed to provide this information. 
  • Professional or employment data: Includes professional and employment-related information (such as current and former employer(s) and position(s), business contact information and professional memberships).
  • Inference Data: Includes inferences drawn from any of the information identified above to create a profile reflecting a consumer’s preferences, characteristics, behavior or attitudes. 

Use of Personal Information. We may use or disclose the information we collect for certain business purposes as described in this Privacy Notice. We will not collect additional categories of personal information or use the user information we collected for materially different, unrelated, or incompatible purposes without providing you notice.

Categories of personal information disclosed for a business purpose. The information that we disclosed to the third parties identified in this Privacy Policy about users for a business purpose in the twelve months prior to the effective date of this Disclosure fall into the following categories established by the California Consumer Privacy Act, depending on which part of the Service is used:

  • Identifiers: such as name, alias, address, phone numbers, email address, or IP address. 
  • Personal Information: such as account name, user ID, address, telephone number, contact information, and financial or payment information, that individuals provide us to purchase or obtain our products and services.
  • Commercial Information: such as products or services purchased or other consuming histories or tendencies.
  • Internet or other electronic network activity information: such as content interaction information or search history.

“Sales” and “Sharing” of Personal Information? Under the CCPA, a “sale” includes disclosing or making available personal information to a third-party in exchange for monetary compensation or other benefits or value, and “sharing” broadly as disclosing or making available personal information to a third party for purposes of cross-context behavioral advertising. While we do not disclose personal information to third parties in exchange for monetary compensation, we may disclose or make available usage data, commercial information, profiles and inferences, and identifiers to third party ad companies and third parties that assist us with our direct mail and marketing campaigns.  While we may “sell” or “share” personal information as defined by the CCPA, we do not sell or share sensitive personal information, or any personal information about California consumers who we know are younger than 16 years old.

California Residents’ Rights. In general, California residents have the following rights with respect to their personal information, subject to some exceptions: 

  • Do-not-sell or share (opt-out). You have the right to opt-out of the sale and sharing of your personal information by MSI Group;  
  • Right to Request Access to or Deletion of Personal Information: You may have the right under the California Consumer Privacy Act to request information about the collection of your personal information by MSI Group, or access to or deletion of your personal information. Once we receive and confirm your verifiable consumer request to delete, we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies. We may deny your request to delete if retaining the information is necessary for us or our service providers to complete the transaction for which the information was collected, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you. Other circumstances in which we may deny your request to delete include:
    • Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
    • Debug products to identify and repair errors that impair existing intended functionality.
    • Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.
    • Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 seq.).
    • Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information’s deletion may likely render impossible or seriously impair the research’s achievement, if you previously provided informed consent.
    • Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us.
    • Comply with a legal obligation.
    • Make other internal and lawful uses of that information that are compatible with the context in which you provided it.
  • Right to Correct. In certain circumstances, you have the right to request correction of any inaccurate personal information.
  • Right to Request to Know. You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months. Once we receive and confirm your verifiable consumer request to know, we will disclose to you:
    • The categories of Personal Information we collected about you.
    • The categories of sources for the Personal Information we collected about you.
    • Our business or commercial purpose for collecting that Personal Information.
    • The categories of third parties with whom we share that Personal Information.
    • The specific pieces of Personal Information we collected about you.
    • If we disclosed your Personal Information for a business purpose, the Personal Information categories that each category of recipient obtained.
  • Right to Limit the Use/Disclosure of Sensitive Personal Information. We do not collect sensitive personal information. 
  • Right to Non-Discrimination. We will not discriminate against you for exercising any of your CCPA/CPRA rights. Unless permitted by the CCPA/CPRA, we will not deny you goods or services, provide you with a different level or quality of good or services, suggest that you may receive a different price or rate for goods or services or a different level of quality of goods or services, or charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.

Submitting CCPA Requests.  California residents may submit a CCPA requests to know/access, correct, or delete to MSI Group by emailing us at dpo@markserv.com or calling our toll-free number 800.234.0135.   

  • Requests to know/access, correct, or delete. When you submit a request to know or a request to know/access, correct, or delete, we will take steps to verify your identity and request by matching the information provided by you with the information we have in our records. We will process your request based upon the personal information in our records that is linked or reasonably linkable to the information provided in your request. In some cases, we may request additional information in order to verify your request or where necessary to process your request. If we are unable to adequately verify a request, we will notify the requestor. 

Authorized agents may initiate a request on behalf of another individual by contacting us at the toll-free number above; authorized agents will be required to provide proof of their authorization and we may also require that the relevant consumer directly verify their identity and the authority of the authorized agent.   

You may only make a verifiable consumer request to know twice within a 12-month period. We will confirm receipt of your request within ten (10) business days. If you do not receive confirmation within the 10-day timeframe, please contact dpo@markserv.com. We endeavor to respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing. Any disclosures we provide will only cover the 12-month period preceding the verifiable consumer request’s receipt. The response we provide will also explain the reasons we cannot comply with a request, if applicable.

We do not charge a fee to process or respond to your verifiable consumer request to know or request to delete unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

  • Requests to opt out.  If you do not want us to use information that we collect or that you provide to us to deliver advertisements according to our advertisers' target-audience preferences, you can opt-out or adjust your cookies settings through our Cookies Preference Manager or enable a “global privacy control” (or GPC) signal to opt that browser on your device out of targeting cookies on our website. You can review or change your preferences for many cookies and tags on our website, other than those that are necessary for operation and functionality, by adjusting your cookie settings through our Cookies Preference Manager.  These preferences are browser and device specific, so you will need to set your preferences for each browser and device you use. If you subsequently delete or block cookies, you may need to reapply these settings. 

Our website responds to GPC signals, which means that if we detect that your browser is communicating a GPC signal, we will process that as a request to opt that particular browser and device out of sales and sharing (i.e., via cookies and tracking tools) on our website. Note that your preferences and settings are browser and device specific. If you come back to our website from a different device or use a different browser on the same device, you will need to opt out (or set GPC for) that browser and device as well. More information about GPC is available at: https://globalprivacycontrol.org/. 

  • Data portability requests. For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.

Requesting Notice in an Alternative Format/Language. You may be able to request this Notice in another language where we provide such notices in the ordinary course of business or in an alternative format if you have a disability. Please contact the Privacy Office below to request an alternative format.

Your Privacy Rights Under California Shine the Light Law. Under California’s “Shine the Light” law (Cal. Civ. Code § 1798.83), California residents who provide us certain personal information are entitled to request and obtain from us, free of charge, information about the personal information (if any) we have shared with third parties for their own direct marketing use.  Such requests may be made once per calendar year for information about any relevant third-party sharing in the prior calendar year. To submit a “Shine the Light” request, email us at dpo@markserv.com, and include in your request a current California address and your attestation that you are a California resident.

 

We reserve the right to update this Privacy Policy at any time. When we make material changes, we will notify you by posting the updated policy on our website with a revised “Last Edited” date, and where required by applicable law, we will provide additional notice (such as by email or prominent website notice) and, where necessary, obtain your consent. We encourage you to review this Privacy Policy periodically. We will use reasonable efforts to respond to your questions or requests within 30 days of receipt (or within such shorter timeframe as required by applicable law).


Last Edited on 10/30/2026