Privacy Policy

Last updated September 2026

Facturama Limited, trading as MailStruck ("MailStruck", "we", "us", or "our"), respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our email marketing platform (the "Service").

1. Our role in data processing

Under the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018, MailStruck acts in two capacities:

  • Data Controller: We act as a data controller for the personal data of our account holders, website visitors, and individuals who contact us directly.
  • Data Processor: We act as a data processor for the contact data (e.g., email lists, subscriber information) that our customers upload to the Service. Our processing of this data is governed by our Data Processing Agreement (DPA).

2. Information we collect

A. Information you provide to us (as a Controller):

  • Account data: name, email address, password, company name, and role.
  • Billing data: billing address, VAT number, and payment information (processed securely by our third-party payment processor, Stripe).
  • Communication data: information you provide when contacting our support team or participating in surveys.

B. Information we collect automatically:

  • Usage data: IP address, browser type, operating system, pages visited, time and date of visit, and navigation paths.
  • Cookies and tracking technologies: see our Cookie Policy for details.

C. Information processed on behalf of customers (as a Processor):

  • Customer contact data: email addresses, names, and other custom fields uploaded by our customers.
  • Campaign performance data: open rates, click-through rates, bounce rates, and unsubscribe requests. We use tracking pixels (web beacons) in emails sent through the Service to collect this data.

3. How we use your information

We use the information we collect as a Data Controller for the following purposes and legal bases:

  • To provide and maintain the Service: processing account and billing data to fulfil our contract with you (Performance of a Contract).
  • To improve the Service: analysing usage data to develop new features (Legitimate Interest).
  • To communicate with you: transactional emails, service updates, and support responses (Performance of a Contract / Legitimate Interest).
  • For marketing: promotional emails about MailStruck features, subject to your consent where required (Consent / Legitimate Interest). You can opt out at any time.
  • To ensure security and compliance: monitoring for fraud, enforcing our Acceptable Use Policy, and complying with legal obligations (Legitimate Interest / Legal Obligation).

4. How we share your information

We do not sell your personal data. We may share your information with:

  • Service providers (sub-processors): third-party vendors who provide services on our behalf, such as cloud hosting, email delivery infrastructure, payment processing, and support tools. See our Sub-Processor List. All sub-processors are bound by strict data protection agreements.
  • Legal and regulatory authorities: if required by law, court order, or legal process, or to protect the rights, property, or safety of MailStruck, our users, or others.
  • Business transfers: in connection with a merger, acquisition, reorganization, or sale of assets.

5. International data transfers

MailStruck is based in the United Kingdom. Your personal data may be transferred to, and processed in, countries outside of the UK and the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place, such as the UK International Data Transfer Agreement (IDTA) or the EU Standard Contractual Clauses (SCCs).

6. Data retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy.

  • Account data: retained for the duration of your active account. If you close your account, we will delete your data within 30 days, except where retention is required for legal or tax purposes (typically 6–7 years).
  • Customer contact data: retained as long as your account is active. Upon account deletion, all contact lists are permanently deleted. We may retain minimal suppression lists (hashed email addresses) to ensure compliance with opt-out requests.

7. Your data protection rights

Depending on your location (e.g., UK, EEA, California), you may have the following rights regarding your personal data:

  • The right to access, update, or delete your personal data.
  • The right to restrict or object to our processing of your data.
  • The right to data portability.
  • The right to withdraw consent at any time.
  • The right to lodge a complaint with a supervisory authority (e.g., the Information Commissioner's Office (ICO) in the UK).

To exercise these rights, please contact us at info@mailstruck.com.

8. Contact us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: info@mailstruck.com
Mail: Facturama Limited, 16 Blatchington Road, Hove, East Sussex, BN3 3YN, United Kingdom.