Privacy Policy

The short version

We collect the information you give us when you contact us or become a customer, plus basic analytics about how the site is used. We do not sell your information, we do not share it with advertisers, and we run no advertising or ad-targeting cookies of any kind. Everything below is the detail behind that.

Who we are

MulliMarsh Technologies LLC ("MulliMarsh", "we", "us") is a web design and managed hosting business serving the greater Sacramento, California area. We are the controller of the personal information described here. You can reach us at any time atryan@mullimarsh.com.

The marketing site

Contact form

When you submit the form on our homepage, we collect your name, email address, your business name (optional) and your message. The form also carries a hidden field and a timestamp that exist only to detect automated spam.

That submission is delivered to us as an email and nothing more — it is not written to any database. We keep it in our mail account for as long as we may reasonably need it to answer you and to keep a record of the enquiry. We use it to reply to you and, if you become a customer, to carry out the work. We do not add you to a marketing list.

Analytics and cookies

We use Google Analytics 4 to understand how visitors use the site — page views, session counts, approximate location at the country or region level, and device type.

Analytics storage is off until you accept it. Until you choose, and if you decline, Google Analytics runs in a restricted mode that sets no analytics cookies and stores nothing on your device. You can change your mind either way at any time using theCookie preferences link in the footer. Your choice is kept in your browser's local storage for one year and is never sent to us as an identifier.

We run Google Consent Mode, and we have ad storage, ad personalization and ad user data switched off permanently — not merely until you consent. We do not operate advertising cookies, remarketing pixels, or audience-sharing of any kind.

The customer portal

If you are a MulliMarsh customer, you may have access to the portal at portal.mullimarsh.com. For account holders we hold:

• Your email address, used to identify your account and to send sign-in codes and billing notices.
• Passkey credentials if you register one. A passkey stores a public key only — we never receive or hold your biometrics, device PIN, or any private key.
• Session and sign-in tokens. These are stored as one-way hashes, so the values in our database cannot be used to sign in as you.
• Billing records — your business name, billing address, invoices and their line items, and a record of each payment.
• An activity log of significant account actions, such as an invoice being issued, paid, or voided.

Site previews at preview.mullimarsh.com may be reachable through a share link. Those links contain a random token which we store hashed. Anyone holding the link can view that preview, so please treat it as you would any confidential link.

Payments

Card and bank payments are processed by Stripe. Payment pages are hosted by Stripe, not by us — your full card number never reaches our servers and we never store it. We hold a Stripe customer reference, and we display the brand and last four digits of a saved payment method, which we read from Stripe rather than store.

No payment method carries a fee. See our Terms of Use for the detail.

Accounting

We use Intuit QuickBooks Online as our accounting system. Our own QuickBooks company is the only one we connect to — we never access a customer's QuickBooks account. To keep our books, we transmit customer billing information to QuickBooks: business name, billing address, invoices and their line items, and payment records. We do not send contact-form submissions, portal sign-in credentials, or website analytics to QuickBooks.

Email

Our email is sent through Amazon Simple Email Service. We record delivery events — delivered, bounced, marked as spam — so we can tell whether billing mail is actually reaching customers. We do not use tracking pixels to record whether you opened a message.

Who we share information with

We share information only with the service providers we need to run the business, and only for that purpose:

We may also disclose information if the law requires it, or to establish or defend a legal claim. If the business were ever sold or merged, customer records could transfer as part of it; we would tell you before that happened.

What we never do

• We do not sell personal information, and we never have.
• We do not share it with advertisers or data brokers.
• We do not use it to build advertising profiles or audiences.
• We do not send marketing email to people who merely contacted us.

How long we keep it

Contact enquiries stay in our mail account for as long as they remain useful for answering you and keeping a record of the enquiry. Billing records — invoices and payments — are kept for at least seven years, because tax and accounting rules require it. Portal sessions and sign-in codes expire automatically, typically within minutes for codes and thirty days for sessions. Analytics data is retained according to our Google Analytics settings and is not tied to your name.

How we protect it

Traffic to our sites is encrypted in transit. Databases are encrypted at rest. Sign-in tokens are stored hashed rather than in plain text, administrative access requires a passkey, and access to production systems is limited to those who need it. No system is perfectly secure, but we hold payment card data nowhere, which removes the most attractive target entirely.

Your rights

You can ask us to tell you what we hold about you, correct it, or delete it. Emailryan@mullimarsh.com and we will respond. We may need to keep billing records even after a deletion request, because tax law requires us to.

California residents. Under the California Consumer Privacy Act you have the right to know what personal information we collect and how we use it, to request deletion or correction, to opt out of the sale or sharing of personal information, and not to be discriminated against for exercising any of these rights. We do not sell or share personal information as those terms are defined by the CCPA, so there is nothing to opt out of — but the right to ask remains yours, and email is how you exercise it.

Children

Our services are intended for businesses. We do not knowingly collect personal information from anyone under 13. If you believe a child has provided us information, email us and we will delete it.

Changes

If we change this policy we will update the date at the top of this page. Where a change materially affects customers, we will say so directly rather than relying on you to notice.

Contact

Questions, requests, or complaints about privacy go toryan@mullimarsh.com. A person reads them.