Privacy policy

1. Who is responsible

The operator identified on the legal information page is responsible for personal data collected through the My Cloud Mac website. The privacy contact on that page is the point of contact for questions and rights requests. In this local preview, operator details are still being confirmed.

This notice covers the website and pre-sales enquiries. Processing of data stored inside a rented Mac, including any processing on your instructions, must be described in the rental and data-processing arrangements before service begins.

2. Information we collect

Do not put passwords, API keys, payment details, or sensitive personal information into the enquiry form or page URLs. An enquiry is not a newsletter subscription.

• Enquiries: your name, email address, selected Mac model, rental or priority-list request, chosen term, displayed monthly price and currency, and the page path where you submitted the form. Follow-up correspondence may add information you choose to share.
• Optional measurement: after you allow analytics, we record page paths, a pseudonymous tab-session identifier, interactions, and allowlisted campaign labels and campaign/ad identifiers. We keep the first and latest campaign details for up to 30 days on your device and attach them to an enquiry you submit while consent is active. Referrers are reduced to their origin; arbitrary URL parameters, names, emails, and Facebook click IDs are not collected by this measurement flow. Campaign URLs must not contain personal or sensitive information.
• Operational enquiry records: the CRM and an associated first-party event record contain a contact reference, enquiry identifier, model, timestamp and enquiry/waitlist status so we can reconcile submissions and prevent duplicate counting. This is separate from optional browsing measurement. A submitted enquiry is not counted as a paying customer.
• Technical and security information: network requests expose information such as your IP address and browser details to the servers handling them. Infrastructure logs may be used to diagnose faults and protect the service.
• Preferences: a record on your device stores whether you allow analytics and when that choice expires. A separate currency preference remembers USD or EUR. Browser locale may suggest EUR; it is not a measurement of your location. No GPS or IP-geolocation lookup is used for currency selection. See the cookie policy for details.
• Pricing enquiries record the USD billing price and, where relevant, the displayed EUR estimate and exchange-rate date. Our server retrieves a public ECB reference rate without sending your enquiry details to the ECB.

3. Why we use it

We do not use this website’s enquiry flow to make solely automated decisions producing legal or similarly significant effects on you.

• To respond to an enquiry and take steps you request before a rental agreement: necessary pre-contractual processing, where applicable.
• To run and protect the website, investigate faults, and deal with abuse: legitimate interests in a secure, functioning service, balanced against your rights.
• To measure website usage through optional analytics: your consent, which you may withdraw using Cookie settings without affecting your enquiry.
• To comply with applicable legal obligations or establish, exercise, or defend legal claims where necessary.

4. Apteva and other recipients

The website sends enquiries to its own server, which uses the Apteva web SDK to save them in the operator’s production SaaS CRM at agents.schwartzindustries.com, in the My Cloud Mac list. Operational enquiry events and consented usage measurement are recorded in the same project’s Apteva Analytics app. API credentials remain on the server.

Only if you separately allow Meta advertising measurement do we load the Meta pixel and share page visits and confirmed expressions of interest with Meta for Facebook/Instagram ad measurement. Meta may receive the page URL, browser/network information and cookie identifiers and associate events with its users. We do not deliberately supply your form name, email, quoted rental price, or payment information to the pixel. Meta processes information under its own privacy policy (https://www.facebook.com/privacy/policy/). This may involve international transfers; operator review of applicable terms and safeguards is required before launch.

Information may be accessed by authorised personnel and service providers that support hosting, communications, security, or the rental service, only as needed for those purposes. Information may also be disclosed where legally required or necessary to address a legitimate legal claim. Website enquiry data is not sold by this integration.

Before public launch, the operator must confirm the hosting locations, relevant providers, and any international-transfer arrangements. No claim is made here that all data stays in a particular country. Where an international transfer is subject to data-protection requirements, the applicable safeguards must be identified and available on request.

5. Retention

Enquiry and correspondence records should be retained only for as long as needed to respond, maintain an active customer relationship, meet applicable record-keeping duties, or resolve a dispute. Optional analytics records should be retained only for the period needed to understand website usage. Any longer retention must have an identified legal or operational reason.

The current website integration does not automatically delete CRM or server-side analytics records. The operator must confirm and implement the retention schedule before public launch. Clearing browser storage or withdrawing analytics consent does not itself erase records already held on the server.

On your device, the website checks the privacy choice for 180 days. The analytics identifier is removed when you choose Essential only, or when the site detects that consent is missing or expired. Browser settings can also clear these values.

6. Your choices and rights

Depending on applicable law, you may request access, correction, deletion, restriction, or portability of your personal data, and object to processing based on legitimate interests. These rights can have conditions and exceptions. Use the privacy contact on the legal information page; we may ask for proportionate information to verify your identity.

You can refuse or withdraw optional analytics through Cookie settings in the footer. Withdrawal does not affect the lawfulness of processing before withdrawal. To ask about deletion of earlier records, contact us separately.

You may complain to your competent data-protection authority. Where the GDPR applies, requests are generally answered within one month, with permitted extensions explained where applicable.

7. Changes and security

No online service can promise absolute security. We use access restrictions and operational safeguards appropriate to the service, and you should avoid sending secrets through public forms. Material changes to how information is used will be reflected in an updated notice and, where required, a renewed choice or notification.