Privacy Policy
How Market Latch collects, uses, stores, and protects your personal information — across both our professional services and our digital product store.
Last updated: 18 July 2026·Effective: 18 July 2026·Applies to: marketlatch.com, all services and digital products
On this page
1. Introduction & Scope
Market Latch (“Market Latch”, “we”, “us”, “our”) is a digital growth business founded and operated by Nadeem Alam. We provide two connected categories of offering: professional digital marketing services (SEO, GEO, AEO, WordPress development, Google Ads, Meta Ads, content marketing, and related consulting) and digital products (checklists, templates, audit reports, prompt packs, digital books, SOPs, AI tools, and business resources sold as instant downloads).
This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, and what rights you have over it. It applies to every visitor to marketlatch.com, every person who contacts us, every newsletter subscriber, every digital product customer, and every professional services client — regardless of which country you are in.
We serve businesses across the United States, United Kingdom, Canada, Australia, the UAE, the European Union, and Pakistan. Where local law (such as the UK GDPR, the EU GDPR, or the California Consumer Privacy Act) grants you stronger rights than this policy describes, those stronger rights apply.
Our position in plain language: we collect the minimum information needed to answer your question, deliver what you bought, or run your campaign. We do not sell your personal data to anyone, ever, under any circumstances.
2. Information We Collect
We collect information in three ways: information you give us directly, information collected automatically when you use the site, and information we receive from third-party processors acting on our behalf.
2.1 Information you provide directly
- Identity and contact data — name, business email address, phone number where you choose to provide it, company name, and country.
- Business context data — website URL, budget range, service interest, product interest, and the free-text details you write in an enquiry or project brief.
- Transaction data — records of digital products purchased, order references, and download history. Payment card details are handled by our payment processor and are never stored on our servers.
- Client engagement data — for professional services clients, any access credentials, analytics data, ad account data, or content assets you share with us for the purpose of delivering the engagement.
- Communications — the content of emails, messages, and call notes exchanged with us.
2.2 Information collected automatically
- Technical data — IP address (often truncated or anonymised by analytics), browser type and version, operating system, device type, and screen resolution.
- Usage data — pages viewed, time on page, referring URL, links clicked, scroll depth, and the search terms that brought you here.
- Cookie data — as described in section 7 and in our Cookie Policy.
2.3 Information we do not collect
We do not deliberately collect special category data (racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic or biometric data, health data, or sexual orientation). Please do not include such information in enquiry forms — if you do, we will delete it.
3. Contact Forms & Enquiries
When you submit a contact form, a free SEO audit request, or a product enquiry, we collect the details you enter so that we can respond. This typically includes your name, business email, company, website, country, budget range, and your description of what you need.
How we use it: solely to reply to your enquiry, ask clarifying questions, prepare a proposal or product recommendation, and — if you become a client or customer — to deliver what you asked for.
How long we keep it: enquiries that do not lead to an engagement are retained for up to 24 months so we have context if you return, then deleted. Enquiries that become engagements are retained under the terms in section 12.
What we do not do: we do not add enquiry submitters to a marketing list automatically. If you contact us about a WordPress project, you will receive a reply about your WordPress project — not a drip sequence you did not ask for. Newsletter subscription is a separate, explicit opt-in.
4. Newsletter & Marketing Email
If you subscribe to the Market Latch newsletter, we collect your email address and, optionally, your first name. We use it to send practical SEO, AI search, WordPress, and digital marketing guidance, plus occasional notifications about new digital products, guides, or tools.
- Consent — subscription is always opt-in. We do not add people to the list because they filled in an unrelated form or bought a product.
- Unsubscribing — every email contains a one-click unsubscribe link. Unsubscribing is immediate and permanent, and requires no explanation.
- Email analytics — our email platform may record whether an email was opened and which links were clicked, so we can tell which topics are useful. You can prevent open tracking by disabling remote images in your email client.
- Retention — we keep subscriber data until you unsubscribe, plus a suppression record thereafter so that we do not accidentally re-add you.
5. Digital Product Purchases
When you purchase a digital product — a checklist, template, prompt pack, digital book, SOP, spreadsheet, or any other downloadable resource — we collect and process the following:
- Order data — your name, email address, billing country, the products purchased, the price paid, and the order reference.
- Delivery data — the download links issued to you and whether they have been accessed, so we can resolve delivery problems and detect licence abuse.
- Tax data — where required, billing country and any VAT or GST identifiers, so that the correct tax treatment is applied to your order.
Payment information. Market Latch does not collect, process, or store your card number, CVV, or bank details. Payments for digital products are handled by our third-party payment processor, which acts as merchant of record where applicable and maintains its own PCI-DSS compliant infrastructure and privacy policy. We receive only the confirmation that payment succeeded, plus the limited order data above.
Retention. Order and tax records are retained for the period required by applicable tax and accounting law (commonly six to seven years), after which they are deleted or irreversibly anonymised. Your download access is retained for as long as your licence is active.
6. Professional Service Clients
Delivering SEO, GEO, WordPress, or advertising work often requires access to systems you own. Where you grant us such access, the following applies:
- Credentials — access to your website, hosting, Google Analytics, Google Search Console, Google Ads, Meta Business Manager, or Google Business Profile is used strictly to perform the agreed work. Wherever the platform supports it, we ask for delegated access under our own account rather than your password.
- Your customers’ data — if delivering your engagement means we encounter personal data belonging to your customers (for example inside your analytics or CRM), we act as a data processor on your behalf. We process it only on your documented instructions, do not use it for our own purposes, and do not retain it beyond the engagement.
- Confidentiality — commercial information you share (revenue figures, margins, strategy, roadmaps) is treated as confidential and is not disclosed to third parties or used in marketing without your written permission.
- Off-boarding — at the end of an engagement, on request, we revoke our access, return or delete working files, and remove ourselves from your platforms
- Order data — your name, email address, billing country, the products purchased, the price paid, and the order reference.
- Delivery data — the download links issued to you and whether they have been accessed, so we can resolve delivery problems and detect licence abuse.
- Tax data — where required, billing country and any VAT or GST identifiers, so that the correct tax treatment is applied to your order.
7. Cookies
Cookies are small text files placed on your device that let a website remember your actions and preferences, and let us understand how the site is used. Market Latch uses four categories of cookie: necessary, analytics, marketing, and preference.
Necessary cookies are required for the site to function and cannot be switched off. Analytics, marketing, and preference cookies are optional and, where consent is legally required in your jurisdiction, are only set after you have given it.
A complete list of the cookies we use, their purpose, their duration, and instructions for controlling them is set out in our Cookie Policy.
8. Google Analytics
We use Google Analytics to understand how visitors find and use marketlatch.com — which pages are read, which services and products attract interest, and where the experience breaks down. This is how we decide what to build, write, and fix next.
- What it collects — pages viewed, session duration, approximate geographic location (city or region level, derived from a truncated IP address), device and browser type, and referring source.
- IP anonymisation — IP addresses are truncated before storage. We do not attempt to identify individual visitors from analytics data.
- Data controller — Google acts as a processor for this data under its own terms. Google’s own privacy practices are described at policies.google.com/privacy.
- Opting out — you can decline analytics cookies via our cookie controls, install the Google Analytics Opt-out Browser Add-on, or use a browser that blocks analytics scripts. Declining has no effect on your ability to use the site, buy a product, or work with us.
9. Marketing Technologies
Because Market Latch runs advertising campaigns — for clients and occasionally for itself — the site may use standard marketing and measurement technologies. Where they are active, they are subject to your consent.
- Conversion tracking — Google Ads and Meta conversion tags may record that a specific action (an enquiry, an audit request, a product purchase) followed an ad click, so we can measure whether our own advertising works.
- Remarketing — we may show ads to people who have previously visited marketlatch.com. This uses cookies or similar identifiers set by Google or Meta. It never means we have shared your name or email with an ad platform.
- Meta Pixel and Conversions API — where enabled, these measure ad performance. Any data sent server-side is limited to hashed identifiers for matching and is never used to build a profile of you for our own purposes.
- Tag management — Google Tag Manager may be used to load and control the above. It is a container; it does not itself collect personal data.
You can opt out of personalised advertising at Google My Ad Center and in your Meta ad preferences, and you can decline marketing cookies in our cookie controls.
10. Third-Party Services
We use a small number of reputable third-party providers to run the business. Each processes personal data only to the extent needed to perform its function, under contract, and under its own published privacy policy.
| Category | Purpose | Data involved |
|---|---|---|
| Payment processing | Taking payment for digital products; acting as merchant of record where applicable; issuing receipts and handling tax | Name, email, billing country, order details, payment method (held by the processor, not by us) |
| Digital delivery | Issuing and hosting download links for purchased products | Email, order reference, download access records |
| Web hosting | Serving marketlatch.com and storing site data | Server logs, IP addresses, form submissions |
| Email delivery | Sending transactional email (receipts, download links) and the opt-in newsletter | Email address, name, engagement metrics |
| Analytics | Measuring site usage and content performance | Truncated IP, usage data, device data |
| Advertising platforms | Measuring and optimising our own campaigns | Cookie identifiers, conversion events |
| Client platforms | Delivering service engagements (Google Ads, Search Console, Analytics, Meta Business Manager, GBP) | Access granted by the client for the engagement |
We do not sell your data. Market Latch has never sold, rented, or traded personal information, and has no intention of doing so. The only circumstances in which we would disclose your data outside the processors above are: with your explicit instruction, where legally compelled by a valid order from a competent authority, or in the event of a business transfer — in which case you would be notified in advance and the acquirer would be bound by this policy.
11. Legal Basis for Processing
Where the UK GDPR or EU GDPR applies to you, we rely on the following legal bases:
- Contract — processing needed to deliver a digital product you bought or a service engagement you commissioned, including support and delivery.
- Consent — newsletter subscription, analytics cookies, marketing cookies, and preference cookies. Consent can be withdrawn at any time without affecting the lawfulness of prior processing.
- Legitimate interests — responding to enquiries you initiated, securing the site against abuse and fraud, and understanding aggregate usage to improve our offering. We have assessed that these do not override your rights and freedoms.
- Legal obligation — retaining transaction and tax records for the period required by law.
- Conversion tracking — Google Ads and Meta conversion tags may record that a specific action (an enquiry, an audit request, a product purchase) followed an ad click, so we can measure whether our own advertising works.
- Remarketing — we may show ads to people who have previously visited marketlatch.com. This uses cookies or similar identifiers set by Google or Meta. It never means we have shared your name or email with an ad platform.
- Meta Pixel and Conversions API — where enabled, these measure ad performance. Any data sent server-side is limited to hashed identifiers for matching and is never used to build a profile of you for our own purposes.
- Tag management — Google Tag Manager may be used to load and control the above. It is a container; it does not itself collect personal data.
12. Data Protection & Retention
We keep personal data only for as long as it serves the purpose it was collected for, or as long as the law requires — whichever is longer.
| Data type | Retention period |
|---|---|
| Enquiries that did not become engagements | Up to 24 months, then deleted |
| Newsletter subscriber data | Until you unsubscribe (plus a minimal suppression record) |
| Digital product order and tax records | As required by tax law, commonly 6–7 years |
| Download access records | For the life of your product licence |
| Client engagement files and correspondence | Duration of engagement plus 24 months, unless you request earlier deletion |
| Client platform credentials and access | Revoked at the end of the engagement or on request |
| Analytics data | Per the platform’s configured retention window, in aggregated or anonymised form |
| Server logs | Short-term, for security and diagnostics only |
When a retention period ends, data is deleted or irreversibly anonymised so it can no longer be linked to you.
13. Security
No system on the internet is perfectly secure, and any business that claims otherwise is not being straight with you. What we can tell you is what we actually do:
- Encryption in transit — the entire site is served over HTTPS with a valid TLS certificate. Form submissions and downloads are encrypted in transit.
- Access control — administrative access is limited to Nadeem Alam and, where strictly necessary, individually named collaborators. Access is granted on a least-privilege basis and revoked when no longer needed.
- Authentication — multi-factor authentication is enabled on the accounts that matter: hosting, email, payment, analytics, and advertising platforms.
- Payment isolation — card data never touches our infrastructure. It is handled entirely by a PCI-DSS compliant processor.
- Maintenance — the site’s software, themes, and plugins are kept current, and security patches are applied promptly.
- Data minimisation — the most effective security control available is not holding data we do not need. We apply it deliberately.
Breach notification. If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours where required, and notify affected individuals without undue delay, describing what happened, what data was involved, and what you should do.
14. International Data Transfers
Market Latch is operated from Pakistan and serves clients and customers worldwide. Our hosting, payment, email, and analytics providers may store or process data in the United States, the European Union, the United Kingdom, or elsewhere, which means your personal data may be transferred across borders.
Where data originating in the UK or EEA is transferred to a country without an adequacy decision, we rely on appropriate safeguards — typically the Standard Contractual Clauses incorporated into our providers’ data processing agreements, together with any supplementary measures those providers implement.
15. Children's Privacy
Market Latch provides business-to-business services and professional digital products. Our website, services, and products are not directed at children and are not intended for anyone under the age of 18.
We do not knowingly collect personal information from children. We do not market to children, and we do not create content designed to appeal to them.
If you believe a child has provided us with personal information, please contact us at info@marketlatch.com and we will delete it promptly. If we become aware that we have inadvertently collected personal information from a child, we will delete it as soon as we identify it.
16. Your Rights
Depending on where you live, you have some or all of the following rights over your personal data. We honour all of them for everyone, regardless of jurisdiction — it is simpler and fairer than granting rights only where a law compels us to.
- Right of access — obtain a copy of the personal data we hold about you.
- Right to rectification — have inaccurate or incomplete data corrected.
- Right to erasure — have your data deleted, where we have no overriding legal obligation to retain it (tax records being the usual exception).
- Right to restrict processing — ask us to pause processing while a dispute or accuracy question is resolved.
- Right to data portability — receive your data in a structured, machine-readable format, or have it sent to another provider.
- Right to object — object to processing based on legitimate interests, and object to direct marketing at any time (this objection is absolute).
- Right to withdraw consent — withdraw consent for newsletters or optional cookies at any time, without affecting prior lawful processing.
- Rights regarding automated decisions — we do not carry out automated decision-making or profiling that produces legal or similarly significant effects.
- Right to complain — lodge a complaint with your local data protection authority (for example, the ICO in the United Kingdom, or your national supervisory authority in the EEA). We would appreciate the chance to resolve it first.
How to exercise a right: email info@marketlatch.com stating what you want. We respond within 30 days and do not charge a fee for reasonable requests. We may ask you to verify your identity before disclosing personal data — this protects you, not us.
17. Changes to This Policy
We may update this Privacy Policy to reflect changes in our services, our product range, our technology, or applicable law. The “last updated” date at the top of this page always reflects the current version.
For minor clarifications, the updated policy takes effect on publication. For material changes that reduce your rights or meaningfully expand how we use your data, we will give reasonable advance notice — by email where we hold your address, and by a prominent notice on the site — before the change takes effect.
18. Contact Information
Questions about this policy, about how your data is handled, or requests to exercise any of the rights above should go to:
- Data controller: Market Latch (Nadeem Alam, Founder)
- Email: info@marketlatch.com
- Phone: +92 345 131 1433
- Website: marketlatch.com/contact
- Location: Gilgit Baltistan, Pakistan (remote-first, serving clients globally)
- Response time: within one business day for general queries; within 30 days for formal data rights requests
Related policies: Terms of Service · Refund Policy · Cookie Policy