Privacy Policy

Who we are and what this policy covers

This is the privacy policy for Mabank.net, a website operated by Hartzer Consulting, LLC, 100 Kings Fort Parkway, Suite 105-334, Kaufman, TX 75142. It covers two different things that are easy to confuse, so they are separated throughout.

The first is this website: what happens when you read a page here or send us a message. The second is our hosting service: what we hold when you are a customer whose site and email we operate. The obligations are different in each case, and in the second case a great deal of the data involved is not ours at all — it belongs to the customer and to that customer's own visitors.

Questions about anything in this policy can go to agency@hartzer.com or 214.236.4378.

What this website collects

Server logs. Like essentially every web server, ours records a line for each request: the IP address making it, the date and time, the page or file requested, the response code, and the browser's self-reported user agent and referring page. These logs exist for operational reasons — diagnosing errors, identifying automated abuse, and understanding load. They are not used to build a profile of any individual.

No analytics package is currently installed on this site. There is no third-party analytics script, no advertising pixel and no social tracking tag on these pages as published. If that changes, this policy will be updated to say so before or at the time it changes.

What you send us. If you use the contact form, call, or email, we receive whatever you choose to provide — typically a name, an email address, a phone number, a domain name, and a description of your situation. We use it to answer you and, if you become a customer, to run your account. We do not add contact-form senders to a marketing list without being asked to.

Cookies. This site does not set advertising or tracking cookies. Where a cookie is used at all, it is functional — for example, keeping a session working — and it is not shared with anyone.

What we hold as a hosting provider

If you host with us, we necessarily hold or have access to more, because that is what hosting is:

• Account and billing records — your name, business name, billing address, email address, phone number, and the history of what you have been charged and have paid.
• Domain registration details — the registrant, administrative and technical contact information required by the registry for any domain we register or manage on your behalf.
• The contents of your account — your website files, your databases, and the mail stored in mailboxes at your domain.
• Server and mail logs relating to your account, including access logs for your site and delivery logs for your mail.
• Backups of the above, taken on a routine schedule.

Some of this is data about your customers rather than about you — a form submission from a visitor, an order record, an email from a member of the public. We treat that as yours. We do not analyze it, mine it, market from it, or use it for any purpose other than operating and supporting your service, restoring it after a failure, or responding to a lawful legal demand.

We do not sell your data, and who else is involved

We do not sell, rent, trade or share personal information for anyone else's marketing purposes. There is no exception to that sentence, and there is no arrangement under which a third party pays us for access to it.

Delivering the service does require a small number of other parties, described here by role because naming a specific vendor in a policy document guarantees the document goes out of date the first time one changes:

• A domain registrar. Registering a domain requires transmitting registrant contact details to the registrar and, through it, to the registry that operates the extension. This is mandatory under the rules that govern domain registration, not a choice we make.
• A payment processor. Card payments are handled by a payment provider. Full card numbers are handled by that provider rather than stored by us.
• An upstream data center or network provider. The physical servers sit in a facility operated by another company, which has the access to hardware that implies.
• A mail and connectivity chain. Email in transit passes through networks and systems belonging to others, as all email does.

Each of these has its own privacy practices. We share with them only what the function requires. Beyond these, we disclose information only with your instruction, or where we are legally required to — a court order, a subpoena, or a comparable lawful demand.

How long we keep things, and how to have them deleted

We keep account and billing records for as long as you are a customer and afterwards for the period we reasonably need them for tax, accounting and dispute-resolution purposes under Texas and federal law. We are deliberately not printing a fixed number of days here, because the honest retention period depends on the record type and on legal requirements that are not ours to shorten.

Server logs and mail logs are kept for an operational period and then rotated out. Backups are kept on a rolling cycle and older copies are overwritten in the ordinary course.

To request deletion, email agency@hartzer.com from the address on the account, or call 214.236.4378. You may ask us for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it. We will confirm your identity first, since acting on an unverified deletion request would itself be a security failure.

Two honest limits. We cannot delete records we are required to retain for tax or legal reasons until that requirement lapses. And deletion of live data does not instantly remove it from backups already taken; those copies age out on their normal cycle, and in the meantime they are not used for anything other than restoration.

Where you have rights of this kind under a state or national privacy law, we will honor the request on its merits rather than argue about whether the law technically applies to a business of this size. That is a description of what we do, not a claim of certification under any particular statute.

Children, security and changes to this policy

Children. This is a business service for business owners. It is not directed to children, and we do not knowingly collect personal information from anyone under thirteen. If you believe a child has provided us with personal information, contact us and we will delete it.

Security. We take reasonable measures to protect what we hold: access to systems is limited to people who need it, connections to this site and to customer sites are encrypted with certificates that renew automatically, and account access is protected by credentials we ask you to keep to yourself. No provider can honestly promise perfect security, and any that does is describing something that does not exist. If a breach affecting your information occurs, we will tell you what happened, what was involved, and what to do about it.

Links elsewhere. Where this site links to another website, that site's practices are its own. A link is not an endorsement of how anyone else handles data.

Changes. If this policy changes, the revised version is posted on this page and takes effect when posted. Where a change materially affects how customer information is handled, we will notify account holders by email rather than relying on you to check the page. Continuing to use the site or the service after a change means the revised policy applies.