MCAKey’s privacy policy explains what personal data we collect, why we collect it, how we use it, and your rights over it — including rights under the EU General Data Protection Regulation (GDPR). MCAKey does not sell your data, does not use advertising pixels, and collects only what is necessary to operate our business and serve our customers.
Last updated: May 2026 · MCAKey LLC
MCAKey LLC ("MCAKey," "we," "us," or "our") operates mcakey.com. Questions about this privacy policy? Contact us at [email protected].
1. Who We Are
Data Controller: MCAKey LLC 1001 S. Main St. STE 500, Kalispell, Montana 59901, United States Email: [email protected] · Phone: +1 716 306 4665
2. What Data We Collect
Data you provide directly
When placing an order: full name, email address, billing address, phone number (optional), payment method details (processed by PayPal or other providers — we never store card numbers).
When contacting support: name, email, message content, and order reference.
When subscribing to our newsletter: email address and subscription preferences.
Data collected automatically
When you visit mcakey.com, we and our service providers collect: IP address, browser type, operating system, pages visited, time on page, referring URL, and cookie data. This is collected via Google Analytics 4 and Cloudflare for performance monitoring and security — not for advertising.
3. How We Use Your Data
Order fulfillment — to process payment, deliver your key, and send confirmation and invoice. Legal basis: contract performance.
Customer support — to respond to questions and process replacements. Legal basis: contract performance and legitimate interest.
Fraud prevention and security — to detect and block abuse. Legal basis: legitimate interest.
Newsletter — only if you have subscribed. Legal basis: consent. Unsubscribe at any time via the link in any email.
Analytics — to understand site usage and improve performance. Legal basis: legitimate interest (with cookie consent where required).
Legal compliance — for tax and accounting obligations. Legal basis: legal obligation.
We do not use your data for automated decision-making or profiling.
4. How Long We Keep Your Data
Order data: 7 years (tax and accounting obligations). Support communications: 2 years after last interaction. Newsletter subscriptions: until you unsubscribe, then removed within 30 days. Analytics data: retained in aggregated, anonymized form.
5. Who We Share Your Data With
We do not sell your data. We share it only with service providers under appropriate data processing agreements:
PayPal — payment processing
Cloudflare — security and DNS
Google Analytics 4 — anonymized website analytics
WP Mail SMTP / email delivery provider — transactional emails
Newsletter plugin — subscription management (data stored on our server, not shared with ad platforms)
Live chat provider (Tidio / Chatwoot) — support chat transcripts
Functional: Remember currency and language preferences.
Analytics: Google Analytics 4 aggregate usage tracking. Does not identify you personally.
We do not use advertising cookies, retargeting pixels, or cross-site tracking. Manage preferences via our cookie consent tool (CookieYes) or your browser settings.
7. Your Rights
Depending on your location, you may have the right to access your data, correct inaccurate data, request deletion, restrict processing, receive your data in portable format, object to processing, and withdraw consent at any time.
EU/EEA and UK residents have these rights under the GDPR and UK GDPR respectively. To exercise any right, email [email protected]. We will respond within 30 days. You may also lodge a complaint with your national data protection authority.
8. Data Security
All data transmitted between your browser and our site is encrypted via SSL/TLS. The site is protected by Cloudflare. Access to customer data is restricted to authorized personnel. Payment data is processed by PCI-DSS compliant providers. In the event of a breach affecting your rights, we will notify affected users and relevant authorities in accordance with applicable law.
9. International Data Transfers
MCAKey is based in the United States. If you are in the EU, EEA, or UK, your data may be transferred to and processed in the US. We rely on appropriate safeguards — including Standard Contractual Clauses where required. Our service providers (Google, Cloudflare) maintain their own transfer mechanisms.
10. Children's Privacy
Our products are available to users under 18 only with parental or guardian consent. We do not knowingly collect personal data from children under 13 without verified parental consent. Contact [email protected] if you believe a child has provided data without appropriate consent.
11. Changes to This Policy
We may update this privacy policy from time to time. We will revise the "last updated" date at the top of this page. For significant changes, we will notify active customers by email where possible. Continued use of mcakey.com constitutes acceptance of updates.
12. Contact
MCAKey LLC · [email protected] · +1 716 306 4665 · 1001 S. Main St. STE 500, Kalispell, Montana 59901, US
