Last updated: 12 August 2025

This policy explains what personal information Murrett Family Holding LLC collects through this website, why we collect it, and what we do with it. It applies to the public pages of this site and to the portal, which is protected by password.

Murrett Family Holding LLC is a Delaware limited liability company with its principal office at 1201 N Market St, Wilmington, Delaware (DE) 19801, United States. For visitors in the United Kingdom and the European Economic Area we are the data controller for the information described below. You can reach us about anything in this policy at contact@murrett-llc.com

The public pages of this site do not have forms, accounts or newsletters, and we do not use advertising or tracking technology on them.

When you visit, our hosting provider records the standard technical information that any web server records: your IP address, the pages you request, the date and time, and the type of browser and device you are using. We use this to keep the site running, to keep it secure and to understand roughly how many people visit. We do not try to identify you from it.

The portal is available by invitation only. If we have given you access, we hold your name, your email address, the organization you represent, and the role we have assigned to your account.

Each time you sign in we record your email address and the date and time. We keep this record so that we know who has accessed confidential material and when.

The portal uses a session cookie to keep you signed in. It is strictly necessary for the portal to work and is deleted when you sign out or close your browser.

If you email us, we will keep your message and our reply for as long as we need them to deal with whatever you have raised and to keep a record of our correspondence.

We use the information above to operate the site and the portal, to keep both secure, to control who can see confidential material, to respond to you, and to comply with our legal obligations. We do not use it for marketing, profiling or advertising.

We use outside providers to host the site, to run the portal's login system, and to handle email. They process information on our behalf and under our instructions. These providers are based in the United States.

We will disclose information if we are required to by law, by a court, or by a regulator in any country where we operate, or if it is necessary to protect our rights or the rights of others.

We do not sell personal information, and we do not share it with anyone for advertising purposes.

Server logs are kept for 14 days and then deleted.

Portal account details are kept for as long as your access remains active. When access is withdrawn we delete the account and keep the record of when you signed in for 10 years.

Correspondence is kept for as long as we need it for the matter concerned, and afterwards only where we have a legal or regulatory reason to retain it.

Access to personal information is limited to the people who need it. The site and the portal are served over encrypted connections and portal access is protected by individual passwords. No system is completely secure, and we cannot guarantee that information will never be accessed without authorization, but we take reasonable steps to prevent it.

A number of US states, including California, Virginia, Colorado, Connecticut, Utah, Texas and Oregon, give their residents rights over personal information held by businesses. Where those laws apply to us, you may have the right to know what personal information we hold about you, to have it corrected or deleted, to receive a copy of it, and to opt out of the sale or sharing of your personal information or its use for targeted advertising or profiling.

We do not sell personal information, we do not share it for behavioral advertising that tracks people across other websites, and we do not use it for targeted advertising or for profiling that produces legal or similarly significant effects. Because of this there is nothing to opt out of, and we do not provide a "Do Not Sell or Share" link. We do not collect sensitive personal information through this site.

The site does not respond to browser "Do Not Track" signals because we do not track visitors across other sites. We honor Global Privacy Control signals to the extent they apply to us.

If we ever decline a request you make under a state privacy law, you may appeal by replying to our response. We will not treat you differently for exercising any of these rights.

Where UK or EEA data protection law applies, our legal basis for using your information is our legitimate interest in running a secure website and controlling access to confidential material, and, where we have a relationship with you, the need to manage that relationship. Where the law requires us to keep records, we rely on that legal obligation.

Because our providers are in the United States, information about UK and EEA residents is transferred there. We rely on the safeguards permitted under UK and EU law for those transfers, including standard contractual clauses and the UK International Data Transfer Addendum where they apply.

You have the right to ask us what personal information we hold about you, to have it corrected or deleted, to object to or restrict how we use it, and to receive a copy of it. You also have the right to complain to the Information Commissioner's Office in the UK, or to your local supervisory authority in the EEA.

To exercise any of the rights above, wherever you live, email [privacy email address]. We may need to confirm your identity before we act on a request. We will respond within the time required by the law that applies to you, and in any case within 45 days.

This site is not intended for anyone under 18 and we do not knowingly collect information from children.

If we change this policy we will update the date at the top of this page. Where the change is significant and we have your contact details, we will tell you directly.