Privacy Policy
Last updated: [DATE OF PUBLICATION]
This Privacy Policy applies to the websites operated by Mahazen Labs (PVT) Ltd, trading as Mahazen.digital ("we", "us", "our"), and to the digital services we offer through them. It explains what personal information we collect, why we collect it, who we share it with, and the choices and rights you have. By using our website, you agree to the practices described here.
1. Information We Collect
You may provide the following information directly to us:
- Contact form: name, email address, phone number, company, subject, and the content of your message.
- Newsletter: email address and, if you provide it, your full name. We use a double opt-in process, so your address is only activated after you confirm it.
- Client and project information: details you share with us when discussing or commissioning a project, including contract, billing, and delivery information.
- Administrator accounts: for staff who manage this website, a username, password (stored in protected form), and records of administrative actions.
2. Information Collected Automatically
When you visit our website, we automatically collect technical information such as your IP address, browser type, device information, pages visited, and the time and date of your visits. We use this to keep the site secure, prevent abuse (for example, limiting how often a form can be submitted), and understand how the site is used. We also use cookies and similar technologies, as described in our Cookie Policy.
3. Information We Receive From Others
We may receive information about you from third parties in limited situations, such as when a referral comes from a client or partner. We only use this information for the purposes described in this policy.
4. Why We Collect Your Information
We use your personal information to:
- respond to enquiries and provide the services you request;
- send you newsletters and updates, where you have subscribed;
- deliver, manage, and invoice projects and services;
- analyse website usage and improve our website, services, and content;
- protect the security and integrity of our website and detect fraud or misuse;
- comply with legal and regulatory obligations.
5. Who We Share Your Information With
We do not sell your personal information. We share it only where necessary:
- Service providers that host our website and database, deliver our email (including contact-form notifications), and provide analytics. They may process your information only to perform these services for us.
- Professional advisers, such as accountants, lawyers, and insurers, where needed.
- Authorities, where we are required by law, regulation, or valid legal process.
- Business transfers, if we restructure, merge, or sell part or all of our business, in which case the new owner will be bound by this policy.
6. International Data Transfers
Some of our service providers are located outside your country of residence, including in [COUNTRIES OF SERVICE PROVIDERS]. Where we transfer personal information internationally, we take steps to ensure it receives an adequate level of protection, such as contractual safeguards with the recipient.
7. Your Choices
You can unsubscribe from our newsletter at any time using the link in any newsletter email. You can also choose not to provide certain information, although some features, such as the contact form, will then not work. You can manage cookies through the controls described in our Cookie Policy.
8. Legal Basis for Processing
Depending on where you live, we rely on one or more of the following legal bases:
- Consent, for newsletters and non-essential cookies. You can withdraw consent at any time.
- Contract, where processing is needed to provide a service you have requested or to take steps before entering into a contract.
- Legitimate interests, such as running and securing our website, responding to enquiries, and improving our services, provided these do not override your rights.
- Legal obligation, where we must retain or disclose information to comply with the law.
9. Security of Your Information
We use reasonable technical and organisational measures to protect your personal information, including encrypted connections (HTTPS), access controls for administrator accounts, rate limiting on public forms, and restricted access to our database. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
10. Your Rights and How Long We Keep Your Data
Subject to applicable law, you have the right to:
- access the personal information we hold about you;
- ask us to correct inaccurate or incomplete information;
- ask us to delete your information;
- ask us to restrict or object to certain processing;
- withdraw consent where we rely on it;
- request a copy of your information in a portable format.
To exercise these rights, email info@mahazen.digital. We may need to verify your identity first. We will respond within [X] days.
We keep contact enquiries for [X] months after we last communicated with you, newsletter subscriptions until you unsubscribe, and project records for as long as required by our legal and accounting obligations. When information is no longer needed, we delete or anonymise it.
11. Third-Party Services and Links
Our website may link to third-party websites and use third-party services, such as Google Analytics. These services have their own privacy policies, which we do not control. We recommend reviewing them before providing them with any personal information. For example, Google's privacy policy is available at policies.google.com/privacy.
12. Scope of This Policy
This policy covers personal information collected through our website and our direct communications with you. It does not cover services or products that a client has separately contracted with us to build or host for their own users, which are governed by the relevant contract and the client's own privacy notice.
13. Changes to This Policy
We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised "last updated" date. Where a change is significant, we will provide a more prominent notice. Continued use of our website after a change means you accept the updated policy.
14. Complaints
If you have a concern about how we handle your personal information, please contact us first so we can try to resolve it. You also have the right to lodge a complaint with the data protection authority in your country.
15. Data Controller and Contact Us
The data controller for personal information collected through this website is Mahazen Labs (PVT) Ltd. Registered address: [REGISTERED ADDRESS]. For privacy questions or requests, email info@mahazen.digital.
16. Children's Privacy
Our website and services are intended for adults and businesses. We do not knowingly collect personal information from children under 13 (or the minimum age required in your country). If we learn that we have collected such information, we will delete it promptly. If you believe a child has provided us with personal information, please contact us at the address above.