Privacy Policy.

1. Who We Are

Mavan Services Ltd is a UK company providing software engineering services to UK businesses. For the purposes of UK data protection law, we act as a data controller in respect of the personal data described in this policy.

If you need to contact us about privacy matters, email info@mavanservices.co.uk.

2. Personal Data We Collect

We collect only the personal data we need to operate our business and deliver our services:

• Prospect & enquiry data — name, business email, business phone, company name, the content of your enquiry. Provided directly by you (e.g. when you email us).
• Client contact data — names, roles, business contact details and engagement-related correspondence of the people we work with at client organisations.
• Website visitor data — limited technical information (IP address, browser, pages viewed, timestamps) collected through standard server logs and any analytics described in section 11.

Where we process personal data on behalf of a client (for example, while building or operating a system for them), we do so as a data processor, under the client's own privacy notice and a separate Data Processing Addendum where required.

3. Purposes & Legal Basis

Purpose	Categories of data	Legal basis (UK GDPR)
Responding to enquiries and pre-contract discussions	Prospect & enquiry data	Legitimate interests; steps prior to entering a contract
Delivering services to clients	Client contact data	Performance of a contract
Operating and securing this website	Website visitor data	Legitimate interests (security, fraud prevention, service operation)
Statutory and tax record-keeping	Client contact and engagement data	Legal obligation
Occasional service-related updates to existing clients	Client contact data	Legitimate interests

4. Sharing of Personal Data

We do not sell personal data. We share personal data only where necessary, and only with parties who provide appropriate protections, including:

• Cloud hosting and infrastructure providers (e.g. AWS, Azure, Google Cloud) used to operate our internal systems and client deliverables.
• Business support tools (e.g. email, communications, accounting, document storage) used to run Mavan Services Ltd.
• Professional advisors (legal, accounting) where genuinely required.
• Regulators, courts or law enforcement where required by law.

5. International Transfers

Some of our providers may process data outside the UK. Where that occurs, we rely on appropriate safeguards recognised under UK data protection law (for example UK Addendum to the EU Standard Contractual Clauses, or transfers to jurisdictions deemed adequate by the UK Government).

6. Retention

We keep personal data only for as long as needed:

• Enquiry data with no contract: typically up to 24 months from last contact.
• Client records: for the duration of the engagement and for as long as required by tax / statutory obligations (generally at least 6 years).
• Server logs and short-lived technical data: typically up to 90 days.

7. Your Rights (UK GDPR)

Subject to applicable conditions and exemptions, you have the right to:

• Be informed about how your personal data is used.
• Access the personal data we hold about you.
• Have inaccurate personal data corrected.
• Have personal data erased in certain circumstances.
• Restrict our processing of your personal data.
• Object to processing carried out on the basis of legitimate interests.
• Data portability where the processing is based on consent or contract and carried out by automated means.
• Withdraw any consent you have given, at any time (without affecting the lawfulness of prior processing).
• Not be subject to solely automated decisions producing legal or similarly significant effects on you.

To exercise any of these rights, email info@mavanservices.co.uk.

8. Security

We apply appropriate technical and organisational measures to protect personal data, including access controls, encryption in transit, hardened cloud configurations, supplier vetting and routine review. No system is perfectly secure, but we treat personal data with the seriousness it deserves.

9. Complaints

If you believe we have not handled your personal data properly, please contact us first so we can put it right. You also have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner's Office (ICO) — ico.org.uk.

10. Cookies

This website uses a small number of cookies. We do not use advertising or cross-site tracking cookies.

Cookie	Purpose	Duration
Session	Maintaining session state during a visit (where applicable).	Session
Cookie consent	Remembering your choices about cookie use.	Up to 12 months
Analytics (if enabled)	Anonymised aggregate site usage measurement.	Up to 24 months

You can control cookies through your browser settings. Disabling cookies may affect the functioning of parts of the site.

11. Analytics

Where we use a website analytics provider, we configure it to minimise the personal data collected (for example, IP anonymisation), and we do not use it to build advertising profiles about individuals.

12. Children

Our services are aimed at businesses. We do not knowingly collect personal data from children. If you believe a child's personal data has been provided to us, please contact us and we will delete it.

13. Changes to this Policy

We may update this Privacy Policy from time to time. Material changes will be highlighted on this page. The "last updated" date at the foot of the page will reflect the latest revision.

14. Contact

Questions about this Privacy Policy can be sent to info@mavanservices.co.uk.