Privacy policy

We collect the minimum we need to answer you and to keep the site working. We do not sell personal data, we do not run advertising trackers, and analytics stays off unless you turn it on.

Mahdev Labs Ltd is the data controller for this website. Registered office: 32A City Road, London, England, EC1V 2NX. Data protection contact: hello@mahdev.dev.

When you email us: your name, email address and whatever you choose to tell us about your project. Lawful basis: legitimate interests (responding to a business enquiry) and, where an engagement follows, performance of a contract.

When you visit: standard server and security log data such as IP address, user agent and pages requested, kept briefly to keep the service secure and available. Lawful basis: legitimate interests.

If you allow analytics: aggregated usage measurement. Lawful basis: consent, which you can withdraw at any time from the cookie settings link in the footer.

One essential cookie remembers your cookie choice. No analytics or measurement cookie is set unless you choose "Allow analytics".

Enquiries that do not become projects: up to 24 months, then deleted. Project correspondence: for the life of the engagement plus 6 years, to meet contractual, tax and limitation-period obligations. Server logs: up to 90 days.

Only the processors we need to operate: hosting, email delivery and, if enabled, analytics. They act on our instructions under written terms. We do not sell or rent personal data and we do not share it for advertising.

Where a processor is outside the UK or EEA, transfers rely on adequacy regulations or the UK International Data Transfer Addendum to the EU Standard Contractual Clauses.

When we build or operate software for a client, that client is the controller of their end-user data and we act as their processor under the data-processing terms in the signed agreement. We do not use client or end-user data to train models for anyone else.

Under the UK GDPR and Data Protection Act 2018 you can ask for access, correction, erasure, restriction, portability, and you can object to processing based on legitimate interests. Email hello@mahdev.dev and we will respond within one month.

If you are unhappy with our response you can complain to the Information Commissioner’s Office at ico.org.uk.

This site is aimed at businesses. We do not knowingly collect personal data from anyone under 16.

We use encryption in transit, least-privilege access and reputable infrastructure providers. No system is perfectly secure, and we will tell affected people and the ICO about a qualifying breach within the legally required time.

If this policy changes materially, we will update the date below and, where the change matters to you, say so on the site.