Privacy Policy

Mavorena designs and builds websites for small and growing businesses. We collect only the information needed to answer your inquiry, deliver work you have asked for, and keep this website functioning securely. We do not sell personal information, and we do not share it for advertising purposes.

This website is operated by Mavorena Digital Strategies ("Mavorena", "we", "us"). We act as the controller of the personal information described here.

Privacy contact: alex@mavorena.com

Information you give us

• Identity and contact details: your name, business name, role, email address and, if you choose to provide it, your phone number.
• Project details: your industry, business stage, goals, existing website, scope, feature interests, budget range and timing.
• Anything you write to us in a message, email or scheduled conversation.

Information collected automatically

• Basic technical data needed to serve pages securely, such as IP address, browser type and requested URL, held in short-lived server logs.
• Anti-abuse signals: we record a temporary, coarse rate-limiting record when forms are submitted so the site cannot be flooded with automated messages.

We do not ask for and do not want sensitive information — no government identifiers, payment card numbers, health details or login credentials. Please do not send these through the forms on this site.

• To reply to your inquiry and prepare an accurate proposal or scope.
• To deliver, support and maintain work you have engaged us for.
• To keep records of agreements, invoices and correspondence as required for legitimate business and tax purposes.
• To protect the website against spam, abuse and security incidents.
• To improve our own services, using aggregated and non-identifying observations only.

We do not use your information to build advertising profiles, and we do not run behavioural advertising on this site.

Where privacy law such as the GDPR or UK GDPR applies, we rely on the following bases:

• Consent — when you submit an inquiry form and confirm we may contact you, or when you accept nonessential cookies.
• Contract — when processing is necessary to prepare or perform an agreement with you.
• Legitimate interests — to secure this website, prevent abuse and keep proper business records, balanced against your privacy.
• Legal obligation — where retention or disclosure is required by law.

You may withdraw consent at any time; this does not affect processing already carried out.

This website is built to work without tracking. Only strictly necessary storage is used by default, and no analytics or marketing cookies are loaded unless you accept them. Full detail is in the Cookie Policy.

We share personal information only where it is necessary, and only with providers bound to protect it. Categories include hosting and content delivery, email delivery, and, if enabled, privacy-respecting analytics. We may also disclose information where legally required, or to establish or defend legal claims.

We never sell personal information, and we never trade it for advertising value.

• Inquiries that do not become projects: kept up to 24 months so we can recognise your business if you return, then deleted.
• Client project records: kept for the duration of the engagement and for as long as needed for legal, accounting and warranty purposes.
• Server and anti-abuse logs: short-lived and routinely rotated.

You can ask us to delete your inquiry sooner and we will do so unless the law requires us to keep it.

Data is transmitted over encrypted connections, form submissions are validated and sanitised on the server, access to inquiry records is limited to people who need it, and we review our providers' security posture. No system is perfectly secure, so we also practise data minimisation: the less we hold, the less there is to lose.

Depending on where you live, you may have the right to:

• Access the personal information we hold about you.
• Correct information that is inaccurate or incomplete.
• Delete your information, subject to legal retention requirements.
• Restrict or object to certain processing.
• Receive a portable copy of information you provided to us.
• Withdraw consent, including consent to be contacted.
• Opt out of the sale or sharing of personal information — we do neither, so there is nothing to opt out of.
• Be free from discrimination for exercising any of these rights.

To make a request, contact us using the details in section 14. We will verify your request and respond within the timeframe required by applicable law, normally within 30 days. If you are in the EEA or UK, you may also complain to your local supervisory authority.

This website and our services are directed at businesses, not children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided information, contact us and we will delete it.

Our providers may process data in countries other than yours. Where information leaves the EEA or UK, we rely on recognised safeguards such as adequacy decisions or standard contractual clauses, together with technical protections including encryption in transit.

We may update this policy as our services or legal obligations change. The effective and last-updated dates shown alongside this page always reflect the current version, and material changes will be highlighted on this page.

Questions, requests or complaints about privacy are welcome and are answered by a person.

Email: alex@mavorena.com

Or use the contact form.