Privacy Policy

Maha Media CC ("I", "me", "my") is committed to protecting your privacy. This policy explains what personal data I collect through mahamediacc.com, why I collect it, how it's used, and what rights you have over it. It's written to comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who I am (the data controller)

Maha Media CC is a UK-based, sole-trader creative practice offering video editing, motion design and digital illustration services. For the purposes of data protection law, Maha Media CC is the "data controller" of the personal data described in this policy.

Contact for any privacy query: admin@mahamediacc.com

2. What data I collect

The only personal data collected through this website is what you choose to submit via the contact form:

• Your name
• Your email address
• Optionally, a phone number or social media handle
• The message/project details you write
• The date and time of submission

I do not use analytics tools, advertising pixels, or any script that tracks you across the site or across other websites. See the Cookie Policy for full detail on cookies.

3. Why I collect it and my lawful basis

I process this data to respond to your enquiry and, if we proceed, to deliver creative services to you. My lawful bases under UK GDPR are:

• Consent — you tick a consent checkbox before submitting the contact form.
• Legitimate interests — replying to enquiries and running my business, in a way that does not override your rights and freedoms.
• Contract — where we enter into a client engagement, processing your data to perform that contract (see Client Terms).

4. How your enquiry is handled

Contact form submissions are validated and sanitised on the server, then emailed directly to my business inbox. Submissions are not stored in a database — this website has no database. A honeypot field and basic spam filtering are used to reduce automated/bot submissions; legitimate enquiries are unaffected.

5. Who your data is shared with

I do not sell, rent or trade your personal data. Your enquiry is sent to my own email account. Where I use third-party tools to run my business (for example, an email provider, invoicing, or file-sharing service to receive footage/briefs), those providers may process your data as a processor acting on my instructions, under their own data protection safeguards. I do not currently use any third-party marketing, analytics or advertising services on this website.

6. International transfers

Some service providers I use (for example, email hosting) may process data on servers located outside the UK. Where this happens, I only use providers that offer appropriate safeguards recognised under UK data protection law (such as the UK's international data transfer framework).

7. How long I keep your data

Enquiry emails are kept for as long as reasonably necessary to respond to you and, if we work together, for the duration of the project plus a reasonable period afterwards for accounting, warranty and legal purposes (typically up to 6 years, in line with UK tax record-keeping requirements). If your enquiry doesn't lead to a project, I aim to delete it within 12 months.

8. Your rights

Under UK GDPR, you have the right to:

• Access the personal data I hold about you
• Correct inaccurate or incomplete data
• Request erasure of your data ("right to be forgotten")
• Restrict or object to processing
• Request a copy of your data in a portable format
• Withdraw consent at any time, where consent is the legal basis

To exercise any of these rights, email admin@mahamediacc.com. I aim to respond within one month.

9. Complaints

If you're unhappy with how your data has been handled, you can complain to the UK's data protection regulator, the Information Commissioner's Office (ICO), at ico.org.uk or by calling 0303 123 1113.

10. Children's data

This website and its services are not directed at children, and I do not knowingly collect personal data from anyone under 13.

11. Changes to this policy

I may update this policy from time to time, for example if the services or tools used by this website change. The "last updated" date at the top of this page will always reflect the latest version.