Privacy Policy

Note for the site owner: This is a thorough template based on standard UK GDPR / EU GDPR requirements. Replace the bracketed placeholders with your details and have it reviewed before relying on it as your final legal policy. Remove this note before publishing.

This Privacy Policy explains how Mahesh PK ("I", "me", "my") collects, uses, and protects personal data when you visit maheshpk.com (the "Site") or contact me. I am committed to protecting your privacy and handling your data transparently and lawfully under the UK General Data Protection Regulation (UK GDPR), the EU GDPR, and the Privacy and Electronic Communications Regulations (PECR).

Who I am

The data controller for this Site is Mahesh PK. If you have any questions about this policy or your data, contact me at mahesh@maheshpk.com.

[Add your business address / country of operation here if required for your jurisdiction.]

What data I collect

• Information you give me directly. When you submit the contact form, I collect your name, email address, company name, the service you're interested in, and any message you send.
• Information collected automatically. If you consent to analytics cookies, I collect anonymised usage data such as pages visited, time on site, approximate location (country/region), device and browser type, and how you arrived at the Site.
• Marketing data. If you consent to marketing cookies, advertising tools may collect data to measure ad performance and show relevant content.

How I use your data

• To respond to your enquiry and communicate with you about my services.
• To understand how the Site is used and to improve it (analytics).
• To measure the effectiveness of any advertising (marketing), where you have consented.
• To meet legal or regulatory obligations.

Legal bases for processing

I rely on the following legal bases under GDPR:

• Consent — for analytics and marketing cookies, and for sending you any marketing communications. You can withdraw consent at any time.
• Legitimate interests — to respond to enquiries you send me and to run and secure the Site, balanced against your rights.
• Legal obligation — where I must process data to comply with the law.

Cookies and tracking

The Site uses cookies and similar technologies. Non-essential cookies (analytics and marketing) only load after you give consent via the cookie banner. For full details, see my Cookie Policy.

Who I share data with

I do not sell your personal data. I share it only with service providers that help me run the Site and my business, including:

• Netlify — Site hosting and contact form processing.
• Google (Analytics & Tag Manager) — Site analytics, where you consent.
• Zoho Mail — email correspondence.

These providers process data on my behalf under their own privacy terms. Some may transfer data outside the UK/EU; where they do, appropriate safeguards (such as Standard Contractual Clauses) are intended to apply.

How long I keep your data

I keep contact enquiries for as long as needed to respond and for a reasonable period afterwards in case you get back in touch, then delete them. Analytics data is retained according to the settings in Google Analytics. [Adjust retention periods to your actual practice.]

Your rights

Under GDPR you have the right to access your data, correct it, delete it, restrict or object to its processing, request portability, and withdraw consent at any time. To exercise any of these, email mahesh@maheshpk.com. You also have the right to complain to a supervisory authority — in the UK, the Information Commissioner's Office (ICO) at ico.org.uk.

Data security

I take reasonable technical and organisational measures to protect your data. However, no method of transmission over the internet is completely secure, and I cannot guarantee absolute security.

Changes to this policy

I may update this policy from time to time. The "last updated" date at the top reflects the latest version.

Contact

For any privacy questions, email mahesh@maheshpk.com.