Last updated: April 2026

Maheer Digital (“we”, “us”, “our”) is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit maheerdigital.co.uk or contact us through our website.

We are registered in England and Wales and operate in full compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Maheer Digital is the data controller for personal data collected through this website. If you have any questions about this policy or how we handle your data, please contact us at:

Email: [email protected]
Website: maheerdigital.co.uk

2. What Data We Collect

We collect and process the following categories of personal data:

Contact form submissions: When you complete a contact or enquiry form, we collect your name, email address, phone number (if provided), company name (if provided), and the content of your message.
Analytics data: We use Google Analytics 4 (GA4) to collect anonymised data about how visitors use our website. This includes pages visited, time on site, referral source, device type, and approximate geographic location (country/region level). IP addresses are anonymised.
Cookie data: Our website uses cookies to improve your experience and to collect analytics information. Please see our Cookie Policy for full details.
Email correspondence: If you email us directly, we will retain the content of that correspondence and your contact details.

3. How We Use Your Data

We use your personal data for the following purposes:

To respond to enquiries and communicate with prospective clients
To provide and manage our services to clients
To improve the performance and usability of our website
To comply with legal obligations
To send service-related communications where you have engaged with us

4. Legal Basis for Processing

We process your personal data on the following legal bases under UK GDPR:

Consent (Article 6(1)(a)): Where you have given us explicit consent to process your data — for example, by agreeing to receive marketing communications or by accepting non-essential cookies.
Legitimate Interests (Article 6(1)(f)): Where processing is necessary for our legitimate business interests, such as responding to enquiries, improving our website, and maintaining business records. We have carried out a Legitimate Interests Assessment (LIA) and are satisfied that our interests are not overridden by your rights and freedoms.
Contract (Article 6(1)(b)): Where processing is necessary to perform a contract with you, or to take pre-contractual steps at your request.
Legal Obligation (Article 6(1)(c)): Where processing is necessary to comply with a legal obligation, such as tax and accounting requirements.

5. Third-Party Sharing

We do not sell, rent, or trade your personal data. We may share your data with the following trusted third parties only where necessary:

Google Analytics (Google LLC): We use GA4 to analyse website traffic. Data is processed in accordance with Google’s privacy policy. IP anonymisation is enabled. Google may transfer data to the United States under appropriate safeguards. You can opt out of Google Analytics tracking via the Google Analytics Opt-out Browser Add-on.
Hosting provider: Our website is hosted on infrastructure provided by a third-party hosting provider. Your data may be stored on servers located within the UK or European Economic Area (EEA).
Email service providers: We may use third-party email platforms to manage communications. These providers are required to handle your data in compliance with applicable data protection law.
Professional advisers: We may share data with solicitors, accountants, or other professional advisers where legally required.

All third parties are required to maintain appropriate security measures and to process your data only on our instructions.

6. Your Rights Under UK GDPR

You have the following rights in relation to your personal data:

Right of Access: You have the right to request a copy of the personal data we hold about you (a Subject Access Request).
Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
Right to Erasure (“Right to be Forgotten”): You have the right to request that we delete your personal data in certain circumstances, such as where the data is no longer necessary for the purpose it was collected.
Right to Data Portability: Where processing is based on consent or contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
Right to Restriction of Processing: You have the right to request that we restrict the processing of your personal data in certain circumstances.
Right to Object: You have the right to object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we can demonstrate compelling legitimate grounds.
Rights Related to Automated Decision-Making: We do not use automated decision-making or profiling that produces legal or similarly significant effects.

To exercise any of these rights, please contact us at [email protected]. We will respond within one calendar month. We may need to verify your identity before processing your request.

7. Data Retention

We retain personal data only for as long as necessary for the purposes outlined in this policy or as required by law:

Contact form enquiries: Retained for up to 2 years from the date of last contact, unless a business relationship develops.
Client records: Retained for 6 years following the end of the client relationship, in line with the Limitation Act 1980 and HMRC requirements.
Financial and accounting records: Retained for a minimum of 6 years as required by HMRC.
Analytics data: Google Analytics data retention is set to 14 months.
Email correspondence: Retained for up to 3 years unless a longer retention period applies.

8. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include SSL/TLS encryption for data in transit, access controls, and regular security reviews.

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the Information Commissioner’s Office (ICO) within 72 hours and inform affected individuals where required.

9. Cookies

Our website uses cookies. For full details on the cookies we use, their purpose, and how to manage your preferences, please see our Cookie Policy.

10. Links to Other Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and we encourage you to read their privacy policies.

11. Children’s Privacy

Our website and services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will take steps to delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

13. How to Make a Complaint

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection:

Website: ico.org.uk
Phone: 0303 123 1113
Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

However, we would appreciate the opportunity to address your concerns first. Please contact us at [email protected] before escalating to the ICO.