Privacy policy

This policy explains how personal data is handled on the public madatech.me website. The client portal has its own separate privacy notice.

1. Who we are and what this policy covers

Madatech (Madatech LLC, VAT ID: 02273607) — "Madatech", "we", "us" — is responsible for the personal data described here. We collect it through our public website at madatech.me and its subdomains used for marketing and information.

It covers only the public website. It does not cover:

• The client portal. If you are given access to the portal, a separate privacy notice is provided to you at sign-up and governs the data processed there.
• Services we deliver under a signed contract, which are governed by that contract and its data processing terms.
• Third-party websites we link to. Their privacy practices are their own.

We are the controller of the personal data described here.

Contact for privacy matters: support@madatech.me — No Data Protection Officer or representative has been appointed.

2. The short version

Apart from the information you choose to send us through our contact form, our service / consultation request forms (including bookings made through our scheduling page), and pseudonymous website analytics, we do not collect personal data from visitors. We do not run advertising, we do not sell or rent personal data, and we do not track you across other websites.

3. What we collect and why

3.1 Information you give us

Contact form. We collect the email address, the subject line, and the message you submit. We use it only to read and respond to your enquiry.

Service / consultation request form. If you ask us to scope a piece of work, we collect: company name, industry, company website (optional), your name, job title, email address, phone number, the services you are interested in, the details you provide, and whether a purchase is planned. We use it to understand your request, prepare for a call, and reply.

Consultation bookings. If you book a call through our scheduling page, you provide your name, email address, and any details you add to the booking. That page is operated by Microsoft (Microsoft Bookings) on our behalf; the information reaches us as the meeting organiser and is also processed by Microsoft as part of running the service.

Direct email. If you email info@madatech.me or support@madatech.me, we hold that correspondence to deal with your request.

We do not require you to create an account to use the public website.

3.2 Information collected automatically

Website analytics. We use Microsoft Clarity to understand how the site is used. This produces aggregated and pseudonymous information such as pages viewed, the site or search that referred you, approximate location (country and city, derived from a truncated or anonymised IP address — we do not store your full IP for analytics), and device and browser type, plus on-page interactions such as clicks on key buttons. This analytics is configured not to track you across other websites and is not used for advertising or profiling. Microsoft Clarity uses analytics cookies and is configured to load them only after the visitor provides consent through Madatech's custom consent banner.

Spam and abuse prevention. Our forms include a hidden "honeypot" field that is invisible to you; it holds no data unless an automated bot fills it in, which lets us discard that submission. When our anti-bot check (Cloudflare Turnstile) is enabled, Cloudflare receives your IP address and browser signals to distinguish humans from automated traffic. Cloudflare acts as our service provider for this purpose.

Server logs. Our hosting infrastructure records standard technical information for each request — IP address, user-agent string, date and time, and the URL requested — so we can keep the site secure and available and investigate errors or abuse. These logs are kept for a short period (see section 7) and are not used to build profiles of visitors.

3.3 What we do not collect

We do not knowingly collect special-category data (such as health, political or religious information), we do not carry out automated decision-making that produces legal or similarly significant effects, we do not use advertising or cross-site tracking technologies, and the public website is not directed at children (see section 10).

4. Legal bases for processing

Where the EU or UK GDPR applies, we rely on the following bases under Article 6(1):

Purpose	Legal basis
Responding to a contact-form message or a direct email	Our legitimate interests in answering people who contact us (Art. 6(1)(f)); where your message concerns a possible engagement, steps prior to entering a contract at your request (Art. 6(1)(b))
Handling a service / consultation request and arranging a call	Steps prior to entering a contract at your request (Art. 6(1)(b)); our legitimate interests in business development (Art. 6(1)(f))
Website analytics	Your consent where consent is legally required for the technology used (Art. 6(1)(a)); otherwise our legitimate interests in understanding and improving the site (Art. 6(1)(f))
Spam prevention, security and server logs	Our legitimate interests in protecting the website and our visitors (Art. 6(1)(f)); compliance with a legal obligation where one applies (Art. 6(1)(c))

Where we rely on legitimate interests, we have weighed those interests against your rights and freedoms. Where we rely on consent, you can withdraw it at any time (see section 8) without affecting processing that already took place.

Under the Republic of Armenia's Law on Protection of Personal Data, processing is carried out on the equivalent bases of your consent, the performance of a contract or pre-contractual steps, and our legitimate interests, as set out above.

5. Cookies and similar technologies

Category	Purpose	Consent needed?
Strictly necessary	Security tokens that protect form submissions against cross-site request forgery, and the anti-bot check when enabled. Set only when you interact with a form.	No — required for the site to work
Analytics	Microsoft Clarity cookies: _clck, _clsk, CLID, ANONCHK, MR, MUID, and SM.	Yes, where required by law — loaded only after you agree

A custom consent banner is used for non-essential Microsoft Clarity analytics cookies. Visitors can reject analytics cookies and can later change or withdraw their choice through the site's cookie/privacy settings.

You can block or delete cookies through your browser settings; the strictly necessary items above are only set in response to your actions and are not used for tracking.

6. Who we share information with

We share personal data only with:

• Microsoft — for consultation bookings (Microsoft Bookings) and for email through Microsoft 365 / Exchange Online and hosting through Microsoft Azure. Microsoft acts as our processor for the services it runs for us, and as an independent controller for operating its own platform.
• Microsoft Azure, France Central region (Azure App Service) — the infrastructure that runs the website, acting as our processor.
• Microsoft Clarity, provided as a Microsoft-hosted service — acting as our processor.
• Cloudflare — for the anti-bot check, when enabled, acting as our processor.
• Professional advisers (such as lawyers or accountants) and public authorities, where we are legally required to disclose information or need to establish, exercise or defend legal claims.
• A buyer or successor if we reorganise, merge or sell part of the business, under confidentiality terms.

We do not sell personal data, and we do not share it for cross-context behavioural advertising.

7. International transfers and retention

Transfers. We operate from the Republic of Armenia. Some of the providers above are located in, or transfer data to, the European Union and the United States. Where such transfers are subject to the EU or UK GDPR, they are protected by an appropriate safeguard — a European Commission (or UK) adequacy decision, the EU–US Data Privacy Framework and its UK extension, or Standard Contractual Clauses together with any additional measures needed. You can ask us for details of the safeguard that applies to a particular transfer.

Retention. We keep personal data only as long as we need it:

Data	Retention
Contact-form messages, service / consultation requests, booking details and related correspondence	24 months after our last contact with you, unless a contract or a legal requirement means we must keep it longer
Server logs	90 days
Analytics data	Microsoft Clarity: session recordings are retained for 30 days; click/heatmap data and labelled/favourited sessions are retained for 9 months at record level; aggregate statistics may be kept longer

When a retention period ends, we delete the data or irreversibly anonymise it.

8. Your rights

Subject to the conditions in the law that applies to you (EU/UK GDPR, the Republic of Armenia's Law on Protection of Personal Data, and comparable laws such as Georgia's), you have the right to:

• access the personal data we hold about you and receive a copy;
• ask us to correct inaccurate or incomplete data;
• ask us to delete your data;
• ask us to restrict or object to our processing, including any processing based on legitimate interests;
• receive certain data in a portable format and have it transmitted to another controller;
• withdraw consent at any time where we rely on it;
• opt out of analytics — through the custom consent banner, where visitors can reject Microsoft Clarity analytics, or through the site's cookie/privacy settings, where visitors can later change or withdraw their choice;
• not be subject to a decision based solely on automated processing that produces legal or similarly significant effects — we do not carry out such processing.

To exercise any of these, email support@madatech.me. We may need to verify your identity. We respond within one month (extendable by two further months for complex requests, with notice), or within the period set by your local law if shorter.

You also have the right to complain to a supervisory authority:

• Republic of Armenia: the Personal Data Protection Agency of the Ministry of Justice of the Republic of Armenia.
• European Union: the data protection authority of the country where you live or work.
• United Kingdom: the Information Commissioner's Office (ICO).

We would appreciate the chance to address your concern before you approach a regulator.

9. California residents (CCPA / CPRA)

If you live in California, the following applies to personal information we collect through the website in the 12 months preceding your request:

• Categories collected: identifiers (name, email address, phone number); commercial information (the services you enquire about); internet or network activity (analytics and log data); professional information (company, job title); and the content of messages you send us.
• Sources: you, and your device when you visit the site.
• Purposes: as described in sections 3 and 4.
• Disclosure: to the service providers listed in section 6, for those purposes only.
• No sale or sharing: we do not sell your personal information and do not share it for cross-context behavioural advertising. We do not knowingly process the personal information of consumers under 16.

You have the right to know, delete, and correct your personal information, and to be free from discrimination for exercising these rights. Because we do not sell or share personal information or use it for profiling that has legal effects, there is nothing to opt out of in those categories. To make a request, email support@madatech.me; you may use an authorised agent, in which case we will ask for proof of authorisation.

10. Children

The public website is intended for a business audience and is not directed to children under 16. We do not knowingly collect their personal data. If you believe a child has provided us with personal data, contact us and we will delete it.

11. Links to other sites

Our website links to third-party sites (for example Microsoft's product pages and our social media profiles). We are not responsible for their content or privacy practices; review their own policies.

12. Changes to this policy

We may update this policy to reflect changes in our practices or the law. We will change the "last updated" date above and, for material changes, provide a more prominent notice on the website. The version published here is always the current one.

13. How to contact us

Madatech — Madatech LLC

• Privacy enquiries: support@madatech.me
• General enquiries: info@madatech.me
• Service support: support@madatech.me