Privacy

Privacy information for the contact form

This notice explains what information the contact form collects, how it is used and how long it is kept.

01

Who is responsible

Questions about this notice or your personal information can be sent to mahdi@mahdikalantar.com.

02

What information is collected

The project form collects your name, reply email, request type, problem or objective, consent and any optional organisation, area of work or relevant link you choose to provide. Basic security and delivery records may include a request ID, result code and timing. Application logs do not contain your message or contact details.

03

Why the information is used

The information is used only to review and respond to your enquiry, protect the form from abuse and confirm delivery. Depending on the request, processing is generally necessary to take steps you ask for before a possible contract or is based on the legitimate interest in handling genuine enquiries. The information is not used for marketing lists or visitor profiling.

04

Who processes the information

Cloudflare provides website, security and form infrastructure. Resend delivers accepted messages to the owner mailbox and sends the acknowledgement email. Message content is not stored in an application database, and contact details are not stored in KV or application logs. Providers may process information in other countries under their applicable safeguards.

05

How long information is kept

Contact messages are kept for no more than three months and are then deleted under the operating retention procedure, unless a shorter period is appropriate or a longer period is required for a specific legal reason.

06

Your rights

You may ask for access to, correction of or deletion of your personal information, or object to or restrict certain processing where the law provides that right, by emailing mahdi@mahdikalantar.com. You may also complain to the UK Information Commissioner’s Office.

07

Cookies and analytics

The site uses Cloudflare Web Analytics for visitor analytics. Necessary anti-abuse controls may also process limited technical data when the contact form is used.