Privacy Policy

Mallik Solutions is a technology consultancy founded and operated by Abhisek Mallik ("we", "us", "our"). For the purposes of applicable data protection legislation, Mallik Solutions is the Data Controller.

Contact: abhisek.mallik@malliksolutions.com

Information you provide directly

• Full name and work email address
• Phone number (optional)
• Company name, size, and industry
• Project type, budget range, and timeline
• Free-text message content
• Meeting details you submit when booking an appointment

Information collected automatically

• IP address (anonymised before storage)
• Browser type, operating system, and device category
• Pages viewed, referral source, and session duration (via Google Analytics 4)
• Geographic location at country/city level

We do not collect payment card details, government-issued identifiers, or sensitive personal data as defined under Article 9 UK/EU GDPR.

We rely on the following lawful bases under UK/EU GDPR Article 6:

• Legitimate interests — to respond to your enquiry, manage our client relationships, and improve our website.
• Consent — to set analytics cookies where required by PECR/ePrivacy Directive.
• Legal obligation — to retain certain records as required by law.

• To respond to your project enquiry and provide consultancy services
• To schedule and conduct introductory calls you request
• To assess project fit and prepare proposals
• To send service-related communications (no unsolicited marketing without explicit consent)
• To analyse website performance and improve user experience
• To comply with applicable legal and regulatory obligations

We do not sell, rent, or trade your personal data. We may share data with the following categories of processors who are bound by appropriate data processing agreements:

• Convex, Inc. — backend database and API platform (contact form submissions)
• Resend, Inc. — transactional email delivery (enquiry notifications)
• Zoho Corporation — business email and appointment scheduling
• Google LLC — Google Analytics 4 (aggregated analytics, anonymised IPs) and reCAPTCHA (spam prevention)
• Vercel, Inc. — website hosting and edge delivery

We may disclose data to law enforcement or regulatory authorities where required by law or to protect our legal rights.

Some of our processors operate outside the UK/EEA. Where personal data is transferred internationally, we ensure adequate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the ICO or the European Commission, or equivalent transfer mechanisms.

• Contact enquiries — retained for 3 years from last interaction, then securely deleted
• Analytics data — 14 months (Google Analytics 4 default; adjusted in our GA4 settings)
• Cookie consent records — 13 months

You may request earlier deletion at any time (see Section 09).

We use strictly necessary cookies for core site functionality (theme preference, consent state) and, with your prior consent, analytics cookies via Google Analytics 4. Full details are set out in our Cookie Policy. Cookie Policy.

Subject to applicable law, you have the right to:

• Access — obtain a copy of the personal data we hold about you
• Rectification — correct inaccurate or incomplete data
• Erasure — request deletion of your personal data ("right to be forgotten")
• Restriction — limit how we process your data in certain circumstances
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interests
• Withdraw consent — at any time, without affecting prior lawful processing

To exercise any right, email abhisek.mallik@malliksolutions.com. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) or your local supervisory authority.

Our website and services are directed at business professionals and are not intended for children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us immediately.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Material changes will be signalled by updating the "Last updated" date above. We encourage you to review this Policy periodically. Continued use of the website after changes constitutes acceptance of the revised Policy.

For any privacy-related enquiries or to exercise your data subject rights, please contact: