makasetech
Say hello

Privacy Policy

Effective date: December 14, 2024
Last updated: October 10, 2026

This Privacy Policy explains how Makasetech (“we”, “us”, or “our”) processes information when you visit our website or communicate with us. We are committed to privacy by design: our website uses no cookies, no local storage, and no tracking pixels.

1. Who We Are (Data Controller)

The data controller for personal data processed through this website and through inquiries sent to us is:

2. Scope of This Policy

This Privacy Policy applies solely to:

  1. Public visitors to this website (makasetech.com).
  2. Individuals who contact us directly via email or telephone using the contact details provided on the site.

This policy does not apply to Makasetech’s proprietary software products (SaaS applications) or client projects delivered under custom Master Services Agreements (MSAs). Those products and services are governed by separate, standalone terms, privacy notices, and data processing agreements.

3. Information We Collect and Process

We collect only the minimum information necessary to deliver, secure, and understand our website, and to answer communications you initiate.

A. Information Processed Automatically (Server & Edge Logs)

When your browser requests a page, our hosting and content delivery network (Cloudflare) automatically processes standard HTTP request metadata:

  • IP address
  • Browser type and user-agent string
  • Requested URL path and timestamp
  • Referring URL (HTTP referer header)

This processing occurs at the network edge to deliver static files, prevent DDoS attacks, mitigate malicious traffic, and ensure network security.

B. Aggregate Website Statistics (Cloudflare Web Analytics)

To understand overall site performance and aggregate traffic trends without tracking individuals, we use Cloudflare Web Analytics:

  • Cookieless aggregate statistics: No cookies are set, no local storage or session storage is used, and no persistent device identifiers or fingerprints are created.
  • Metrics collected in aggregate only: Page view counts, top referrers, country of origin, browser/device type, and Core Web Vitals performance timings.
  • We cannot track or identify individual users across visits or across other websites.

C. Information You Provide Voluntarily

When you initiate contact with us by email or telephone:

  • Your email address, name, telephone number (if calling), and any technical requirements, project descriptions, or business context you provide.
  • We use this information solely to evaluate your request, discuss potential engagements, and reply to your inquiry.

D. Information We Never Collect

  • No cookies: We do not set first-party or third-party cookies.
  • No local device storage: We do not store data in localStorage, sessionStorage, or IndexedDB.
  • No advertising pixels or social widgets: We do not load Facebook pixels, Google Analytics, LinkedIn trackers, or font CDN trackers.
  • No data sales: We do not sell, rent, or trade your personal data.

4. Legal Bases for Processing (GDPR Article 6)

For visitors located in the European Union, European Economic Area, and United Kingdom, we process personal data under the following legal bases:

  1. Legitimate Interests (Art. 6(1)(f) GDPR):
    • Operating, securing, and maintaining the stability of our website edge delivery.
    • Measuring aggregate, non-identifying site performance to optimize user experience.
    • Managing and replying to business inquiries initiated by prospective clients.
  2. Steps Prior to Entering into a Contract (Art. 6(1)(b) GDPR):
    • Evaluating specifications and consulting requests you send to us with a view to engaging our professional services.
  3. Legal Obligations (Art. 6(1)(c) GDPR):
    • Maintaining records required by applicable statutory, tax, or regulatory rules.

Note on Consent: Because our website uses no cookies, no tracking identifiers, and no third-party marketing beacons, we do not require or rely on user consent for technical website delivery.

5. Processors and Service Providers

We engage select infrastructure and communications service providers who act as data processors:

  • Cloudflare, Inc. (USA): Content delivery network (CDN), DNS resolution, DDoS protection, static edge hosting, cookieless web analytics, and inbound email routing.
  • Email Infrastructure Providers: Inbound message delivery handled via Cloudflare Email Routing and standard SMTP mail relay providers for outbound replies.

We ensure all service providers maintain strict security standards and enter into appropriate Data Processing Addenda (DPAs) with standard contractual safeguards.

6. International Data Transfers

Makasetech is based in the United States, and our infrastructure providers operate globally. If you access our website or contact us from the EU/EEA/UK, your information will be transferred to and processed in the United States.

Transfers are safeguarded through:

  • Adequacy decisions or vendor participation in the EU-U.S. Data Privacy Framework (DPF) and the UK Extension to the EU-U.S. DPF.
  • Standard Contractual Clauses (SCCs) approved by the European Commission.

7. Data Retention

  • Server and Network Logs: Retained in accordance with Cloudflare’s security retention schedules (typically rolling logs deleted within 30 days, unless required for ongoing security incident analysis).
  • Aggregate Analytics: Maintained in aggregated, anonymized format without personal identifiers.
  • Email Correspondence: Retained for the duration of our business communication and as required by applicable commercial accounting and limitation periods.

8. Your Privacy Rights (EU/EEA & UK)

Under the GDPR and UK GDPR, you have the following rights regarding personal data we hold about you:

  • Right of Access (Art. 15): Request confirmation of processing and a copy of your personal data.
  • Right to Rectification (Art. 16): Request correction of inaccurate information.
  • Right to Erasure (Art. 17): Request deletion of your personal data where retention is no longer justified.
  • Right to Restriction (Art. 18): Request limitation of processing under specific circumstances.
  • Right to Data Portability (Art. 20): Request transfer of data you provided to us in a structured format.
  • Right to Object (Art. 21): Object to processing based on legitimate interests.

To exercise any of these rights, please contact us via the email address published on our website. We will respond within one calendar month without charge.

You also have the right to lodge a complaint with a supervisory authority in your country of residence or jurisdiction.

9. Notice for US Residents

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising. Depending on your state of residence (e.g., California, Virginia, Colorado), you may have rights to access, correct, or delete personal information held by businesses. To submit a consumer request, reach out via our published email.

10. Security

We implement strict technical and organizational measures to protect data against unauthorized access, loss, or disclosure:

  • Strict HTTPS enforcement with modern TLS 1.2+ protocols.
  • HTTP Strict Transport Security (HSTS) with long max-age.
  • Strict Content Security Policy (CSP), preventing unauthorized script execution and restricting connections.
  • Self-hosted static assets, ensuring no third-party CDNs or untrusted endpoints receive visitor traffic.

11. Children’s Privacy

Our website and consulting services are directed exclusively at business professionals and organizations. We do not knowingly solicit or collect information from children under 16 years of age.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect operational or legal changes. Updates will be posted on this page with an updated “Last updated” date.