Privacy / V1

A short notice for a minimal contact flow.

This notice describes the system that is actually implemented. Legal wording will receive a final review before public release.

01

Who is responsible

Mahdi Kalantar operates this website as an individual in the United Kingdom. Questions about this notice or your information can be sent to hello@mahdikalantar.com.

02

What is collected

The project brief collects your name, reply email, request type, problem or objective, consent and any optional organisation, practice or existing link you choose to provide. Basic security and delivery records may include a request ID, result code and timing, but application logs do not contain your message or contact details.

03

Why it is used

The information is used only to review and respond to your enquiry, protect the form from abuse and confirm delivery. Depending on the request, this is generally necessary to take steps you ask for before a possible contract or based on the legitimate interest in handling genuine enquiries. It is not used for marketing lists or visitor profiling.

04

Who processes it

Cloudflare provides site, security and form infrastructure. Resend provides transactional email delivery. The submitted message is delivered to the owner mailbox; there is no application database for message content and no contact PII is stored in KV or application logs. Providers may process data in other countries under their applicable safeguards.

05

How long it is kept

Contact messages are kept for no more than three months and then deleted under the operating retention procedure, unless a shorter period is appropriate or a longer period is required for a specific legal reason.

06

Your choices and rights

You may ask for access, correction or deletion of your information, or object to/restrict certain processing where the law applies, by emailing hello@mahdikalantar.com. You may also complain to the UK Information Commissioner’s Office.

07

Cookies and analytics

V1 does not use visitor analytics or advertising cookies. A necessary anti-abuse challenge may set or read limited technical data when the Contact form is used.