Privacy

Last reviewed — 30 September 2026

Mehvexa Technologies is the controller of the personal data described in this notice. We are a software engineering company founded in 2010, with offices at #5055, 624 Columbus Ave, Thornwood, New York; #2299, 275 New North Road, London; and F-195 Industrial Area, Phase 8B, Mohali. Our UK office handles data protection enquiries. You can reach the person responsible for data protection at hello@mehvexa.com, and by post at the London address above.

When you use the enquiry form we collect your name, work email address, company name, and whatever you write in the message field, including any project details. If you email us directly, we hold the correspondence and the address it came from. If you apply for a role, we collect your CV and the details in it. Our web analytics runs without cookies and records only aggregated page views, referring site, country, browser type and screen size; it does not store your IP address or identify you. Our hosting provider keeps short-lived server logs, which include IP addresses, for security and error diagnosis.

We use enquiry and email data to reply to you and to scope and quote the work you describe; the lawful basis is our legitimate interest in responding to people who contact us, and, where a contract follows, taking steps at your request before entering into it. We use applicant data to assess you for a role, on the same basis. We use aggregated analytics to understand which pages are read and to fix what is not working; the lawful basis is our legitimate interest in running a website that works. We keep server logs for security and to detect abuse, which is our legitimate interest in protecting our systems. We do not use your data for automated decision-making, and we do not send marketing email unless you have asked for it, in which case you can withdraw consent at any time.

Enquiries that do not lead to an engagement are deleted 12 months after our last exchange with you. Where an engagement follows, we keep the correspondence for the life of the contract and for six years after it ends, to meet accounting and limitation-period obligations. Applicant data is deleted six months after the role closes unless you ask us to keep it on file for future roles, in which case we keep it for 12 months. Server logs are deleted after 30 days. Analytics data is aggregated and holds nothing that identifies you, so it is retained indefinitely.

We share personal data only with the processors we need to run the site and reply to you, under written terms that limit what they may do with it. By category these are: our web hosting and content-delivery provider, which serves this site and stores the enquiry-form submissions; our email provider, which delivers and stores our mail; our cookieless analytics provider, which receives only aggregated, non-identifying data; and our cloud infrastructure providers, AWS, Google Cloud and Azure, where client work is hosted. Some of these providers process data in the United States. Where data leaves the UK or EEA, the transfer is covered by the UK International Data Transfer Addendum or the EU Standard Contractual Clauses, or by an adequacy decision. We do not sell personal data, and we do not share it with advertisers.

Under UK GDPR and EU GDPR you have the right to ask for a copy of the personal data we hold about you, to have inaccurate data corrected, to have your data erased, to receive it in a portable format, to restrict how we use it, and to object to processing based on our legitimate interests. To exercise any of these, email hello@mehvexa.com; we may ask you to confirm your identity first. We respond within one month. If you are not satisfied with our response, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. If you are in the EU, you can complain to the supervisory authority in your member state instead.

Send privacy requests and questions to hello@mehvexa.com, or by post to Mehvexa Technologies, #2299, 275 New North Road, London. We acknowledge every request within two business days and give a full response within one month. If a request is complex we may take up to two further months, and we will tell you within the first month if that is the case.