Privacy Policy

Maralito Labs is an independent engineering studio. For privacy questions or to exercise your rights under UK GDPR, contact us at hello@maralitolabs.com.

• Contact form data — name, email, company (optional), project type, budget range, timeline, and the message you send us.
• Email correspondence — any information you provide when emailing us directly.
• Technical data — IP address, browser type, device type, referring URL, and pages visited. This is collected automatically by our hosting provider for security and performance.
• Booking data — if you book a call through our scheduling link, the calendar provider (Cal.com) handles your booking details under its own privacy policy.

We do not knowingly collect personal data from anyone under 16.

• To respond to enquiries — lawful basis: legitimate interests and, where applicable, taking steps to enter into a contract with you.
• To operate and secure the site — lawful basis: legitimate interests.
• To comply with legal obligations — for example, retaining records required by law.

We keep enquiry data for as long as needed to respond and follow up, and for a reasonable period afterwards (typically up to 24 months) so we can refer back to prior conversations. Server logs are typically retained for 30 days. You can ask us to delete your data at any time.

We do not sell your personal data. We share it only with service providers we use to run this business, under contracts that require them to protect your data:

• Vercel — site hosting and access logs.
• Cal.com — call scheduling (only if you book).
• Email provider — for sending and receiving messages with you.

Some of these providers may process data outside the UK. Where they do, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or the EU Standard Contractual Clauses with the UK addendum.

This site does not currently set advertising cookies and does not run third-party analytics. Essential cookies may be set by our hosting provider for security and load-balancing. If we introduce analytics or marketing cookies in future, we will update this notice and request your consent where required.

Under UK GDPR you have the right to:

• Be informed about how we use your data (this notice).
• Request a copy of the personal data we hold about you.
• Ask us to correct inaccurate data or complete incomplete data.
• Ask us to erase your data, subject to legal exceptions.
• Restrict or object to certain processing.
• Receive your data in a portable format.
• Withdraw any consent you have given.

To exercise any of these rights, email hello@maralitolabs.com. We will respond within one month.

If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

We may update this policy from time to time. The "Last updated" date at the top of this page will reflect the most recent revision.