This policy explains how Maji Systems Ltd (“Maji Systems”, “we”, “us”) collects and uses personal data when you visit maji.systems or contact us through it. We are the data controller for that information.
Who we are
Maji Systems Ltd, a company registered in England & Wales under number 13706076, with its registered office at 7 Bell Yard, London WC2A 2JR, United Kingdom. You can reach us at sales@maji.systems.
What we collect
We keep this deliberately narrow. We collect:
- Information you send us through the contact form — your name, email address, and optionally your phone number and organisation, along with the content of your message and the enquiry type you selected.
- Technical information logged when the form is submitted — your IP address and the time of submission. This is used to enforce the rate limit that keeps the form from being abused, and is included in the enquiry email so we can investigate abuse.
- Standard web server logs — IP address, request path, user agent and timestamp, generated by our web server when any page is requested.
We do not run advertising trackers, behavioural analytics or third-party marketing scripts on this site, and we do not build profiles of visitors.
Why we use it, and on what legal basis
- To answer your enquiry — legal basis: legitimate interests (responding to someone who has asked us to), or steps taken at your request prior to entering a contract.
- To prevent abuse of the contact form — legal basis: legitimate interests (protecting our systems and our inbox).
- To operate and secure the website — legal basis: legitimate interests (running a reliable, secure service).
We do not use your details for marketing unless you separately ask us to, and we never sell personal data.
Who we share it with
We use a small number of processors and service providers:
- Resend — delivers the contact form email to our inbox. Your submission passes through their infrastructure in transit. See Resend’s privacy policy.
- Our email provider — stores the enquiry once it arrives in our mailbox.
- Our hosting provider — operates the servers this site runs on and retains standard access logs.
- Stripe — if you buy from our webstore, you are taken to a checkout page hosted by Stripe. Anything you enter there, including payment details, is collected by Stripe under their privacy policy. Card details never reach this website or our servers.
We may also disclose information where we are legally required to, or to establish or defend legal claims.
International transfers
Some of our providers operate outside the UK. Where personal data is transferred internationally, we rely on UK adequacy regulations or on standard contractual clauses with the appropriate safeguards in place.
How long we keep it
- Contact enquiries — retained in our mailbox for up to 24 months from our last correspondence with you, then deleted, unless they form part of a customer record we are required to keep.
- Rate-limiting records — held only in server memory and discarded within an hour.
- Web server logs — retained for up to 30 days.
The website itself stores nothing: there is no database behind it and no copy of your enquiry is kept on the web server.
Your rights
Under UK GDPR you have the right to:
- ask what personal data we hold about you and receive a copy;
- have inaccurate data corrected;
- ask us to erase your data, where we have no overriding reason to keep it;
- restrict or object to our processing, including on legitimate-interests grounds;
- request portability of data you provided to us; and
- withdraw consent at any time, where we relied on consent.
To exercise any of these, email sales@maji.systems. We will respond within one month. If you are unhappy with how we have handled your data you can complain to the Information Commissioner’s Office at ico.org.uk.
Security
The site is served over HTTPS. Contact form submissions are transmitted encrypted, rate limited, and are not written to disk by the website. Access to our email inbox is restricted to staff who need it and protected by multi-factor authentication.
Cookies
This site does not set cookies. See our cookie notice for the detail.
Children
This is a business-to-business website and is not directed at children. We do not knowingly collect personal data from anyone under 16.
Changes to this policy
We will update this page when our practices change, and revise the “last updated” date at the top. Material changes will be highlighted on the page for a reasonable period.
Contact
Questions about this policy, or about how we handle your data: sales@maji.systems, or write to us at the registered office address above.