Privacy notice
LAST UPDATED: 2 SEPTEMBER 2026
This notice explains what personal data Mazi collects, why, how long it is kept, and the rights you have over it. It is written to be read rather than to be defensible, so if anything here is unclear, email me and I’ll fix the wording.
Who is responsible for your data
The data controller is Infosystems 2018 JPM Limited, trading as Mazi, a company registered in Cyprus under number HE 388147, with its registered office at 68 Spyrou Kyprianou, 4042 Germasogeia, Limassol, Cyprus.
For anything relating to this notice or your personal data: privacy@mazi.systems.
What I collect, and why
If you complete the Inspection assessment
Your answers to the assessment questions, your resulting score, and the business context you provide — business type, number of sites, number of staff, the systems you run, and the job you tell me eats most of your week. If you request the report, also your name and email address.
Why: to generate and send your inspection report, and to understand whether Mazi can help you.
Legal basis: legitimate interests (responding to a request you initiated). Where you ask for the report by email, also performance of a request you have made.
If you complete the contact form
Your name, email address, company name if given, and your message.
Why: to reply to you and, if relevant, to arrange a call.
Legal basis: legitimate interests (responding to your enquiry).
If you book a call
Your name, email address, chosen time, and anything you add when booking. This is handled by the booking provider named below.
If you message by WhatsApp
Your phone number, WhatsApp profile name, and the content of your messages. Note that WhatsApp is operated by Meta and its own terms apply to the transmission of those messages.
When you browse the site
Aggregate, anonymous analytics only: pages viewed, referring source, country, device type, and whether visitors start and complete the assessment. This is collected without cookies and cannot identify you. No advertising trackers, no profiling, no cross-site tracking, and no cookie banner — because there is nothing to consent to.
Business information you share with me
If you complete the assessment or send a message, you may tell me things about your business — how your operations run, where they don’t, what your systems are. Most of this isn’t personal data, but it is commercially sensitive and I treat it accordingly.
I do not share it with anyone, and I do not use it to advise a competitor.
If you would like a mutual non-disclosure agreement in place before a conversation, ask and I’ll send one.
Who else sees your data
I use a small number of service providers who process data on my behalf under contract. They may not use it for their own purposes.
| Provider | What for | Where |
|---|---|---|
| Vercel Inc. | Website hosting and delivery | USA / EU |
| Plausible Analytics | Cookieless, anonymous site analytics | EU (Germany) |
| Supabase | Storing form and assessment submissions | EU (Ireland) |
| Resend | Sending your report and my replies | EU / USA |
| Google Ireland Limited | Call booking | EU / USA |
| Meta Platforms Ireland | WhatsApp messaging, if you use it | EU / USA |
Where a provider processes data outside the European Economic Area, that transfer is covered by the European Commission’s Standard Contractual Clauses or an applicable adequacy decision.
I do not sell personal data, and I do not share it for advertising.
How long it is kept
| Data | Kept for |
|---|---|
| Assessment answers with contact details | 24 months from submission |
| Anonymous assessment answers (no contact details) | Indefinitely, aggregated, for improving the assessment |
| Contact form enquiries | 24 months from last contact |
| Client records and correspondence | 7 years after the engagement ends, for tax and legal purposes |
| Site analytics | Aggregate only, never personally identifiable |
If you ask me to delete your data sooner, I will, except where I am legally required to keep it.
Your rights
Under the GDPR you have the right to:
- Know what I hold about you, and get a copy.
- Correct anything inaccurate.
- Have it deleted, where I have no overriding legal reason to keep it.
- Restrict or object to how I use it, including any processing based on legitimate interests.
- Take it elsewhere in a portable format.
- Withdraw consent at any time, where consent was the basis.
Email privacy@mazi.systems and I will respond within one month. There is no charge.
Automated decision-making
The assessment produces a score automatically from the answers you give. It informs what I show you and how I follow up. It has no legal or otherwise significant effect on you, and every actual decision about working together is made by a person. You can ask me to disregard the score entirely.
Complaints
If you think I have handled your data badly, please tell me first — most things are a misunderstanding and I would rather fix it.
You also have the right to complain to the Cyprus supervisory authority:
Office of the Commissioner for Personal Data Protection
15 Kypranoros Street, 1061 Nicosia, Cyprus
P.O. Box 23378, 1682 Nicosia
Telephone: +357 22818456
Email: commissioner@dataprotection.gov.cy
dataprotection.gov.cy
Changes
If this notice changes materially I will update the date above and, where the change affects you and I hold your contact details, tell you directly.