Privacy

Mavraq is a registered business name (CRO number 796163) of James Maher, a sole trader, of Kilkenny Road, Freshford, Co. Kilkenny, R95 FP76, Ireland, who is the data controller for this website and for Mavraq’s own outreach to businesses. This page explains what this website collects, what Mavraq keeps when it contacts a business first, and what happens to both. Last updated November 2026.

What is collected

When you submit the quote form, the details you enter (name, email, company, website, WhatsApp number if you give one, business size, services of interest, timeline, budget range and your description of the problem) are stored so James can reply. The request also records a one-way hash of your IP address, used only to limit abuse of the form, and your browser’s user-agent string. If you arrived from an advert or a tagged link, the campaign name in that link and the site you came from are stored with the request, so James knows which advert or post brought it in.

Booking a call happens on Calendly, which only loads after you click the button. Calendly’s own privacy policy applies to anything you enter there.

On a call, and only if you agree at the start, James uses Granola to transcribe it so his notes are accurate. No audio is kept.

The site uses Vercel Analytics, which counts page views without cookies and without identifying you.

If Mavraq contacted you first

Mavraq writes to a small number of businesses directly, by email or on LinkedIn, about work that fits the recipient’s job.

• What is kept: your name, job title, the company you work for, and either a work email address your company published itself (on its website or in its own materials) or your LinkedIn profile. Mavraq never buys contact lists and never guesses email addresses.
• Where it came from: the page where your company published the address, recorded with the date it was found, or the person who introduced you, if someone did.
• Why: to ask whether Mavraq’s work would be useful to your team. The legal basis is legitimate interest: writing to a business about services that fit the recipient’s role, with no more than three emails and one LinkedIn message.
• How long it is kept: if you don’t reply, your details are deleted 12 months after the last message. If you ask not to be contacted, they are deleted straight away, except your email address, which goes on a do-not-contact list so you are never written to again.
• Your right to object: reply “unsubscribe” to any email, tell James on LinkedIn, or write to hello@mavraq.com, and Mavraq will not contact you again. You can also ask at any time what Mavraq holds about you, or ask for it to be deleted.

The email list

The free calculators and the guide under Resources come with an email sign-up. When you sign up, the site stores your first name, your email address, which resource you asked for, the type of practice you chose, the numbers you entered in the calculator, the wording of the consent box you ticked and when you ticked it, and a one-way hash of your IP address, used only to limit abuse of the form. If you arrived from an advert or a tagged link, the campaign name and the site you came from are stored too.

Nothing is sent until you confirm. The first email asks you to press a button to confirm the address is yours. After that you get the breakdown or the guide, then up to four more emails over two weeks. The emails carry no tracking: Mavraq does not know whether you opened one or which links you clicked. If you allowed advertising cookies, the sign-up is reported to Meta from the server in the same way as a quote request, with your email address and first name scrambled (hashed) first, and your IP address and browser details unscrambled.

The legal basis is your consent, given when you tick the box and confirmed when you press the button in the first email. You can withdraw it at any time with the unsubscribe link at the bottom of every email, which removes your details straight away, or by emailing hello@mavraq.com.

Cookies

The site asks before setting any advertising cookie. If you choose Allow, the Meta Pixel loads and sets the _fbp cookie (and _fbc if you came from a Meta advert), so Mavraq can see which Facebook and Instagram adverts bring in enquiries and bookings. If you send a quote request after allowing it, the same enquiry is also reported to Meta from the server, with your email address, first name and any WhatsApp number scrambled (hashed) first. Meta also receives your IP address and browser details (the user-agent string) unscrambled, from the Pixel in your browser and with each report from the server. If you choose Reject, or make no choice, none of this happens. Your choice is kept for six months in a cookie called mvq_consent, and you can change it at any time with Cookie settings at the bottom of every page.

Calendly loads only after you click the booking button. Cloudflare Turnstile runs on the quote form and on the email sign-up forms (on the pricing page and under Resources) to check each one was sent by a person. Each may set a cookie of its own for that purpose only.

Why

To reply to your enquiry and prepare a quote. The legal basis is legitimate interest in responding to a business enquiry you started. Advertising measurement through Meta relies on your consent, which you can withdraw at any time. Call notes rely on your agreement at the start of the call, which you can also withdraw at any time.

Who processes it

• Supabase: stores quote requests and email-list sign-ups.
• Resend: sends the notification email to Mavraq, a confirmation to you, and the email-list emails.
• Google Workspace: the hello@mavraq.com and james@mavraq.com mailboxes, where every quote request, reply and outreach email is kept, and the Google Sheet where outreach is recorded.
• LinkedIn: only if James messaged you there.
• WhatsApp: only if you leave a number, and only James messaging you from his own phone.
• Vercel: hosts the site and runs the form.
• Cloudflare Turnstile: checks the quote and sign-up forms were sent by a person.
• Calendly: handles call bookings, only after you choose to load it.
• Granola: transcribes calls and writes notes, only if you agree.
• Meta (Facebook and Instagram): measures which adverts lead to enquiries, only if you allow advertising cookies.

Where it is stored

Quote requests and email-list sign-ups are stored by Supabase in Ireland. Once a week a copy of both is emailed to Mavraq’s Google Workspace mailbox and kept there as a backup. Vercel, Resend, Google, Cloudflare, Calendly and Meta are based in the United States and may process your details there, and Granola keeps call notes on servers there. Each is covered by the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses, which keep EU-level protection on the data.

How long

Quote requests are deleted automatically 12 months after submission. An email-list sign-up that is never confirmed is deleted 7 days after the last attempt; a confirmed one is deleted 24 months after you confirmed, or the moment you unsubscribe. Email correspondence is kept for as long as we work together and for a reasonable period afterwards. Call transcripts are deleted automatically after one month.

Your rights

You can ask for a copy of what we hold, ask for it to be corrected, or ask for it to be deleted at any time. Email hello@mavraq.com and it will be done within a few days.

If you are unhappy with how your data has been handled, you can complain to the Data Protection Commission in Ireland at dataprotection.ie.