Privacy - Privacy Policy

The controller responsible for processing personal data under the EU General Data Protection Regulation (GDPR) and the UK GDPR is:

ZIBA GLOBAL CONSULTING LTD (trading as Melexsoft)
65 London Wall
London, EC2M 5TU, United Kingdom
Email: info@melexsoft.com

We only collect what we need to deliver our services and to keep the site working. The main categories are:

• Contact data you give us through our forms (name, email, company, phone, your message). Used to reply to your enquiry and follow up about a possible engagement.
• Newsletter sign-ups (email). Used only to send the content you signed up for. You can unsubscribe at any time.
• Technical data automatically collected by your browser (IP address, user-agent, referring page). Used for security, abuse prevention, and to keep the site running.
• Analytics data — only if you consent to analytics cookies. Used in aggregate to understand which content is useful and how to improve the site.

We process personal data on the following legal bases under GDPR Art. 6(1): performance of a contract or pre-contractual steps (a)–(b) for enquiries and engagements; legitimate interest (f) for site security, fraud prevention, and direct B2B communication with prospects; consent (a) for analytics cookies and newsletter sign-ups; and legal obligation (c) where applicable (e.g. tax records).

We rely on a small set of vetted providers to operate the site and our business. Each is bound by a data processing agreement.

• Google LLC — Google Analytics 4, used only with your consent. Data is processed with IP anonymization enabled.
• Mailgun Technologies, Inc. — transactional email delivery (contact form replies, notifications).
• Vercel Inc. — website hosting and edge delivery.
• Anthropic, PBC — AI features (only when you actively use them); your inputs are not used to train models.

Contact form submissions are kept for up to 24 months unless an active engagement requires longer. Newsletter data is kept until you unsubscribe. Server logs are kept for up to 30 days. Analytics data is kept for 14 months in Google Analytics.

Under GDPR, you have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure — ask us to delete your data, where applicable.
• Restriction — ask us to limit how we use your data.
• Objection — object to processing based on legitimate interest.
• Portability — receive your data in a machine-readable format.
• Withdraw consent — at any time, where processing is based on consent.
• Lodge a complaint with a supervisory authority (in the UK: the ICO; in the EU: your local DPA).

To exercise any of these rights, email us at info@melexsoft.com. We respond within 30 days.

Our services are aimed at businesses. We do not knowingly collect personal data from children under 16.

We may update this policy from time to time. The 'last updated' date at the top reflects the most recent change. Material changes will be highlighted on the site.