Your data, handled with care.

MSH Technologies (“we”, “us”) is a web design and development studio based in India, working with clients worldwide. We are the data controller for the personal information described in this policy.

This policy explains what we collect when you visit this website or work with us, why we collect it, how long we keep it and the choices you have. If anything is unclear, email us at sohailhussain124@gmail.com.

Information you give us

When you use the enquiry form or email us, we receive what you choose to share, which may include:

• Your name, email address and phone number.
• Your company name and the type of service you are interested in.
• An indicative budget, how you heard about us and your message.

Once we start a project together, we also collect the information needed to deliver it: billing details, content and assets for your website or product, and access credentials you choose to share for services such as your domain, hosting or analytics.

Information collected automatically

Like most websites, our hosting provider records basic technical data when you visit, such as your IP address, browser type, the pages you request and the time of the request. This is used to keep the site secure and available. See our cookie policy for how we use cookies and analytics.

We use personal information only for the following purposes:

• To reply to your enquiry and discuss your project.
• To prepare proposals, agreements and invoices, and to deliver the work you commission.
• To provide support, maintenance and updates after launch.
• To keep this website secure, detect abuse and understand how it is used.
• To meet our legal, accounting and tax obligations.

We do not sell personal information, and we do not use your details for marketing unless you ask us to keep in touch. You can opt out at any time by replying to any message from us.

Where data protection law requires a legal basis for processing, we rely on:

• Contract, when we process information to respond to your enquiry or deliver a project you have engaged us for.
• Legitimate interests, when we keep the website secure, improve our services and keep records of our business relationships.
• Legal obligation, when we retain invoices and tax records for the periods the law requires.
• Consent, for any optional cookies or communications, which you can withdraw at any time.

We share personal information only with service providers that help us run the business, and only as far as needed for them to do their job. These currently include:

• Vercel, which hosts this website, processes request logs and provides cookieless, aggregated visitor analytics.
• Resend, which delivers enquiry form submissions to our inbox by email.
• Google Workspace or similar email providers, where our correspondence with you is stored.
• Payment and accounting providers, for invoicing and receiving payments.

During a project we may also work with third-party platforms on your behalf, such as a hosting provider, CMS, analytics tool or AI model provider. Which platforms apply depends on the project and is agreed with you in advance. We may disclose information where the law requires it or to protect our rights.

We are based in India and work with clients and providers around the world, so your information may be stored or processed outside your own country. Where we transfer information internationally, we rely on providers that offer recognised safeguards, such as standard contractual clauses or equivalent protections.

• Enquiries that do not lead to a project are kept for up to 12 months, then deleted.
• Project records, correspondence and deliverables are kept for the life of our relationship and for up to 6 years afterwards, so we can support you and resolve any disputes.
• Invoices and payment records are kept for as long as tax and accounting law requires.
• Credentials you share with us are deleted or revoked when the project ends, unless you keep us on for ongoing care.

We use reputable providers with encryption in transit and at rest, protect our accounts with strong authentication, limit access to the people who need it and keep your credentials in a password manager rather than in documents or chat. No system is perfectly secure, so if you become aware of a security issue please tell us straight away.

Depending on where you live, you may have the right to:

• Ask for a copy of the personal information we hold about you.
• Ask us to correct information that is inaccurate or incomplete.
• Ask us to delete your information, where we have no ongoing reason to keep it.
• Object to, or ask us to restrict, certain processing.
• Receive your information in a portable format.
• Withdraw consent where processing is based on consent.
• Complain to your local data protection authority.

To exercise any of these, email sohailhussain124@gmail.com. We will respond within 30 days and may need to verify your identity first.

Our services are for businesses and we do not knowingly collect information from anyone under 18. If you believe a child has given us personal information, contact us and we will delete it.

We may update this policy as our services or the law change. The date at the top shows when it was last revised. If a change is significant, we will tell existing clients by email.