Skip to content

Legal

Privacy Policy

What personal data we collect, why, who we share it with, how long we keep it, and the rights you have over it.

Last updated 17 October 2026

Who we are

Mytecnic researches and builds B2B prospect lists for businesses. For the personal data described here, Mytecnic is the controller under the UK GDPR and the Data Protection Act 2018.

For anything about this policy or your data, email mahabubalq@gmail.com.

What we collect

From customers and people who contact us:

  • Account details: your email address and a password (stored by our authentication provider, never in plain text), or a one-time sign-in link.
  • Orders: your email, what you ordered, the amount, and payment references. Card details are entered on Stripe's checkout page and never reach us.
  • Your brief: company, website, who you want to reach, exclusions, notes, a saved-search link for exports, and any CSV or Excel files you upload.
  • Requests and messages: your name, email, company, and what you tell us, for example when asking for a revision or emailing us.
  • Chat: the questions you ask our website assistant and its answers.

Automatically, when you use the site:

  • A one-way hash of your IP address, used to limit abuse and spam. We don't store your IP address itself.
  • Your browser's user-agent string on forms you submit, and the page you came from.
  • The cookies and browser storage described below.

How we use it, and our lawful basis

  • To deliver what you ordered: building your list, emailing you about your order, sending reminders when we're waiting on your brief, and delivering files. Basis: performance of a contract.
  • To take payment and keep financial records. Basis: contract, and our legal obligations under UK tax law.
  • To answer questions and requests, including through the website assistant. Basis: legitimate interests in responding to you, or steps you asked for before a contract.
  • To follow up once or twice if you start a checkout but don't finish. Every follow-up has an unsubscribe link, and we stop when you use it. Basis: legitimate interests and the soft opt-in under PECR, because you were in the course of buying from us.
  • To keep the site secure and prevent abuse (rate limits, spam checks, access logs). Basis: legitimate interests.

We don't sell your personal data, and we don't use it for advertising.

If you appear in a prospect list

Our work involves researching business contact details: names, job titles, work email addresses, work phone numbers, company information, and public profile links of people in professional roles. If that's you, this section explains how.

  • Sources: business databases and research tools (such as Apollo, ZoomInfo, ContactOut, and LinkedIn Sales Navigator, used under their terms), company websites, public listings, filings and press, and data our customers already hold.
  • Purpose: to give a business customer a list of relevant professional contacts for B2B outreach. Basis: legitimate interests (ours and our customers') in business-to-business marketing. We only use professional, business-related information.
  • We don't invent contact details: what we can't verify is marked as not found. We don't research behind logins in breach of a platform's terms.
  • Who receives it: the customer who ordered the list. They become a controller of that data and must use it lawfully, including under PECR.

You can object to this at any time. Email mahabubalq@gmail.com with the details you'd like removed and we'll stop including you in future lists and add you to our suppression list.

Who we share it with

We use these service providers to run the business. Each acts on our instructions under a data processing agreement:

  • Supabase: our database and sign-in system.
  • Stripe: payments and subscriptions.
  • Resend: sending email.
  • Cloudflare: file storage for briefs and deliveries.
  • Vercel: hosting the website.
  • OpenAI or OpenRouter: when switched on, the website assistant sends your chat message, recent messages in that chat, and passages from our site to an AI model to write an answer. AI is also used to draft order confirmations (from your brief's text, not your files) and reminder emails (from the order description, not your name or email).
  • Calendly, if you book a call, and WhatsApp, if you choose to message us there. These are links you choose to open, and those services handle what you share with them under their own policies.

We may also share data when the law requires it, or with professional advisers and a successor business if Mytecnic is sold or restructured.

International transfers

Some of these providers store or process data outside the UK, including in the United States and Asia. Where they do, the transfer is protected by the UK's adequacy regulations or by the provider's contractual safeguards (the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses).

How long we keep it

  • Files you upload with a brief, and files we deliver: deleted automatically after a short period, 7 days by default. The brief's text stays with your order.
  • Orders, payments, and invoices: for as long as UK tax law requires, normally 6 years after the end of the financial year they relate to.
  • Your account: until you ask us to close it.
  • Website assistant chats, form submissions, and emails we've sent: until we no longer need them for the purpose above, and you can ask us to delete yours at any time.
  • Unsubscribe requests: indefinitely, so we can keep honouring them.

Your rights

Under UK data protection law you can ask us to:

  • give you a copy of your personal data;
  • correct anything that's wrong;
  • delete your data, including closing your account;
  • restrict or object to how we use it, including any use based on legitimate interests (always including direct marketing);
  • send your data to you or another company in a portable format.

Email mahabubalq@gmail.com to use any of these. We'll reply within one month and may ask you to confirm your identity. These rights don't apply in every case (for example, we must keep financial records), and we'll explain if one doesn't.

You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113, though we'd appreciate the chance to put things right first.

Cookies and browser storage

We use a small number of cookies and browser storage items that the site needs to work. They don't track you across other sites:

  • Sign-in cookies (set by our authentication provider) keep you signed in to your account. Strictly necessary.
  • mt_chat_vid: a random ID, kept for 90 days, set only when you send a message to the website assistant, so your conversation continues. Strictly necessary for that feature.
  • Browser storage that remembers small preferences and progress on your own device: whether you've seen the assistant's or WhatsApp's greeting, your current chat, and an export order you're part-way through. It isn't sent to us.

The booking calendar (Calendly) may set its own cookies when you open it.

We don't use advertising cookies. If we add analytics, we'll ask for your consent first and update this policy.

Security

Data is encrypted in transit, access to our systems is limited to the people who need it, files are only downloadable by the customer who owns the order and our team, and provider keys are encrypted at rest. No system is perfectly secure, but we'll tell you and the ICO without undue delay if a breach puts your data at risk.

Changes to this policy

We'll update this page when how we handle data changes, and change the date at the top. If a change is significant, we'll tell customers by email.