Privacy Policy
This policy covers middlemint.com — the MiddleMint marketing website operated by Thanaaya Technologies. It does not cover a deployed MiddleMint instance run by one of our customers; those platforms are operated by that customer, who is the controller of the data on them.
Who we are
MiddleMint is a product of Thanaaya Technologies, a company licensed in Dubai, United Arab Emirates. For anything in this policy, contact [email protected].
What we collect
We collect only what you send us and what a web server necessarily records.
- Enquiry details. When you submit the demo request form, we receive your name, email address, company or project name, the jurisdiction you told us about, the plan you indicated interest in, and any message you wrote.
- Technical data. Our server records the IP address of form submissions for abuse prevention and rate limiting. Standard web-server request logs are generated as a normal part of serving the site.
We do not run advertising trackers or third-party analytics profiling on this site, and we do not set marketing cookies.
Why we use it
- To respond to your enquiry and, if you want, to continue a commercial conversation.
- To protect the site from automated abuse.
- To keep records of business enquiries as any company does.
The lawful basis, where a basis framework such as the GDPR applies to you, is our legitimate interest in responding to business enquiries and in operating the site securely, and the steps taken at your request prior to entering a contract.
Who else sees it
Enquiry data is stored on infrastructure we control. We use a third-party transactional email provider to deliver the notification to us and the acknowledgement to you, which means your name, email address and message pass through that provider in the ordinary course of sending mail. The site is served through a content delivery network, which processes request data in order to route and protect traffic.
We do not sell personal data. We do not share it with third parties for their own marketing.
Where it goes
Our infrastructure is located in Europe and the data is administered from the United Arab Emirates. If you contact us from a jurisdiction with cross-border transfer rules, this constitutes an international transfer, made on the basis of your submission of the enquiry and our legitimate interest in replying to it.
How long we keep it
Enquiry records are retained for as long as the commercial relationship or discussion is live, and afterwards for a reasonable period for business-record purposes. Ask us to delete yours and we will, unless we are required to retain it.
Your rights
Depending on where you are, you may have the right to access the personal data we hold about you, to have it corrected, to have it deleted, to restrict or object to our processing of it, and to receive a copy of it. Write to [email protected] and we will action it. We do not charge for this and we do not require a particular form of words.
Security
The site is served over TLS. Enquiry data is stored on access-restricted infrastructure. Credentials and API keys are held in environment configuration, not in source control. No system is perfectly secure, and we do not claim otherwise.
Children
This is a business-to-business site. It is not directed at children and we do not knowingly collect their data.
Changes
If we change this policy we will update the date at the top. Material changes affecting people who have already contacted us will be communicated directly.