Privacy Policy.

About this policy

This policy describes information connected with the MaxZen IT website at maxzenit.com and communications you choose to have with us. MaxZen IT provides Digital Marketing and SEO services, with website design as a supporting service.

A separate agreement may describe how information is handled when we work on a client project. An enquiry through this website does not give us access to your advertising accounts, analytics or other business systems. Any project access must be agreed separately.

Information you choose to share

The contact form asks for your name, email address, service interest and message. Company name and website address are optional. We use these details to understand your enquiry, reply and discuss possible work. Please do not submit passwords, payment details or sensitive information that is unnecessary for your request.

When submissions are enabled, a successful form submission is stored in a private enquiry inbox in our Supabase database. Only authorised administrators can read or manage that inbox through the website. The form does not subscribe you to marketing and does not send an automatic email notification. Email and telephone links open the relevant application or service on your device.

Career applications and CVs

When applications are enabled, the careers form asks for your name, email address and a PDF CV. A phone number, HTTPS portfolio link and cover letter are optional. We use these details and the role you applied for to review your application and discuss that opportunity. Please avoid sensitive information that is unnecessary for recruitment.

Applications are held in a private Supabase database and CV storage bucket. Authorised administrators can review applications, update their review status and download CVs through a protected website endpoint. CVs are not published as website media. An email address supplied in this form is not a verified identity. A successful submission confirms storage of the application; it does not send an automatic email or subscribe you to marketing.

After you choose to submit, details may briefly be staged privately while the CV is checked and stored. Signed form tokens, hashed retry receipts and shared and hashed-email counters help limit repeated submissions and confirm safe retries. The application records do not save a visitor IP address or browser user agent. Hosting and infrastructure services may process their own request logs. Administrators can clear unfinished uploads through the private workspace.

Application details and CVs are kept for recruitment review and related follow-up. Authorised administrators can permanently remove an application and its active CV through the workspace; provider backups or separate correspondence may follow different retention arrangements. Short-lived hash receipts can remain after deletion to prevent a retry recreating the application. Contact us about access, correction or removal of information you have shared.

Website operation and security

When a page or image is requested, the services delivering the website receive technical request information, such as an IP address, requested address, request time and information supplied by the browser. Operational logs may be processed by the hosting and infrastructure providers used to deliver and protect the website.

The enquiry form uses a short-lived signed form token and checks repeated submissions. A hashed submission key and a hash of the form details support safe retries; a hashed email identifier and a shared counter limit repeated enquiries. These checks do not store a visitor IP address or browser user agent in the enquiry inbox. Hosting and infrastructure providers may still process their own request logs.

The private content workspace is for authorised administrators. Its authentication service handles account information and sign-in sessions. Protected actions check administrator access and limit repeated requests; identifiers used by those rate limits are stored in a hashed form.

Cookies and browser storage

The animation pause control stores a preference named maxzen-motion-paused in your browser's local storage. This preference stays on that browser and is read to remember your animation choice. The control does not send that preference to MaxZen IT.

The administrator sign-in and password-recovery flows use cookies to maintain and verify access to the private workspace. Ordinary visitors do not need an administrator account to read the public pages.

This website currently has no visitor analytics script, advertising pixel or remarketing tracker integrated into its public pages. If this changes, the information here and any choices required for the new tools should be updated before those tools are enabled.

Services used to run the website

Website hosting, authentication, storage and communication services process the information needed to deliver their functions. When connected, Supabase provides the private enquiry database and the content workspace authentication, database and media-storage functions.

Email and telephone providers process communications when you contact us through those services. Published website images and page content are available to visitors. Draft content and workspace access are restricted to authorised administrators. Information may also need to be disclosed where applicable law requires it.

Keeping and protecting information

Enquiry records are kept to respond, follow up on requested work and maintain records needed for that relationship. Authorised administrators can permanently remove an enquiry from the website inbox. The appropriate retention period depends on the request, any resulting agreement and applicable record-keeping requirements. Provider backups or separately retained correspondence may follow different retention arrangements; ask us about a particular record.

Short-lived duplicate-submission receipts and expired enquiry rate counters are eligible for cleanup after expiry. Receipts contain hashes rather than the message itself and can briefly remain after an enquiry is deleted, to prevent a retry recreating it. These operational records are not a saved copy of your message.

The content workspace keeps saved revisions and publication records to support editing and recovery. Removing material from a live page does not necessarily remove earlier revisions or copies already cached by delivery services. Administrative access checks and private draft storage help restrict access; no internet service can promise complete security.

Your choices and requests

You can read the public pages without submitting an enquiry. You can change the animation setting with the on-page control, use your device's reduced-motion preference, or clear the website's local storage in your browser. Clearing authentication cookies may sign you out of the private workspace.

Contact us if you want to ask about personal information you have shared, correct it or request its removal. Describe your request without including unnecessary sensitive information. We may need to confirm your identity, and the options available depend on the information, applicable law and any records we are required to keep.

Links to other services

This website may link to external websites or social profiles. Following a link takes you to a service with its own information practices. Review that service's privacy information before providing personal details.

Updates to this policy

We may revise this policy as the website and the way we work change. The last-updated date identifies the version displayed on this page. Review this page again when you use a new feature or want to understand a change.