Privacy Policy

1. Overview

Mavacore ("we", "us", or "our") operates the website mavacore.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our site, submit a form, post a comment, or otherwise interact with our services.

By using the site, you agree to the terms of this policy. If you do not agree, please discontinue use of the site.

2. Information We Collect

We collect information you provide directly, information collected automatically, and limited information from third-party service providers.

• Account & form data: name, email, message content, and any optional fields you fill in (project briefs, testimonials, comments).
• Submission metadata: timestamps, approval status, and the project or page the submission relates to.
• Technical data: IP address, browser type, device type, referrer URL, and pages visited, collected via standard server logs and analytics.
• Cookies and similar technologies: see the Cookies section below.
• Hashed identifiers: when you submit a form, your email address and any phone number you provide are converted to one-way SHA-256 hashes before transmission. The hash — not your original details — is sent to TikTok so that conversions can be matched to the advertisement that produced them. Phone numbers are reduced to digits (including country code) before hashing.
• Advertising click identifiers: if you arrived from a TikTok advert, the ttclid value from the landing page is passed along so the conversion can be attributed to that advert.

3. How We Use Your Information

We use the information we collect to:

• Operate, maintain, and improve the site and our services.
• Respond to inquiries submitted through the contact form.
• Display testimonials and comments after they have been reviewed and approved.
• Measure the performance of our advertising, including which campaigns and content lead to enquiries. We use hashed identifiers and conversion events (such as viewing a project, clicking a call to action, and submitting the contact form) for this purpose.
• Detect, prevent, and address security incidents or abuse.
• Comply with legal obligations and enforce our terms.

4. Disclosure of Your Information

We do not sell your personal information. We share information only with:

• Service providers: vendors that help us run the site (hosting, database, email delivery). The primary provider is Google Firebase, which stores our database and authentication data.
• Legal and safety: when required to comply with applicable law, valid legal process, or to protect the rights, property, or safety of Mavacore, our users, or others.
• Business transfers: in connection with a merger, acquisition, or sale of assets, with appropriate confidentiality protections.

5. Cookies & Similar Technologies

We use a minimal set of cookies and local storage mechanisms to keep you signed in to the admin area and to remember UI preferences.

We also use the TikTok Pixel and the TikTok Events API, third-party advertising and analytics tools provided by TikTok. These place cookies and read or write information in your browser and receive event data from our server, in order to measure the effectiveness of our advertising and to build an audience for our content and advertising. Data collected this way may include your IP address, browser and device information, referring pages, and your interactions with the Site. Events we report include viewing a project, clicking a call to action, and submitting the contact form.

We do not use third-party advertising cookies other than those described above.

You can disable cookies in your browser settings, or opt out of personalised advertising through the TikTok Privacy Center, to limit this tracking. Some site features (such as the admin sign-in) may stop working if cookies are fully disabled.

• TikTok Privacy Center

6. Data Retention

We retain personal information for as long as needed to provide our services and comply with legal obligations. Testimonials and comments remain published until you request removal, after which they are deleted within 30 days.

Server logs and analytics data are retained for up to 12 months.

7. Your Rights

Depending on your location, you may have the right to access, correct, delete, or port your personal information, and to object to or restrict certain processing. To exercise any of these rights, contact us using the details below and we will respond within 30 days.

8. Security

We use industry-standard safeguards, including encryption in transit (HTTPS / TLS) and access controls on our database. No method of transmission or storage, however, is 100% secure, and we cannot guarantee absolute security.

9. Children's Privacy

Our services are not directed to children under 13, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects when the policy was last revised. Material changes will be communicated through the site or by email where appropriate.

11. Contact

Questions about this policy or our handling of your data can be sent to hello@mavacore.com.