Privacy Policy

Maya  |  Last Updated: March 2026

1. Introduction

Maya ("we", "us", or "our") is committed to protecting the privacy and personal data of everyone who interacts with our website. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and what rights you have in relation to your data.

This policy applies to all personal data collected through our website, including via our contact form, direct email correspondence, cookies, and any links to third-party platforms such as LinkedIn.

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and where applicable, the EU General Data Protection Regulation (EU GDPR). Maya acts as the data controller in respect of your personal data.

2. Who We Are and How to Contact Us

Maya is a B2B SaaS company. For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact us at:

Email: hello@trustmaya.com

We aim to respond to all privacy-related enquiries within 30 days.

3. What Personal Data We Collect

We collect personal data in the following ways:

3.1 Contact Form

When you complete and submit the contact form on our website, we collect the information you provide. This typically includes:

• Your full name

• Your business email address

• Your company name and job title (if provided)

• Your phone number (if provided)

• The content of your message or enquiry

3.2 Direct Email Contact

If you email us directly at our published email address, we will collect your name, email address, and any information you choose to include in your message.

3.3 Cookies and Usage Data

Our website is hosted on Wix and uses cookies to operate and improve your experience. Cookies are small text files placed on your device when you visit our site. We use the following categories of cookies:

• Essential cookies: These are necessary for the website to function and cannot be switched off. They enable basic site functionality, security, and operation of our contact form.

• Analytics cookies: These help us understand how visitors interact with our website by collecting information in an anonymous or aggregated form, such as pages visited and time spent on the site. This data is used solely to improve our website performance and user experience.

• Marketing and advertising cookies: These are used to track visitor activity on our website and help us understand the effectiveness of our marketing. These cookies are set and managed by Wix and are only placed on your device with your consent.

When you first visit our website, you will be presented with a cookie consent banner. You may accept or decline non-essential cookies at that point. Essential cookies will be set regardless of your choice, as they are required for the site to operate.

You can manage or withdraw your cookie preferences at any time by adjusting your browser settings or clearing your cookies. Declining non-essential cookies will not affect your ability to use our website or contact us.

For more information on the specific cookies set by Wix as our website platform, please refer to the Wix Privacy Policy at wix.com/about/privacy.

3.4 LinkedIn

Our website contains a link to Maya's LinkedIn company page. If you choose to follow or interact with us on LinkedIn, that activity is governed by LinkedIn's own Privacy Policy. We do not receive personal data about LinkedIn visitors unless you contact us directly through that platform.

4. Legal Basis for Processing

We must have a lawful basis for processing your personal data. Depending on the context, we rely on the following legal bases:

4.1 Legitimate Interests

Where you have proactively contacted us through our website or by email, we process your data on the basis of legitimate interests — specifically, our legitimate interest in responding to business enquiries and engaging in pre-sales conversations with prospective customers. You contacted us with the intent of learning more about Maya's products or services; following up on that enquiry is an expected and proportionate use of your information.

We have carried out a balancing test and are satisfied that our legitimate interests in processing this data are not overridden by your rights and interests.

4.2 Consent

Where we use non-essential cookies (such as analytics and marketing cookies), we rely on your consent, obtained via our cookie consent banner. You may withdraw this consent at any time. We will also seek consent before adding you to any marketing communications.

4.3 Legal Obligation

In some circumstances, we may be required to process personal data to comply with a legal obligation, such as a requirement from a regulatory authority or court order.

5. How We Use Your Personal Data

We use the personal data we collect for the following purposes:

• To respond to your enquiry and answer any questions you have raised

• To assess whether Maya's products or services may be relevant to your business needs

• To follow up with you as part of a B2B sales conversation, where this is proportionate and expected given the nature of your initial contact

• To manage our relationship with you as a prospective customer

• To analyse how our website is used, in order to improve its content and performance

• To comply with legal and regulatory obligations where applicable

We do not use your data for automated decision-making or profiling. We do not send unsolicited marketing emails or add contacts to email distribution lists without their knowledge and consent.

6. How Long We Keep Your Data

We retain personal data only for as long as necessary for the purposes for which it was collected, or as required by law. In practice:

• Enquiries that do not result in an ongoing relationship: we will retain your data for a reasonable period to manage the follow-up process, after which it will be securely deleted or anonymised.

• Enquiries that develop into an active sales process: we will retain your data for the duration of that process and for a reasonable period thereafter.

• Ongoing business relationships: we will retain relevant contact data for the duration of that relationship and for a period after it ends, as required for legal or legitimate business purposes.

• Cookie data: analytics and marketing cookie data is retained in accordance with the relevant cookie lifespan, typically between session-end and 12 months.

If you would like us to delete your data earlier than this, please contact us and we will action this unless we have a legal obligation to retain it.

7. Who We Share Your Data With

We do not sell, rent, or trade your personal data to third parties.

We may share your data with a limited number of trusted third parties who help us operate our business. These may include:

• Wix.com, our website hosting platform, which processes data in connection with site operation and cookies

• CRM or sales management software providers used to manage prospect and customer records

• Email service providers used to manage and store business correspondence

• IT infrastructure and cloud hosting providers

Where we share data with third-party service providers, we ensure that appropriate contractual safeguards are in place, including Data Processing Agreements where required under UK GDPR.

We will disclose personal data to law enforcement or regulatory authorities where required to do so by law.

8. International Data Transfers

Where we use third-party service providers (such as Wix or cloud software tools) that process data outside the UK or European Economic Area (EEA), we ensure that appropriate safeguards are in place. These may include:

• Adequacy decisions by the UK Government or European Commission

• Standard Contractual Clauses (SCCs) approved by the relevant authority

• Other legally recognised transfer mechanisms

You may contact us if you would like more information about the specific safeguards in place for any particular transfer.

9. Data Security

We take the security of your personal data seriously and have implemented appropriate technical and organisational measures to protect it against unauthorised access, loss, destruction, or alteration. These measures include:

• Secure email communications and access controls

• Password protection and access limitations on systems that store personal data

• Use of reputable, security-certified third-party tools and platforms

While we take every precaution, no method of data transmission over the internet or electronic storage is entirely secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority in accordance with our legal obligations.

10. Your Rights Under UK GDPR

As a data subject, you have the following rights in relation to your personal data:

Right of Access

You have the right to request a copy of the personal data we hold about you (known as a Subject Access Request). We will respond within one month.

Right to Rectification

You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.

Right to Erasure ('Right to be Forgotten')

You have the right to request that we delete your personal data where there is no compelling reason for us to continue processing it. This right is not absolute and may be subject to legal or legitimate business exceptions.

Right to Restrict Processing

You have the right to ask us to restrict the processing of your data in certain circumstances.

Right to Data Portability

Where we process your data on the basis of consent or contract, you have the right to receive your data in a structured, commonly used, machine-readable format.

Right to Object

You have the right to object to processing that is based on our legitimate interests. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests.

Right to Withdraw Consent

Where we process your data on the basis of consent — including cookie consent — you may withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing carried out before withdrawal.

How to Exercise Your Rights

To exercise any of the above rights, please contact us at hello@trustmaya.com. We will respond within 30 days. We may need to verify your identity before processing your request.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at www.ico.org.uk or by calling 0303 123 1113.

11. Cookies and Tracking Technologies

As described in Section 3.3, our website uses essential, analytics, and marketing cookies via the Wix platform. We operate a cookie consent banner that allows you to accept or decline non-essential cookies when you first visit our site. You can update your preferences at any time through your browser settings.

We comply with the Privacy and Electronic Communications Regulations (PECR) and UK GDPR in our use of cookies and will obtain your consent before setting any non-essential cookies.

12. Third-Party Links

Our website contains a link to Maya's LinkedIn company page. LinkedIn is operated by LinkedIn Ireland Unlimited Company and is governed by its own Privacy Policy, which we encourage you to review. We are not responsible for the privacy practices of third-party websites.

13. Children's Data

Our website and services are directed at business professionals and are not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us immediately and we will take steps to delete it.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the services we offer. When we make significant changes, we will update the 'Last Updated' date at the top of this policy.

Where changes are material and you have provided us with your contact details, we will endeavour to notify you directly.

15. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your rights, or have a concern about how we handle your personal data, please contact us:

Email: hello@trustmaya.com
Company: Maya

We take privacy seriously and are committed to handling your personal data with care, transparency, and respect.