Transparency commitments and the contracts that govern our relationship with you.
How we collect, use, retain, and protect your personal data — and the rights you have under UK GDPR and EU GDPR.
Every cookie, browser-storage key, and third-party SDK we use, with purpose, duration, and category.
The contractual terms governing your use of the Mecha Site platform and managed services.
Article 28 GDPR DPA template governing our processing of personal data on your behalf as your processor.
How to raise a data-protection complaint with us — required under the UK Data (Use and Access) Act 2025.
Current third-party processors we engage to deliver the service, with transfer mechanisms and country of operation.
Cryptography, authentication, access control, monitoring, and our SOC 2 Type II roadmap.
How we detect, contain, and notify users of personal-data breaches under UK GDPR Articles 33 and 34.
How to delete your account, what is deleted immediately, and what we retain for legal/audit reasons.
For questions about any document on this page, contact legal@mechasite.com.