Privacy Policy

This Privacy Policy outlines how we collect, use, share, and protect your information on our website and services.

Last updated: September 2026

1. Introduction

Mafunzo Technologies Ltd (“we”, “us”, or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect and use personal data when you visit our website or submit an enquiry via our contact form, and sets out your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Mafunzo Technologies Ltd is the data controller for personal data collected via this website. Our registered office is in England and Wales (Company No. 16373299).

2. Data We Collect

We collect a limited amount of personal data through two mechanisms:

2.1 Website Analytics (Google Analytics)

We use Google Analytics to understand how visitors use our website. Google Analytics collects technical and usage information including:

IP address (anonymised);
Browser type and version;
Operating system;
Pages visited and time spent on pages;
Referring website or search terms.

This data is collected via cookies placed by Google Analytics. It is processed in aggregate and pseudonymous form to help us improve our website. Google may also use this data in accordance with its own privacy policy. We do not use Google Analytics data to identify you personally.

2.2 Google Ads Conversion Tracking (where applicable)

We do not display advertisements on this website. However, we may run advertising campaigns via Google Ads and, where we do so, we use Google’s conversion tracking functionality to measure whether visitors who clicked one of our ads subsequently completed an action on our website (such as submitting a contact form). This involves a cookie being placed on your device when you click a Google ad, which Google uses to report the conversion back to us. We receive only aggregated, anonymised conversion data; we cannot identify you individually from this data. You will be notified of conversion tracking cookies via our cookie banner and may withdraw consent at any time.

2.3 Microsoft Clarity and Microsoft Advertising

We partner with Microsoft Clarity and Microsoft Advertising to capture how you use and interact with our website through behavioural metrics, heatmaps, and session replay to improve and market our products and services. Website usage data is captured using first- and third-party cookies and other tracking technologies to determine the popularity of products/services and online activity. Additionally, we use this information for site optimisation, fraud/security purposes, and advertising. For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement.

Microsoft Clarity’s session replay captures pointer movement, scrolling, clicks, and page content. We enable Clarity’s masking so that text you type into form fields is not recorded. These technologies are only activated where you have given consent via our cookie banner, and you may withdraw that consent at any time.

2.4 Contact Form

When you submit an enquiry via our contact form, we collect the information you provide, which may include:

First name and last name;
Email address;
Organisation name;
Phone number (if provided);
The content of your message.

We use this information solely to respond to your enquiry and, where you have requested it, to follow up regarding our products and services.

3. Cookies

We use only the following cookies on this website:

Cloudflare cookies (strictly necessary): Cloudflare, our website infrastructure provider, sets standard cookies (such as __cf_bm and _cfuvid) to support security functions including bot management, rate limiting, and load balancing. These are strictly necessary for the website to operate securely and do not require your consent.
Google Analytics cookies (analytics/performance): to measure website usage in aggregate and pseudonymous form.
Google Ads conversion tracking cookies (marketing): only placed if you have arrived via a Google Ads campaign. These allow us to measure whether a click on one of our ads resulted in an enquiry or other conversion action on this website.
Microsoft Clarity and Microsoft Advertising cookies (analytics and marketing): first- and third-party cookies and similar tracking technologies used to record behavioural metrics, heatmaps, and session replays of how you interact with the website, and to support advertising, measurement, site optimisation, and fraud/security purposes.

Aside from the cookies listed above, we do not use any other cookies, and we do not display third-party advertising on this website. Analytics and marketing cookies are only placed with your consent. You can control or delete non-essential cookies through your browser settings or via our cookie banner. Blocking analytics or marketing cookies will not affect your ability to use the website.

4. Lawful Basis for Processing

We process your personal data on the following lawful bases under UK GDPR Article 6:

Consent (Article 6(1)(a)): We rely on your consent for Google Analytics cookies, Microsoft Clarity and Microsoft Advertising cookies and tracking technologies, and, where applicable, Google Ads conversion tracking cookies, which you provide or withdraw via our cookie banner.
Legitimate interests (Article 6(1)(f)): We rely on our legitimate interest in operating and improving our website for the processing of anonymised analytics data and for responding to contact form enquiries. Cloudflare’s strictly necessary cookies are also processed on this basis (and do not require consent under PECR).

Where we rely on legitimate interests, we have assessed that our interests do not override your rights and freedoms, given the limited and pseudonymous nature of the data involved.

5. How We Use Your Data

We use the personal data we collect for the following purposes:

To analyse website traffic and improve our website (Google Analytics data);
To understand how visitors navigate and interact with our website through behavioural metrics, heatmaps, and session replay (Microsoft Clarity);
To optimise our website, market our products and services, and support fraud prevention and security (Microsoft Clarity and Microsoft Advertising);
To measure the effectiveness of Google Ads campaigns via conversion tracking (where applicable);
To respond to your enquiries submitted via the contact form;
To follow up on your interest in our products or services, where you have requested this.

We will not use your data for any purpose that is incompatible with the purpose for which it was collected without first seeking your consent.

We do not sell or rent your personal data. Except as described in this section, we do not share your personal data with third parties for their own marketing purposes. The third parties involved are:

Google LLC, acting as a data processor for Google Analytics and, where applicable, Google Ads conversion tracking. Google may transfer data to the United States; this transfer is covered by Google’s Data Processing Addendum and Standard Contractual Clauses (SCCs) pursuant to UK GDPR Article 46.
Cloudflare Inc., acting as a data processor for website infrastructure, security, and performance services. Cloudflare may process limited technical data (including IP addresses) on our behalf. Cloudflare’s transfers outside the UK are covered by Standard Contractual Clauses.
Microsoft Corporation (and its affiliates, including Microsoft Ireland Operations Ltd), in connection with Microsoft Clarity and Microsoft Advertising. Microsoft processes website usage data, including data captured through session replay and heatmaps, and uses it both on our behalf and, as described in the Microsoft Privacy Statement, for its own purposes including advertising, measurement, and fraud and security. Microsoft may transfer data to the United States under Standard Contractual Clauses.

No other third parties receive your personal data.

We may disclose your personal data where required by law, court order, or regulatory obligation.

7. International Data Transfers

Google Analytics and Google Ads conversion tracking data may be transferred to and processed in the United States by Google LLC. Website usage data collected via Microsoft Clarity and Microsoft Advertising may be transferred to and processed in the United States by Microsoft Corporation. Technical data processed by Cloudflare Inc. for security and infrastructure purposes may also be transferred internationally. We ensure that all such transfers are subject to appropriate safeguards under UK GDPR, including Standard Contractual Clauses as approved by the UK Information Commissioner’s Office (ICO).

8. Data Retention

We retain personal data only for as long as is necessary for the purpose for which it was collected:

Google Analytics data is retained for 26 months (Google’s default retention period), after which it is automatically deleted.
Microsoft Clarity data is retained by Microsoft for up to one year, after which it is automatically deleted.
Contact form enquiry data is retained for up to 2 years from the date of last contact, after which it is securely deleted, unless an ongoing business relationship requires longer retention.

9. Data Security

We have implemented appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Access to contact form submissions is restricted to personnel who need it to respond to enquiries. We review our security measures regularly.

10. Your Rights

Under UK GDPR and the Data Protection Act 2018, you have the following rights in relation to your personal data:

Right of access: to request a copy of the personal data we hold about you;
Right to rectification: to request correction of inaccurate or incomplete data;
Right to erasure (“right to be forgotten”): to request deletion of your personal data in certain circumstances;
Right to restrict processing: to request that we limit how we use your data;
Right to data portability: to receive your data in a structured, machine-readable format;
Right to object: to object to processing based on legitimate interests;
Right to withdraw consent: where we rely on consent, you may withdraw it at any time (for example, via our cookie banner). Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact us using the details in Section 12 below. We will respond within one month of receiving your request, as required by UK GDPR.

11. Right to Complain

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner’s Office (ICO):

Website: ico.org.uk
Telephone: 0303 123 1113

We would, however, appreciate the opportunity to address your concerns before you contact the ICO, so please contact us in the first instance.

12. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or have a concern about how we handle your data, please contact us at:

Mafunzo Technologies Ltd
Email: info@mafunzo.co.uk
Registered in England and Wales, Company No. 16373299