Legal
Privacy notice
How M4 Digital AI handles the details you send us through this website.
Last updated: 11 November 2026
Who we are
This website is operated by M4 Digital AI, run by Mohamad Mustafa, based in Bangalore, Karnataka, India. Contact for privacy queries: Mohamad Mustafa, m4digitalai@gmail.com. We are the data controller for any personal data you share when you contact us.
Which laws apply
We follow India's Digital Personal Data Protection Act, 2023 (DPDP Act), and, where it applies to visitors in the EU or UK, the General Data Protection Regulation (GDPR) and UK GDPR. In practice that means: we collect as little as possible, use it only for the purpose you shared it for, keep it only as long as needed, and respect your rights to access, correct and delete it.
What data this website collects
None, directly. This website has no enquiry form, no account, no cookies, no analytics and no advertising trackers. We do not collect your name, email or message on this site itself.
Our host, Netlify, may process technical data such as your IP address in server logs to deliver the site and keep it secure. That is hosting data, not data we collect through a form.
What happens when you contact us
When you message us by email, WhatsApp or Instagram, you share only what you choose to send — typically your name, contact details, business details and your message. Those services are run by Google (Gmail), Meta (WhatsApp and Instagram), and each handles your message under its own privacy policy. Please do not send sensitive information, payment details or identity numbers.
Why we use it — and the lawful basis
- To reply to you and, if you agree, to work together. Under the DPDP Act this is on the basis of your consent when you message us. Under GDPR the basis is your consent (Article 6(1)(a)) and our legitimate interest in replying to enquiries (Article 6(1)(f)).
- We do not add you to a marketing list, sell your details, or use automated decision-making or profiling.
Who processes it
Netlify (hosting, via code deployed from GitHub — no personal data is stored in the code repository), Google (Gmail) and Meta (WhatsApp, Instagram). These providers may process data on servers outside India and outside the EU/UK. Where GDPR applies, transfers rely on the safeguards those providers use, such as standard contractual clauses.
How long we keep it
Only as long as needed to reply to you, and while we are working together. After that, messages are deleted on request and otherwise when no longer needed. There is no fixed retention period on this site, because this site stores no enquiries.
Your rights
Under the DPDP Act you can ask to access, correct or erase your personal data, withdraw your consent, and raise a grievance with us. Under GDPR you also have the rights to restrict processing, receive your data in a portable form, object to processing, and complain to your supervisory authority. To use any of these rights, email m4digitalai@gmail.com. We will reply within 30 days.
Withdrawing consent
You can withdraw consent at any time by emailing us or by telling us on WhatsApp or Instagram to stop contacting you. Withdrawal does not affect use of your details before you withdrew.
Children's data
This website is not intended for children under 18, and we do not knowingly collect their data. If you believe a child has sent us details, email us and we will delete them.
Cookies and tracking
This website does not use cookies, analytics or advertising trackers. If that changes, we will add a consent notice and update this page first.
Other websites
Our links to Instagram, WhatsApp and email open third-party services with their own privacy policies. We are not responsible for their practices.
Privacy queries and updates
Email m4digitalai@gmail.com. We will publish changes to this notice on this page with a new “last updated” date. This notice is general information, not legal advice.