MAKANHome
Legal

Privacy Policy

Last updated: 27 July 2026

Effective date: 27 July 2026

This Privacy Policy explains how Makan LLC (“Makan”, “we”, “our”, or “us”) collects, uses, shares, and protects personal information when you visit makanmedia.com, contact us through the site, or engage us as a client. It also describes the rights you have under US state privacy laws (including the California Consumer Privacy Act as amended by the CPRA, and the Virginia, Colorado, Connecticut, Utah, and Texas privacy laws) and, where applicable, the EU and UK General Data Protection Regulation.

Questions or requests? Email privacy@makanmedia.com or partners@makanmedia.com.

1. Summary

  • We collect what you send us through the enquiry form, plus limited technical and analytics data.
  • We do not sell personal information for money.
  • We use PostHog for analytics and masked session recordings. Under some US state laws, use of these tools may be classified as “sharing” or “targeted advertising / cross-context behavioral advertising.” You can opt out at any time.
  • You can opt out by clicking “Do Not Sell or Share My Info” in the footer, by rejecting analytics in the cookie banner, or by sending a Global Privacy Control signal from your browser (we honor it automatically).
  • We do not knowingly collect information from anyone under 16.

2. Information we collect

Categories of personal information we collect (with the CCPA/CPRA category in brackets):

  • Enquiry form data [identifiers; commercial information]: name, company, business email, and the message you send.
  • Technical metadata [internet or other electronic network activity information]: a truncated user-agent string, a one-way SHA-256 hash of your IP address (raw IP is never stored), timestamps, and referrer.
  • Analytics and product events [internet or other electronic network activity information; inferences]: pseudonymous device identifiers, page URLs, device and browser information, interaction events, and session recordings with all form inputs masked before recording.
  • Enquiry notifications [identifiers]: when you submit the enquiry form, we store your submission and send a notification email to our team so we can reply.
  • Account data (admin users only) [identifiers]: email address and hashed password for authorized Makan staff who access the admin area.
  • Client engagement data [identifiers; commercial information; professional information]: contact details, agreements, invoicing information, and any data your business provides so we can deliver work.

We do not intentionally collect any category of “sensitive personal information” as defined by California law. We do not use sensitive personal information to infer characteristics about you.

3. Sources of personal information

  • Directly from you (the enquiry form, email, calls, meetings).
  • Automatically from your device (analytics, cookies, similar technologies).
  • From our service providers listed in section 6.

4. How we use personal information

  • To reply to your enquiry and, where relevant, prepare a proposal.
  • To provide, maintain, and improve the website and our services.
  • To send transactional communications directly related to work we do together.
  • To measure marketing performance and understand how the site is used.
  • To detect, prevent, and respond to fraud, abuse, and security incidents.
  • To comply with legal, tax, and accounting obligations, and to enforce our terms.

We do not use automated decision-making or profiling that produces legal or similarly significant effects about you.

5. Legal bases (EEA / UK visitors)

  • Consent for analytics, session recordings, and marketing communications.
  • Steps at your request prior to a contract when we reply to your enquiry.
  • Performance of a contract when we deliver engagements.
  • Legitimate interests for site security, service improvement, and business administration, balanced against your rights.
  • Legal obligation for tax, accounting, and lawful requests from authorities.

6. How we share personal information

We share personal information only with the service providers below, all of whom are bound by contract to process it on our behalf and only for the purposes we specify. We do not sell personal information for money.

  • Lovable Cloud (managed hosting and database, powered by Supabase): hosts the website and stores enquiry submissions and admin account credentials.
  • PostHog (product analytics and session recordings, EU region where available): receives pseudonymous analytics events and masked recordings.
  • Email delivery provider (transactional email for enquiry notifications and password resets).
  • Ad and social platforms (Meta, Google, LinkedIn, TikTok, YouTube, and comparable services): only when engaged as a client, and only with data you or your business provide so we can run and measure campaigns on your behalf.
  • Professional advisors (lawyers, accountants, auditors) under duties of confidentiality.
  • Authorities and successors: when required by law, court order, or a lawful request from a government body, and in connection with a merger, acquisition, financing, or sale of assets.

7. “Sale” and “sharing” disclosures (California and other US states)

Makan does not sell personal information for money. However, under California’s CPRA and similar laws in Colorado, Connecticut, and Virginia, the use of analytics and advertising cookies may be classified as “sharing” for cross-context behavioral advertising or as “targeted advertising.”

  • Categories of personal information we may “share” in this technical sense: identifiers (pseudonymous cookie IDs) and internet or other electronic network activity information (page URLs, interaction events).
  • Recipients: analytics and, when active on the site, advertising platforms.
  • We have not knowingly “sold” or “shared” the personal information of anyone under 16 in the past 12 months.

You can opt out at any time by clicking “Do Not Sell or Share My Info” in the site footer, by rejecting analytics in the cookie banner, or by enabling Global Privacy Control in your browser. We honor a valid GPC signal as an opt-out of sale and sharing.

8. Cookies and similar technologies

The site uses three groups of technologies:

  • Strictly necessary: needed to run the site and maintain admin sessions. Always on.
  • Analytics and session recordings: PostHog. Off by default for visitors who reject analytics or send a GPC signal.
  • Advertising: not currently active on this site. If we add advertising cookies in future we will update this policy and require a fresh consent choice.

You can manage your choices at any time from the “Do Not Sell or Share My Info” link in the footer, or from your browser settings.

9. Retention

  • Enquiry submissions: up to 36 months, then deleted or de-identified.
  • Analytics events and session recordings: up to 12 months.
  • Admin account records: for as long as the account is active, then 12 months.
  • Client engagement records: for as long as required for legal, accounting, and tax obligations (typically up to 7 years).
  • Backups: rotated on our provider’s standard schedule.

10. International transfers

Makan is based in the United States. Our processors may store or process information in the United States, the European Union, the United Kingdom, and other regions. Where required, we rely on Standard Contractual Clauses, the UK International Data Transfer Agreement, or an equivalent lawful transfer mechanism. A copy of the relevant mechanism is available on request.

11. Your US state privacy rights

If you are a resident of California, Colorado, Connecticut, Virginia, Utah, Texas, or another US state with a comprehensive privacy law, you may have some or all of the following rights, subject to verification and legal exceptions:

  • Right to know / access the categories and specific pieces of personal information we hold about you and, in California, our sources, purposes, and recipients.
  • Right to correct inaccurate personal information.
  • Right to delete personal information we hold about you.
  • Right to portability: a copy of your information in a readable format.
  • Right to opt out of the sale of personal information, of sharing for cross-context behavioral advertising, and of targeted advertising.
  • Right to limit the use of sensitive personal information (California). We do not use sensitive personal information for purposes that require this limit.
  • Right to non-discrimination for exercising your rights.
  • Right to appeal (Colorado, Connecticut, Virginia, and other states): if we deny a request, you may appeal by replying to our decision email, and we will respond within 45 days.

How to submit a request. Email privacy@makanmedia.com with the state you reside in and the request you want to make. You may use an authorized agent; we may ask the agent to provide written authorization and may verify your identity directly. We will respond within 45 days (extendable by 45 days where permitted).

California “Shine the Light” (Cal. Civ. Code § 1798.83). California residents may request information about disclosures of personal information to third parties for those parties’ direct marketing purposes. We do not disclose personal information for third-party direct marketing.

Nevada residents. Nevada law lets Nevada consumers opt out of the sale of certain covered information. We do not sell covered information as defined by Nevada law. You may still submit a request to privacy@makanmedia.com.

12. Your EU / UK GDPR rights

If you are in the EEA, UK, or Switzerland, you may have the rights of access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. Where we rely on consent, withdrawing it does not affect the lawfulness of prior processing. You may lodge a complaint with your local supervisory authority (in the UK, the Information Commissioner’s Office).

13. Security

Data is transmitted over TLS. Enquiries are stored in a database with row-level security policies and are readable only by authorized admin users. Passwords are hashed and checked against known-compromised password lists at sign-up. No system is perfectly secure; you use the site at your own risk and should never send us sensitive information you do not want stored.

14. Children

This website is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided information to us, email privacy@makanmedia.com and we will delete it.

15. Third-party links

The website may link to third-party sites and services. Their privacy practices are governed by their own policies, not ours.

16. Changes to this policy

We may update this policy from time to time. Material changes will be highlighted on this page and, where required by law, communicated to you directly. The “Last updated” date at the top of this page always reflects the current version.

17. Contact

Makan LLC · United States
Privacy requests: privacy@makanmedia.com
General: partners@makanmedia.com

← Back to Makan