Privacy Policy

This Privacy Policy describes how MCLBPO collects, uses, stores and protects personal information when you visit our website, request a quote, or engage us for software development services.

1. Who we are

MCLBPO ("MCLBPO", "we", "our" or "us") is a software development studio operating from 548 Market St, PMB 21834, San Francisco, CA 94104, United States. We are the data controller of any personal information you submit through this website or in the course of an engagement.

2. Information we collect

We only collect information necessary to operate our business and serve our clients:

• Contact information — name, email, phone, company name and any details you voluntarily provide through our contact or quote forms.
• Engagement information — project briefs, technical requirements, access credentials you share for the purpose of delivering work.
• Billing information — billing address and tax identifiers. Card data is never stored on our servers; it is processed directly by secure payment processors.
• Technical data — IP address, browser type, device type, referring URLs, and pages visited, collected through standard web analytics.

3. How we use your information

• To respond to enquiries, prepare proposals and quotes.
• To deliver the services you engage us for.
• To issue invoices and process payments through approved gateways.
• To send service-related communications (status updates, security notices, billing).
• To comply with legal, tax and accounting obligations.

We do not sell, rent or trade your personal information. We do not send unsolicited marketing email.

4. Legal bases for processing (GDPR)

Where the GDPR applies, we rely on the following legal bases: contract (to deliver agreed services), legitimate interest (to operate and secure our business), and legal obligation (to retain financial records).

5. Sharing with third parties

We share limited data only with vetted processors who help us operate, including:

• Payment processors: Stripe, PayPal, and other secure gateways.
• Cloud infrastructure: AWS, Vercel, Cloudflare.
• Email and communication: Google Workspace.
• Accounting and tax providers under written confidentiality.

Each processor is bound by appropriate data protection agreements.

6. International transfers

Some of our processors are located outside your country. When personal data is transferred internationally, we rely on Standard Contractual Clauses or equivalent safeguards.

7. Data retention

We retain personal data only as long as necessary for the purposes set out above. Engagement records and invoices are retained for at least seven years where required by tax law. Contact-form submissions that do not lead to engagement are deleted within 24 months.

8. Your rights

Subject to applicable law, you have the right to access, correct, delete, restrict or object to the processing of your personal data, as well as the right to data portability. To exercise any of these rights, email legal@mclbpo.com. We will respond within 30 days.

9. Security

We use industry-standard safeguards including TLS 1.3 in transit, encryption at rest, principle-of-least-privilege access controls, two-factor authentication on all production systems, and routine security reviews. No system is perfectly secure; we will notify affected users without undue delay in the event of a personal-data breach.

10. Children

Our services are not directed to individuals under 16. We do not knowingly collect personal data from children.

11. Updates to this policy

We may update this Privacy Policy from time to time. Material changes will be announced on this page with a revised "Last updated" date.

12. Contact

For any privacy-related questions, contact our Data Protection lead at legal@mclbpo.com.