Who is responsible
The data controller is The Master Field, trading as The Master Field. You can contact us about privacy at themasterfield.ml@gmail.com, at Happu Garha, Amenabad Road, Sialkot, Pakistan. We also maintain business contact details for Bologna, Italy.
Information we collect
| Source | Information | Why we use it |
|---|---|---|
| Quote inquiries | Name, email, optional phone number, product interest, message, submission time, inquiry status, and the accepted website terms version and time. | To respond, prepare quotations, discuss manufacturing, and keep a record of business correspondence. |
| Consent-based analytics | A random browser identifier, page path, referral origin, and visit time. The analytics table does not store your name, email, or IP address. | To understand which pages and products are useful and improve the website. This collection starts only after you accept analytics. |
| Technical records | Hosting providers may process IP address, browser or device details, request time, and security logs. The application also stores a short-lived keyed hash derived from the IP address to enforce abuse limits; it does not store the raw address in the application database. | To deliver the site, prevent abuse, diagnose faults, and protect our systems. |
| Admin access | Authorized administrator email, account ID, and secure session tokens. | To restrict product, inquiry, and website management to authorized staff. |
Legal bases
We process inquiry information to take steps at your request before entering a contract and for our legitimate interests in responding to customers, managing business relationships, and defending legal claims. We process optional website analytics only with your consent. We process essential technical and security information for our legitimate interests in operating and protecting the website and, where applicable, to meet legal obligations.
Sharing and service providers
We use Supabase for database, storage, and administrator authentication. Our website hosting provider also processes technical requests needed to deliver the site. Authorized staff and professional advisers may access information where necessary. We do not sell personal information and do not use it for third-party advertising.
International access
We operate in Pakistan and Italy, so inquiry information may be accessed from Pakistan and may be processed in other countries used by our providers. Where European data-transfer rules apply, we use legally recognized safeguards, such as approved contractual clauses, and assess provider protections as required.
How long we keep information
- Inquiry records are deleted 24 months after their last update.
- Consent-based page-visit records are deleted after 13 months.
- Application rate-limit hashes are deleted after 2 days.
- Your analytics browser identifier expires after 13 months.
- Your privacy choice expires after 6 months, when we ask again.
- Admin access cookies last for the session period described in our cookie notice.
- Security records may be kept longer where reasonably needed to investigate abuse, comply with law, or establish or defend legal claims.
Your rights
Depending on where you live, you may have rights to access, correct, delete, restrict, or receive a copy of your personal information, and to object to certain processing. You can withdraw analytics consent at any time through "Privacy choices" in the footer without affecting earlier lawful processing. You may also complain to your local data-protection authority.
To make a request, email themasterfield.ml@gmail.com. We may need to verify your identity before completing a request.
Changes to this notice
We may update this notice when our services, providers, or legal obligations change. The current version and update date will always appear on this page.