Privacy
Privacy notice
This notice explains what happens to personal data in connection with this website and with enquiries sent to MBUA. Last updated 10 September 2026.
Who is responsible
MBUA is the data controller for personal data described in this notice. MBUA is the trading name used by Mohbob Ali for independent architecture consultancy. Postal contact details are available on request by email.
This website
This site is a static website. It sets no cookies, uses no analytics, and loads no third-party scripts, fonts, advertising or tracking of any kind. Nothing on these pages profiles visitors or attempts to identify them, which is why no cookie banner is shown.
The site is served through Cloudflare. As part of delivering and protecting the site, Cloudflare processes technical request data such as IP address, user agent, requested URL and timestamp, and may set security-related cookies at the network level in some circumstances. This processing is carried out to keep the site available and to protect it from abuse, which is a legitimate interest under UK GDPR. Cloudflare publishes its own documentation on how it handles this data.
Enquiries by email
There is no contact form on this site. If you email MBUA, the message and the details it contains — typically your name, email address, organisation and whatever you choose to tell us about your requirements — are processed in order to respond to you and, if appropriate, to discuss and deliver work. The lawful basis is legitimate interests, or steps taken at your request before entering into a contract.
Correspondence is kept only for as long as it is needed for the enquiry or the resulting engagement, and for any period required for legal, tax or professional record-keeping. Enquiries that do not lead to work are deleted once they are no longer relevant. Client and prospective client information is not sold, rented or shared for marketing.
Confidentiality
Client names, systems, architecture details and other engagement information are treated as confidential and are not published on this site. Examples of work shown here are anonymised. Non-disclosure agreements can be put in place before technical detail is shared.
Service providers
Two categories of provider are involved: the hosting and network provider that serves this website, and the email provider used to receive and store correspondence. Both act as processors or independent controllers as appropriate, under their own terms.
Your rights
Under UK data protection law you may request access to the personal data held about you, ask for it to be corrected or erased, object to or ask for restriction of processing, and request a copy in a portable format where that applies. Requests can be sent to the email address below and will be answered within one month.
If you are not satisfied with the response, you may complain to the Information Commissioner’s Office, the UK supervisory authority for data protection.
Security
This site is served over HTTPS with a restrictive content security policy and no client-side data collection. Security issues can be reported as described in the repository’s security policy.
Contact
Questions about this notice can be sent to [email protected].
This notice may be updated from time to time. The date at the top of the page shows when it last changed.