Privacy Policy

1. Scope and role

This policy applies to information collected through this website, direct business communications, project intake, account administration, service delivery, and support interactions. It does not govern an independent website, platform, software provider, payment processor, cloud provider, or other third party that maintains its own privacy practices.

Depending on the engagement, we may act as an independent business deciding why and how ordinary business contact information is used, or as a service provider processing limited information under a client’s documented instructions. Project-specific terms, statements of work, data-processing terms, or confidentiality obligations may supplement this policy.

2. Information we collect

Information provided directly

We may receive a name, business name, role, email address, telephone number, mailing address, service selection, estimated budget, project description, technical requirements, support request, billing details, and any other information a person voluntarily includes in a message or project document.

Technical and usage information

When the website is accessed, hosting and security systems may record information such as an IP address, browser type, device type, operating system, referring page, pages viewed, approximate location derived from an IP address, timestamps, error logs, and security events. This information is used to deliver, maintain, troubleshoot, and protect the website.

Project and support information

If services are requested, we may process system inventories, account identifiers, configuration information, access and permission records, ticket history, diagnostic logs, backup requirements, vendor information, and project communications. We request only information reasonably related to the agreed scope. Clients should not provide production credentials, regulated data, or unrelated personal information through the public contact form.

Payment information

Invoices and payment records may include billing contacts, transaction references, payment status, tax-related details, and limited payment method information. Full card details are ordinarily handled by the selected payment provider and are not intended to be collected through this website.

3. How information is used

Information may be used to evaluate and respond to inquiries; prepare proposals and scopes; verify authorized contacts; deliver and support services; administer accounts; coordinate projects; issue invoices and maintain transaction records; communicate operational, security, or service notices; document client instructions; improve service quality; troubleshoot technical issues; maintain website security; prevent fraud or abuse; comply with legal duties; and establish, exercise, or defend legal claims.

We do not sell personal information. We do not use contact information for unrelated third-party advertising. If optional marketing communications are introduced, they will include a practical method to stop receiving them.

4. Legal and operational grounds

Where a law requires a stated basis, processing may be based on steps requested before entering an agreement, performance of a service agreement, legitimate interests in operating and securing the business, consent where appropriate, compliance with law, or protection of legal rights. Legitimate interests include responding to genuine business inquiries, maintaining accurate records, preventing misuse, improving service delivery, and securing systems.

5. When information may be shared

Information may be disclosed to vetted service providers that support website hosting, email, collaboration, cloud storage, invoicing, payment processing, customer relationship management, security monitoring, professional advice, and project delivery. These providers receive only the information reasonably required for their role and are expected to protect it under contractual or legal obligations.

Information may also be shared when reasonably necessary to comply with law, a valid legal request, or a court order; investigate fraud, misuse, or a security incident; protect rights, safety, systems, clients, or the public; complete a merger, financing, acquisition, reorganization, or transfer of business assets subject to appropriate confidentiality; or act with the affected person’s direction or consent.

6. International and remote processing

Remote services and cloud platforms may involve processing from, or storage in, locations outside the state or country where information originated. Where required, reasonable contractual, organizational, or provider-based safeguards are used. No transmission or storage method can be guaranteed completely secure, and geographic availability of a service provider may change.

7. Security practices

We use administrative, technical, and physical measures selected for the nature of the information and the engagement. Measures may include access controls, multi-factor authentication, encryption in transit where supported, least-privilege practices, secure configuration, logging, backups, provider review, confidentiality requirements, and incident-response procedures. Security is shared: clients must protect their own credentials, devices, personnel access, networks, and recovery information.

If a confirmed incident materially affects information under our control, we will investigate, contain, document, and provide notices when required by applicable law or contract. Security reports should be sent to the security address listed below and should not include exploit details in a public website form.

8. Retention and deletion

Information is retained for as long as reasonably necessary for the purpose collected, the service relationship, warranty or support obligations, security, recordkeeping, dispute resolution, and legal compliance. Retention periods vary by record. Inquiry records may be retained to preserve business context; contracts, invoices, and tax records may be kept for legally required periods; project backups and access materials are removed or returned according to the applicable agreement and practical deletion cycles.

Deletion from an active system does not always cause immediate deletion from encrypted backup media. Backup copies are isolated, access-restricted, and overwritten through normal retention cycles unless preservation is legally required.

9. Privacy choices and requests

Depending on location and applicable law, a person may request access, correction, deletion, restriction, portability, or information about processing, and may object to certain uses or withdraw consent where consent is the basis. We may need to verify identity and authority before acting. Rights may be limited where retention is required for legal compliance, security, billing, fraud prevention, contractual performance, or legal claims.

Authorized agents must provide evidence of authority. We will not discriminate against a person for making a valid privacy request. A person may also contact the appropriate privacy regulator, although we encourage direct contact first so that concerns can be reviewed promptly.

10. Children, sensitive information, and client data

The website and services are intended for businesses and adults, not children. We do not knowingly seek personal information from children. Public forms should not be used to send passwords, authentication codes, financial account numbers, health information, government identifiers, biometric information, or other sensitive data. If sensitive or regulated information is necessary for a project, the parties must agree in writing on scope, controls, and responsibilities before transfer.

11. Third-party services and policy changes

Links or integrations may lead to services controlled by others. Their privacy notices govern their activities. We may revise this policy to reflect changes in services, systems, providers, or law. Material changes will be presented through a reasonable website or direct notice. Continued use after a revised policy is posted means the current version applies to later activity, subject to applicable law and existing contracts.