Privacy policy
TODO: last updated date
TODO — this is standard GDPR boilerplate and must be reviewed by a legal professional before this page goes live. This privacy policy explains what data this website collects through the contact form and how it's handled.
What data we collect
Through the contact form, we collect what you enter yourself: name, company name (optional), email address, phone number (optional) and your message. We also store technical metadata, such as the domain the form was submitted from and any UTM campaign parameters present.
Why we collect this data
We use this data solely to respond to your enquiry and to understand which channels bring visitors to the site. TODO: confirm with legal counsel whether this qualifies as 'legitimate interest' under the GDPR, or whether explicit consent is required.
How long we retain data
TODO: define a retention period together with the client and legal counsel, and state it here explicitly.
Sharing with third parties
Contact form data is stored with our database provider (Neon Postgres, via Vercel) and is not sold or shared with third parties for marketing purposes. TODO: verify the sub-processor agreement and data storage location.
Your rights
You have the right to request access to, correction of, or deletion of your data. TODO: add contact details for privacy requests and describe the process.
Cookies and tracking
This website does not currently use cookie-based tracking, advertising pixels or Google Analytics. It only uses privacy-friendly, cookie-less Vercel Analytics. TODO: a consent banner will be required as soon as any cookie-based tool is introduced — see also the comment in the source code.