Privacy Notice

Summary

This site is a set of static files. There are no accounts, no logins, and no database of visitors behind it. The only information we get from you is what you choose to type into the contact form and send, or what you put in an email.

We use it to reply to you. We don't sell it, we don't trade it, and we won't add you to a mailing list because you asked us a question.

What We Collect

Contact Form Submissions

The form on the contact page asks for your name, your email address, a description of the project, and a rough timeline. It also has optional fields for your company, the practices you think the project touches, and how you found us. You type all of it. Nothing is pre-filled and nothing is read off your machine.

Two of the fields aren't visible. One stays empty unless an automated submitter fills it in. The other records the time the page loaded, so we can discard a form that was completed in half a second. Both are there to cut spam, and neither records anything about you.

Standard Web Request Data

Whoever serves these files gets what a web server always gets: the originating IP address, the file requested, the time of the request, the browser user-agent string, and the referring page where there is one. That's a property of the web rather than a choice we made. We don't operate the server ourselves, and we don't build a profile of you from its logs.

Analytics and Cookies

As the site is built today, we set no cookies, store nothing in your browser, and load no analytics, advertising, or session-recording scripts. There's no consent banner because there's nothing to consent to.

That describes the current build rather than every future one. If we add a measurement tool, we'll name it in this section, with what it stores and for how long, before it goes live, and we'll ask for your consent first where a cookie is required. Until then, the absence of a list here is the list.

Why We Collect It

We collect information for three purposes and no others.

• Replying to you with the correspondence in front of us
• Keeping a record of a conversation that may become a quote, a contract, or a project
• Recognizing spam and discarding it

Where an engagement follows, that correspondence forms part of the record we settle scope from. We don't use what you send us for advertising, we don't build audiences out of it, and we don't pass it to anyone who wants to sell to you.

How Long We Keep It

The following are our own rules, and we hold them to whatever the strict legal minimum turns out to be.

Inquiries That Don't Become Work. We keep them while the conversation is live and clear them out afterwards. Two years is the outside limit, and we'll remove yours earlier if you ask.

Inquiries That Become Work. These stop being inquiries and become project records. We keep them as long as we keep the rest of the paperwork for the project, because an invoice or a question of scope gets settled from them.

Server Logs. The host keeps these on its own schedule, which is normally days or weeks rather than years. We don't copy them anywhere.

Deletion means it comes out of the mailbox and out of the form service. It doesn't mean moving it to an archive folder under a different name.

Service Providers

We don't run our own datacenter, so a short list of other companies necessarily handles this information. We describe each one here by the function it performs rather than by name, because names change and functions don't. If you want to know who's in a given position, ask us.

A Form Service. Where the contact form is wired to a hosted form endpoint, your submission passes through that provider on its way to our inbox. Where it isn't, the form hands your message to your own email client and nothing passes through any party other than your mail provider and ours. The contact page tells you which of the two applies before anything is sent.

A Host. The files are served from machines another company operates. That provider holds the request logs described above.

A Content Delivery Network. Where the site is served through an edge cache, and it may well be by the time you read this, that network sees requests for the same reason the host does.

An Email Provider. Anything you send us arrives in a mailbox another company operates.

We pick providers on the basis that they're paid for the service and not for the data. There's no advertising network anywhere on this site, and no data broker of any kind in the chain.

Your Rights

Wherever you live, you can ask us for any of the following, and we'll act on it without requiring a reason:

• A statement of what we hold about you
• A copy of it
• Correction of anything inaccurate
• Deletion of it
• An end to its use

In the EU and the UK, that's approximately the set of rights the GDPR confers, and for anything you send us Sunlab Digital is what that law calls the controller. In California, it's approximately what the CCPA confers, including the right not to be treated differently for exercising it. We neither sell nor share personal information as either law uses those words, so there's nothing to opt out of.

We're not claiming an audit or a certification against either regime. The list above states what we'll actually do.

Deletion Requests

Email hello@sunlabdigital.com and say so. One line is enough, and a request sent from the address you originally used is the simplest for us to action. We'll confirm once it's done. Thirty days is the outside limit and the same week is usual.

Two things may survive a deletion request:

• Anything a legal obligation requires us to retain, which in practice means invoices and the accounting records around them
• A minimal record that the request was made and honored

Children

This site is aimed at people commissioning engineering and marketing work. It isn't aimed at children, nothing here is designed to appeal to them, and we don't knowingly collect anything from anyone under thirteen, or under sixteen where local law sets the threshold there. If you believe a child has sent us something, write to us and we'll delete it.

Changes to This Notice

When this notice changes, the date at the top of the page changes with it. Where the change is material, such as a new tool, a new category of data, or a shorter or longer retention period, we'll also state it in the panel at the top for a period rather than introduce it under a new date alone.

There's no public archive of previous versions at present. Until there is one, ask us and we'll tell you the substance and date of any change.

Contact

Sunlab Digital, St. Petersburg, Florida, United States. Questions, corrections, and deletion requests all go to the same address: hello@sunlabdigital.com. A person answers.