Privacy Policy

1. Who We Are

WabiSabi Technologies ("we", "us") operates this website and is responsible for the personal information described in this policy. For any privacy question or request, write to privacy@wabisabitech.cc. We answer privacy requests at that address even when the contact form is unavailable.

2. Information We Collect

We collect very little. Specifically:

• Contact form submissions — the name, email address, subject, and message you choose to send us.
• Technical request data — our hosting infrastructure processes standard server information such as IP address, browser user-agent, and timestamps, for the purpose of serving the site securely.
• Your stated preferences — the language and colour theme you pick, stored on your own device as described in section 9.

We do not run third-party analytics, advertising trackers, or profiling of any kind on this site. We do not buy personal information from data brokers, and we do not ask you to create an account.

3. How We Use Your Information

We use what you send us only to:

• Read and reply to your enquiry, and send you an automatic confirmation that we received it
• Carry on the resulting conversation about a possible project
• Keep the site secure, available, and functioning correctly
• Comply with our legal obligations

We do not use contact form submissions to send marketing newsletters, and we do not sell or share personal information for cross-context behavioural advertising.

4. Legal Bases for Processing

Where the EU or UK GDPR applies to you, we rely on the following legal bases:

• Consent — you choose to fill in and submit the contact form.
• Steps prior to entering a contract — responding to your enquiry about working together.
• Legitimate interests — keeping the site secure and operating it reliably, balanced against your rights.
• Legal obligation — where retention or disclosure is required by law.

5. Sharing Your Information

We do not sell, rent, or trade your personal information. We share it only with the service providers we need to run the site, and only so they can perform that service for us:

• Our hosting provider, which runs the servers this website is served from
• Our email provider, which transmits and stores the contact form messages and our replies
• Professional advisors, or authorities, where disclosure is required by law or necessary to establish or defend a legal claim
• A successor entity, in the event of a merger, acquisition, or sale of the business

These providers act on our instructions and are not permitted to use your information for their own purposes.

6. International Data Transfers

We are based in the United States and our providers may process data there or elsewhere. If you contact us from outside the United States, your information will be transferred to and stored in a country whose data protection laws may differ from those of your own. Where the GDPR applies, we rely on appropriate safeguards for such transfers, including the European Commission's Standard Contractual Clauses.

7. Data Retention

We keep contact form correspondence for as long as needed to handle your enquiry and any relationship that follows, and afterwards only as long as required for our legitimate business and legal record-keeping. Technical server logs are kept for a short operational period. You can ask us to delete your correspondence at any time using the contact details in section 1.

8. Data Security

This site is served exclusively over encrypted HTTPS connections, and access to the mailbox that receives form submissions is restricted to the people who need it. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please do not send confidential or sensitive information through the contact form before we have a confidentiality agreement in place.

9. Cookies and Local Storage

We use one cookie and one local storage entry, both strictly for functionality you asked for. We use no advertising or analytics cookies, which is why this site shows you no cookie consent banner.

• Cookie “lang” — remembers whether you chose English or Spanish, so the site stays in your language between visits.
• Local storage “theme” — remembers your light or dark mode preference. This is stored in your browser and is never transmitted to our servers.

You can clear both at any time through your browser settings; the site will simply fall back to your browser's language and colour scheme.

10. Your Privacy Rights

Wherever you are, you can ask us to:

• Confirm what personal information we hold about you, and get a copy of it
• Correct information that is inaccurate or incomplete
• Delete your personal information
• Stop or restrict a particular use of your information, or object to it
• Withdraw consent you previously gave, without affecting processing already carried out

To exercise any of these, write to privacy@wabisabitech.cc. We will respond within 20 days, or sooner where the law requires it. We may need to ask you for information to verify your identity before we act. We will not discriminate against you for exercising these rights. The specific rights that are legally enforceable depend on where you live — the sections below set out the main regimes.

11. Texas Residents

The Texas Data Privacy and Security Act (TDPSA) grants Texas residents rights to access, correct, delete, and obtain a portable copy of their personal data, and to opt out of targeted advertising, the sale of personal data, and certain profiling. We do not sell personal data, engage in targeted advertising, or carry out profiling that produces legal or similarly significant effects. Texas residents may exercise the remaining rights by writing to privacy@wabisabitech.cc, and may appeal a refusal by replying to our decision; if an appeal is denied, you may contact the Texas Attorney General.

12. California Residents

Under the California Consumer Privacy Act, as amended by the CPRA, California residents have the right to know what personal information we collect and for what purpose, the right to delete it, the right to correct it, and the right to opt out of its sale or sharing. We do not sell or share personal information as those terms are defined by the CCPA, and we do not process sensitive personal information for the purpose of inferring characteristics. You may exercise your rights, or use an authorised agent to do so, through the contact details in section 1.

13. EEA and UK Residents

If you are in the European Economic Area, the United Kingdom, or Switzerland, you hold the rights described in section 10 under the GDPR, including the right to data portability and the right not to be subject to solely automated decision-making — which we do not carry out. You also have the right to lodge a complaint with your local supervisory authority, though we would appreciate the chance to address your concern first.

14. Children's Privacy

This site is aimed at businesses and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has sent us personal information, contact us and we will delete it.

15. Changes to This Policy

We may update this policy as our practices or the law change. Material changes will be published on this page with a revised date above. We encourage you to review it periodically.

16. How to Contact Us

For any question about this policy or about how we handle your information, write to privacy@wabisabitech.cc. General enquiries can go through the contact form on this site.