Privacy Policy

Applies to https://chiboy-technologies.vercel.app and to the two forms on this site.

This is a draft

Parts of this policy are still to be confirmed by the business before it is final: the registered legal entity, how long enquiries are kept, and who to contact about a data request. They are marked in the text below rather than left out, so nothing here should be read as settled.

1.Who this policy covers

This policy covers the website at https://chiboy-technologies.vercel.app, operated under the trading name CHIBOY TECHNOLOGIES. The registered legal entity behind that name is [registered legal entity name].

The legal entity is not yet confirmed, and is marked rather than guessed. A wrong entity name in a policy is the kind of detail that is relied on, so it will be filled in before this page goes live rather than after.

2.What this site collects

This website has no accounts, no login and no membership. It collects only what you type into a form or click a link for.

  • Contact form. Your name, your email address, and optionally a phone number, plus the message you write.
  • Service request form. Your name, email address, phone number, the service you choose, where the work is needed, how you would prefer to be contacted, and the description you write. If you attach files, those files and their names are collected too.
  • Server logs. Like any web server, the host records the IP address and timestamp of each request, in order to serve the page and keep it working.

3.What it does not do

There is no analytics script, no advertising, no advertising cookie, no social media tracker, no fingerprinting and no third-party embed on this site. Nothing you do here is shared with an advertising network, because there is no advertising network connected to it.

This site sets no cookies of its own. The forms do not create a session, so there is no cookie to identify you with.

4.Why it collects it

So that we can answer you. That is the entire purpose. Your details are used to respond to the enquiry you sent, to quote for the work if you asked for one, and to keep a record of what was agreed.

We do not use your details for marketing, and we do not sell or share them with anyone for anyone else's benefit.

5.Where it is stored

Enquiries are stored in a database. Attachments, if any, are stored on the server.

  • Database. Supabase, which provides the PostgreSQL database this site reads from and writes to.
  • Hosting. Vercel, which serves the site. Vercel processes the request in order to return the page.
  • Attachments. Written to a directory on the server that is not served to the public. They cannot be fetched by guessing a web address.
  • Email notification. Resend, which delivers the notification email to the address that receives enquiries. The message contains the name, phone number, email address, chosen service, location, contact preference and the description you wrote — in other words, the enquiry itself. Your email address is also set as the reply address, so replying to the notification reaches you directly. Attachments are not included in the email.

Those providers process the data on our instructions. Each has its own privacy policy covering how they handle it.

6.How long it is kept

Enquiries and attachments are kept for [retention period].

This has not been decided yet. A retention period is a business decision rather than a technical one, and it is marked here rather than guessed at, because an invented period is a commitment the business has not made.

7.Who can see it

The people who answer enquiries at CHIBOY TECHNOLOGIES, and nobody else — except where a provider listed above processes it on our instructions in order to store or serve it.

We do not disclose enquiry details to anyone else, and we would not respond to a request for them from a third party.

8.Your choices

You can ask what we hold about you, ask for a correction, or ask for your information to be deleted. Contact us using the details below and we will deal with it. We cannot retrieve what was never sent, so if you would rather not give a detail the form asks for, contact us without it and we will work without it.

A named contact for data requests is [data protection contact].

9.Security

Information submitted through these forms is sent over an encrypted connection. Attachments are checked by their actual file contents rather than by the filename or the type the browser claims, they are stored outside the publicly served part of the site, and both forms are rate limited.

No system is perfectly secure. Please do not send passwords, card details or other credentials through a form or a message.

10.Changes to this policy

If this policy changes, the updated version will be published on this page. There is no separate list of changes and no notification mechanism.

Contact us about your information

If a form is not the easiest route for you, any of these reach the same people.