Skip to main content

Privacy Policy

Last updated:

Who we are

Pinkilo LLC ("Pinkilo," "we," "us," or "our") is a digital agency organized in the State of Maryland, United States. We operate the website at www.pinkilo.com (the "Website").

This policy explains what information we collect when you visit the Website, why we collect it, who we share it with, and what control you have over it. It covers the Website only. If you are an existing client, the handling of information within a specific engagement is governed by the agreement we signed with you.

If you do not agree with this policy, please do not use the Website.

Information we collect

Information you provide

The Website has one form: the contact form. When you submit it, we collect:

  • Name — required
  • Company or organization — required
  • Email address — required
  • Approximate project budget — optional
  • Project type — one of website, app, custom software, or other
  • Your message — the free-text description of what you need

We do not ask for a phone number, a postal address, or payment details anywhere on the Website. We do not have user accounts, so there is nothing to register for and no password to store.

Please do not include sensitive information in the message field — health information, government identifiers, financial account numbers, or anything you would not want stored in a standard business CRM.

Information collected automatically

  • Analytics. We use Vercel Web Analytics and Vercel Speed Insights to understand how the Website is used and how quickly it loads. These record page views, referring site, approximate country-level location, and general device, browser and operating system type. Both are cookieless and aggregated, and both are served from our own domain rather than a third-party tracking domain. They are not used to build a profile of you, and we cannot use them to identify you personally.
  • IP address, for spam prevention. When you submit the contact form, your IP address is used as a rate-limiting key so that automated systems cannot flood us with submissions. It is stored in Upstash Redis for approximately 15 days and then expires automatically. We do not use it for analytics, advertising, or profiling.
  • Server logs. Our hosting provider, Vercel, records standard request information as part of operating and securing the Website.

Cookies and tracking

The Website does not use cookies. Not for analytics, not for advertising, not for anything else. It also does not use local storage, session storage, tracking pixels, fingerprinting, or session-recording tools.

There are no third-party advertising or tracking scripts on the Website. There is no Google Analytics, no Google Tag Manager, no Meta Pixel, and no advertising network. We do not participate in cross-site behavioural advertising, and there is no cross-site tracking for a "Do Not Track" or Global Privacy Control signal to disable.

Fonts are served from our own domain rather than fetched from Google at page load, so visiting the Website does not create a request to Google.

Because we set no cookies and use no tracking technologies, there is no cookie banner and nothing for you to opt out of. If that ever changes, we will update this policy and introduce a consent mechanism before the change takes effect.

How we use your information

We use the information described above to:

  • Respond to your enquiry and discuss a possible engagement
  • Prepare proposals, quotes and scoping for work you have asked about
  • Keep a record of business enquiries in our CRM
  • Understand aggregate Website traffic and improve performance
  • Protect the Website from spam, abuse and automated attacks

We do not use your information for automated decision-making that produces legal or similarly significant effects, and we do not use it to train machine learning models.

Who we share it with

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We have never done so.

We use the following service providers, who process information on our behalf and are contractually restricted in what they may do with it:

  • Vercel — hosting, analytics and performance monitoring. vercel.com/legal/privacy-policy
  • Pipedrive — our CRM. Contact form submissions are stored here as a contact and a sales lead, including your message. pipedrive.com/en/privacy
  • Upstash — Redis, used to store the rate-limiting record described above. upstash.com/trust/privacy.pdf
  • Sanity — the content management system behind the Website. Images and other media are delivered from Sanity's CDN, so your IP address is visible to Sanity when your browser loads them. sanity.io/legal/privacy
  • Microsoft — if you follow one of our booking links to schedule a call, scheduling is handled by Microsoft Bookings and the information you enter there is processed by Microsoft. privacy.microsoft.com

We may also disclose information where we are legally required to, or where necessary to establish, exercise or defend legal claims.

Data retention

  • Contact form submissions in Pipedrive — retained for as long as we have an active or reasonably foreseeable business relationship, and thereafter as needed for our legitimate business records and legal obligations. You can ask us to delete yours at any time.
  • Rate-limiting records in Upstash — approximately 15 days, then automatically expired.
  • Analytics — retained in aggregate by Vercel in line with their retention policy. These are not tied to you.

Data security

We use reasonable administrative and technical measures to protect information, including HTTPS across the entire Website and access controls on the systems that hold enquiry data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your rights

Depending on where you live, you may have some or all of the following rights:

  • Access — ask what personal information we hold about you
  • Correction — ask us to fix information that is wrong or incomplete
  • Deletion — ask us to delete your information
  • Portability — ask for a copy in a portable format
  • Objection or restriction — object to, or ask us to limit, how we use your information
  • Withdraw consent — where we rely on consent, withdraw it at any time

To exercise any of these, email legal@pinkilo.com. We will respond within the timeframe required by applicable law. We may need to verify your identity first, usually by confirming you control the email address associated with the request. We will not discriminate against you for exercising these rights.

California residents

Under the California Consumer Privacy Act, as amended, you have the right to know what personal information we collect and how we use it, to request deletion or correction, and to opt out of the sale or sharing of personal information.

We do not sell or share personal information, so there is no opt-out to offer. The categories we collect are identifiers (name, email, IP address), commercial information (project type and budget), and the contents of your message. We collect these for the business purposes described above. We do not knowingly collect the personal information of anyone under 16.

Maryland residents

We are a Maryland business and support the rights granted by the Maryland Online Data Privacy Act, including access, correction, deletion and portability, on the same basis described above. We do not sell personal data and do not process sensitive personal data through the Website.

EEA and UK residents

If you are in the European Economic Area or the United Kingdom, our legal bases for processing are:

  • Steps taken at your request prior to entering a contract — handling your contact form enquiry
  • Legitimate interests — operating and improving the Website, keeping business records, and protecting the Website from spam and abuse
  • Consent — where we ask for it specifically

Our service providers are based in the United States, so information you send us is transferred there. You have the right to lodge a complaint with your local supervisory authority.

The Website links to other sites, including our LinkedIn and GitHub profiles and our booking pages. We are not responsible for their content or privacy practices. Their policies apply once you leave our Website.

Children's privacy

The Website is intended for businesses and is not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. If a change materially affects how we handle your information, we will take reasonable steps to make that clear rather than relying on the date alone.

Contact us

Questions, requests, or complaints about this policy or how we handle your information:

Pinkilo LLC

Email: legal@pinkilo.com