Privacy Policy

We collect information you give us directly: your name, email, phone number, business details, project details and payment information.

We receive it when you submit a form, subscribe to a list, use the website chat, call us, email us, message us on WhatsApp or sign a service agreement.

We also collect some information automatically when you browse, such as your IP address, browser type, the pages you visit, how long you stay and where you arrived from.

That automatic collection only happens if you accept the analytics category in our cookie banner.

Today it involves Google Analytics 4, Microsoft Clarity and Ahrefs Web Analytics; the full list is on our cookie policy.

We use the information to:

• Respond to your questions and prepare quotes
• Deliver the web, SEO, advertising and automation services you hire
• Operate WML Command and maintain the resulting CRM record
• Send requested newsletter and service communications
• Process payments securely
• Measure and improve our website with your consent
• Comply with our legal obligations and protect our rights

A successful contact form creates or updates a lead in WML Command, our CRM, and sends transactional email through Resend.

Our connected Microsoft 365 mailbox may also process the resulting correspondence through Microsoft Graph.

We record the form language, source page, selected services and the information you submit.

If you accepted marketing measurement, we also attach available campaign and click identifiers so we can understand which campaign generated the inquiry.

Security controls may temporarily use your IP address and email address to validate requests, prevent spam, apply rate limits and record delivery errors.

When you subscribe, we store your email address, language, list, signup source, status and subscription date in WML Command.

We use this information to send the welcome message and notices for new articles in the language you selected.

Every marketing email includes an unsubscribe link.

We also process delivery, bounce and spam-complaint events so we can stop sending to invalid addresses or people who opted out.

After an unsubscribe, bounce or complaint, we may retain a minimal suppression record so we can honor that choice and avoid sending again.

We do not add a newsletter subscriber to unrelated lists without another valid basis.

The website assistant stores the messages and files you choose to send, the page where the conversation started and a browser identifier needed to restore the conversation.

It may create or update a contact in WML Command when you provide contact details.

Automated replies and contact-detail extraction are produced with Google Gemini.

The relevant conversation text and any attachment you submit for analysis may be sent to Google for that purpose.

Do not send passwords, payment-card details, government identifiers, medical records or other sensitive information through the assistant.

You can request a person at any time, and the assistant does not make binding decisions about you.

We use essential cookies (so the site works), analytics cookies (to understand how visitors use the site) and marketing cookies (to measure our campaigns).

Only the essential ones load automatically.

Analytics and marketing stay switched off until you accept them in the cookie banner, and you can change or withdraw that decision at any time from the link in the footer.

Our cookie policy lists every cookie we can set, who receives the data, what it is for and how long it lasts.

You can also block or delete cookies from your browser, though some features may then stop working as expected.

If you accept marketing cookies, Meta Pixel and, when enabled, Google Ads may measure successful forms and contact actions.

Campaign parameters may be retained so a later inquiry can be attributed to the visit that generated it.

For a successful lead, our server may also send Meta a matching event through the Conversions API.

This can include hashed contact details, IP address, browser information, page URL, campaign cookies and an event identifier used to prevent duplicate counting.

To see how visitors interact with our site and to improve it, we use Microsoft Clarity.

Clarity uses pseudonymous identifiers and captures page content and actions such as mouse movements, clicks and scrolling to create heatmaps and session replays.

Text you type into forms and other sensitive content are masked by default, and Microsoft processes this data as our service provider.

Clarity only runs if you accept the analytics category in the cookie banner.

If you reject it, the script is never loaded, and you can also use your browser's tracking-protection settings.

For details, see Microsoft's privacy statement.

If you opt in, we may contact you by SMS or WhatsApp about your project or quote.

We send a limited number of messages and you can stop them at any time by replying STOP.

These messages are delivered through providers such as Twilio and Meta, which process the data only on our behalf.

We do not sell, rent or trade your personal information for marketing purposes.

We share data only as needed with providers that operate our hosting, database, CRM, AI assistant, analytics, advertising measurement, email, mailbox, payments and messaging, and with authorities when the law requires it.

Key providers include Vercel, Supabase, Resend, Microsoft, Google and Meta.

Their role depends on the feature you use and the consent choices you make.

You can ask us to:

• Access the personal data we hold about you
• Correct inaccurate information
• Delete your data
• Opt out of marketing communications
• File a complaint with the relevant data-protection authority

To exercise any of these rights, contact us using the details below.

We use reasonable technical and organizational measures to protect your information.

In transit, every page and form is served over HTTPS with HSTS, so browsers refuse to connect over plain HTTP.

At rest, the infrastructure providers that store our data, Vercel for the site and Supabase for the CRM, encrypt it with AES-256 on their managed storage.

Access to client data is limited to team members who need it, protected with individual accounts, role-based permissions and two-factor authentication.

How long we keep things:

• Contact form submissions and the resulting CRM record: while the commercial relationship is active, and up to 24 months after the last contact.
• Newsletter subscriber records: while the subscription is active. A minimal suppression record may remain after opt-out, bounce or complaint to prevent further delivery.
• Signed agreements, invoices and accounting records: as long as US and Florida tax law requires.
• Analytics and advertising data: according to the configured retention period and each provider's applicable settings and terms.
• Chat conversations with our assistant: up to 12 months, so we can follow up on an open request.

You can ask us to delete your data earlier at any time using the contact details below.

Our website, database, CRM and email delivery principally run on infrastructure in the United States operated by Vercel, Supabase and Resend.

Microsoft, Google, Meta and other providers may process data in the countries where they or their subprocessors operate.

If you contact us from outside the United States, your data is transferred there.

Where a transfer mechanism is required, for example for visitors in the European Economic Area or the United Kingdom, we rely on the standard contractual clauses our providers have in place.

Our services are intended for businesses and adults. We do not knowingly collect personal information from children.

If you believe a child has provided us data, contact us and we will delete it.

We may update this policy from time to time. The current version is always available on this page, and any significant change will be reflected here.