Privacy policy
Overview
This Privacy Policy describes how Gridfold ("we", "us", or "our") collects, uses, and shares information when you use our website and services. We are committed to protecting your privacy and handling your data in accordance with applicable privacy laws, including the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA).
Information we collect
Information you provide to us
When you use our contact form, we collect:
- Name
- Email address
- Message content
Information collected automatically
When you visit our website, we automatically collect:
- IP address (used for rate limiting and spam prevention)
- Browser type and version
- Device information
- Pages visited and time spent on pages
- Referring website
How we use your information
We use the information we collect to:
- Respond to your inquiries and communicate with you
- Prevent spam and abuse through rate limiting
- Improve our website and services
- Comply with legal obligations
- Protect our rights and prevent fraud
Third-party service providers
We use third-party providers to host the site, send transactional email, provide analytics, and protect against abuse. These providers may receive personal data (for example: contact form details, IP addresses, device and browser information, and page requests) to deliver their services on our behalf, subject to their own privacy practices.
Data retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Contact form submissions are retained for a reasonable period to respond to your inquiry and for record-keeping purposes.
Your rights and choices
Depending on your location, you may have the following rights:
- Access: Request access to the personal information we hold about you
- Correction: Request correction of inaccurate personal information
- Deletion: Request deletion of your personal information
- Restriction: Request restriction of processing your personal information
- Portability: Request transfer of your personal information to another service
- Objection: Object to processing of your personal information
- Withdraw consent: Withdraw consent where processing is based on consent
To exercise any of these rights, please use our contact form on the homepage.
Data security
We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This includes:
- HTTPS encryption for all data transmission
- Rate limiting to prevent abuse
- Honeypot and time-based validation to prevent automated submissions
- Server-side validation of all form inputs
- Regular security updates and monitoring
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.
International data transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country. When we transfer your information internationally, we ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable law.
Children's privacy
Our website and services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal information, please contact us using the contact form on our homepage. If we become aware that we have collected personal information from a child under 16, we will take steps to delete such information.
California privacy rights
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to know what personal information is collected, used, shared, or sold
- Right to delete personal information held by us
- Right to opt-out of sale of personal information (we do not sell personal information)
- Right to non-discrimination for exercising your CCPA rights
European privacy rights
If you are located in the European Economic Area (EEA) or United Kingdom, you have additional rights under the GDPR, including the rights listed in the "Your rights and choices" section above. Our legal basis for processing your personal information includes:
- Consent: When you submit the contact form
- Legitimate interests: To prevent spam and protect our services
- Legal obligations: To comply with applicable laws
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We encourage you to review this Privacy Policy periodically.
Contact us
If you have any questions about this Privacy Policy or our privacy practices, please contact us using the contact form on our homepage.