Privacy Policy

In accordance with GDPR and CCPA/CPRA Notice at Collection requirements (Cal. Civ. Code § 1798.100), we inform you of the categories of personal data collected:

• badgeDirect Contact Identifiers: Personal or business name, email address, and phone number or WhatsApp (optional), voluntarily provided by you through our contact form.
• business_centerCommercial Inquiry Details: Type of service requested (brand new website, revamp, or maintenance) and description of your project requirements.
• securityTechnical and Security Metadata: Origin IP address, processed in real time solely in server volatile memory for cyberattack prevention, bot mitigation, and rate limiting. It is never linked to commercial marketing profiles.

We process your personal information strictly for the following legitimate purposes:

• check_circleProposal Preparation & Pre-contractual Steps (Art. 6.1.b GDPR): Answering your questions, assessing your requirements, and providing a clear, fixed-price proposal tailored to your business.
• check_circleUser Consent (Art. 6.1.a GDPR): Explicitly granted when checking the consent box before submitting our contact form.
• check_circleSecurity & Fraud Prevention (Legitimate Interest - Art. 6.1.f GDPR): Protecting server integrity, blocking automated spam bots, and maintaining service reliability.

Your information is only disclosed when strictly required by law in response to valid legal requests from competent public authorities.

In accordance with the EU ePrivacy Directive and California CalOPPA:

• cookieCookies and local storage: Pageflint does not install analytics or advertising cookies, retargeting tags or advertising pixels. Selecting “Got it” in the informational notice saves a local reminder for 180 days. For details and removal instructions, see Cookies and local storage.
• tuneRespect for Do Not Track (DNT) and Global Privacy Control (GPC): Because we conduct zero cross-site behavioral tracking and never commercialize browsing data, our website natively respects DNT browser preferences and universal GPC signals.

Your personal data is retained only for the duration strictly necessary to address your inquiry and follow up on the requested proposal, or until you request its deletion.

If an inquiry does not result in a client engagement, your details are securely discarded. If a formal services agreement is concluded, billing data is preserved according to statutory commercial and tax retention requirements.

Under Regulation (EU) 2016/679 (General Data Protection Regulation), you have the right to:

If you are a resident of California or other US states with comprehensive consumer privacy laws (such as Virginia, Colorado, Connecticut, Utah, or Texas), you hold the following rights:

• infoRight to Know / Access: Request disclosure of the categories and specific pieces of personal information collected about you over the past 12 months.
• deleteRight to Delete: Request deletion of your personal information, subject to statutory exemptions.
• editRight to Correct: Request correction of inaccurate personal information.
• balanceRight to Non-Discrimination: Under Cal. Civ. Code § 1798.125, we will not discriminate against you, deny services, or alter prices for exercising your privacy rights.

Response Timeline: We respond to verifiable US consumer requests within 45 calendar days at no charge. If necessary, this period may be extended once by an additional 45 days with advance notice.

Our services are directed exclusively at business owners, professionals, and adults over the age of 18. In compliance with the US Children’s Online Privacy Protection Act (COPPA) and CPRA § 1798.120(c):

We do not knowingly collect personal information from children under 13 years of age (or under 16 years of age without verifiable parental consent). If a parent or guardian discovers that their child has provided personal information to us without consent, please notify us at admin@pageflint.com and we will delete the data immediately.

We implement robust technical and organizational security measures to protect your personal data against unauthorized access, loss, or alteration, including full TLS/HTTPS communication encryption and strict application-level access controls.

Our infrastructure and network providers comply with recognized international security standards. Where cross-border data transfers between the EU and US occur, they are governed by the EU-US Data Privacy Framework or European Commission Standard Contractual Clauses (SCCs).