Contents
1 · Information we collect
Contact information
When you use the contact form or email us directly, we collect:
- Name & email address
- Message content & inquiry details
- Company information, if you provide it
- Phone number, if you provide it
Automatically collected information
Our website automatically collects, where you allow it:
- IP address & coarse geographic location
- Browser type & version
- Pages visited & time spent on the site
- Referring website
2 · How we use your information
We use what we collect to:
- Respond to your inquiry & deliver requested services
- Communicate about ongoing projects, invoices, and service notifications
- Improve the site & the way we describe our services
- Comply with applicable tax and legal obligations
We do not sell, rent, or share contact data with third parties for their marketing.
3 · Third-party services
Formspree — contact form processing
The contact form is processed through Formspree, which handles submission & email delivery. Formspree's own privacy policy applies to data processed through their service.
Web hosting & analytics
The site is served by a managed static-hosting provider, whose standard server logs may record IP addresses. If we use analytics, it is privacy-friendly, with anonymised IPs and no cross-site tracking.
4 · Data retention
- Contact inquiries: up to 3 years for business communication
- Project communications: 7 years for tax & legal compliance
- Analytics: anonymous, retained up to 2 years
- Inactive contacts: purged on a scheduled cadence
5 · Data security
We apply commercially reasonable safeguards:
- TLS in transit
- Encrypted secrets & managed hosting
- Access controls & MFA on every service we use
- Annual review of providers & access lists
6 · Your rights
Wherever you are, you can ask us to:
- Access — give you a copy of your data
- Correct — fix inaccurate information
- Delete — remove your data from our systems
- Port — provide your data in a portable format
- Object — to specific processing
- Restrict — pause processing while we discuss
7 · Cookies & tracking
The site uses a minimal number of cookies, scoped to:
- Essential functionality (form anti-spam tokens)
- Remembering your preferences
- Anonymous analytics
You can control cookies in your browser. Disabling them may affect form submission.
8 · International data transfers
Your information may be transferred to and processed in countries other than your own. Where this happens, we rely on standard contractual clauses or equivalent safeguards.
9 · Children's privacy
Our services aren't directed at children under 16. We don't knowingly collect personal information from children; if we learn we have, we'll delete it promptly.
10 · Changes to this policy
We may update this policy periodically. Significant changes will be communicated via:
- Email to active clients
- A notice at the top of this page
- The "Last updated" date in the header above
11 · Contacting us
For privacy questions or to exercise any of the rights above, use the contact form or email hi@tinyprism.com with "Privacy request" in the subject line. We respond within 30 days.
12 · Legal basis for processing (GDPR)
We process personal data on the basis of:
- Consent — when you voluntarily provide information
- Contract — to deliver services you've requested
- Legal obligation — to comply with applicable laws
- Legitimate interest — to improve our services & communication