Privacy policy

This Privacy Policy describes how Byte Building ("Byte Building", "we", "our", or "us") collects, uses, shares, and protects personal information when you visit www.byte-building.com (the "Site"), submit our contact form, or otherwise engage with our services. By using the Site, you agree to the practices described in this policy.

1. Information we collect

We collect the following categories of personal information:

• Information you provide. Name, email address, phone number, project details, and any other information you submit through our contact form, by email, or during a discovery conversation.
• Automatically collected information. Standard server logs may capture IP address, browser type and version, device type, operating system, referring URL, pages visited, and timestamps.
• Cookies and similar technologies. See Cookies and tracking below.
• Information from third parties. We may receive information from anti-abuse and security providers (such as Cloudflare Turnstile) that helps us verify form submissions are not from bots.

We do not knowingly collect Sensitive Personal Information as defined under the California Privacy Rights Act (CPRA) or special categories of data under the GDPR. Do not submit such information through the Site.

2. How we use information

We use personal information to:

• Respond to inquiries and communicate with you about your project
• Provide, maintain, and improve our services
• Operate, secure, and improve the Site, including bot protection and abuse prevention
• Send transactional communications (e.g., quotes, project updates, invoices)
• Comply with legal obligations and enforce our agreements
• Analyze aggregate, non-identifying usage trends

3. Legal bases for processing (EEA / UK)

If you are in the European Economic Area or United Kingdom, we rely on the following legal bases under the GDPR / UK GDPR:

• Consent for non-essential cookies and optional communications
• Contract to respond to your inquiries and deliver services you have requested
• Legitimate interests to operate, secure, and improve the Site, prevent fraud, and conduct ordinary business operations, where our interests are not overridden by your rights
• Legal obligations where processing is required to comply with applicable law

4. How we share information

We do not sell or rent personal information. We share personal information only as follows:

• Service providers. Vendors that help us operate the Site and our business, such as hosting (DigitalOcean), email delivery (SendGrid), security and bot protection (Cloudflare), and customer messaging (Motion Optima, where you have opted in).
• Legal compliance. When required to comply with a subpoena, court order, or other legal process, or to protect our rights, your safety, or the safety of others.
• Business transfers. In connection with a merger, acquisition, financing, or sale of assets, subject to standard confidentiality protections.
• With your consent. When you have given us permission to do so.

5. Cookies and tracking

We use a small number of cookies and similar technologies. You can manage your preferences at any time through the cookie settings panel.

• Essential. Required for security (e.g., Cloudflare Turnstile bot protection on the contact form) and basic site function. These cannot be disabled.
• Functional. Loaded only with your consent. Currently used for our optional live chat widget.
• Analytics. Reserved for aggregate usage analysis. None are loaded unless you opt in.

Most browsers also let you block or delete cookies in their settings. We honor the Global Privacy Control signal where applicable.

6. Data retention

We retain contact submissions for as long as needed to respond to and follow up on your inquiry, then for a reasonable period in our records for accounting and legal purposes. Server logs are typically retained for up to 90 days for security and operational purposes. Where you become a client, additional retention is governed by the applicable engagement terms.

7. Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit (TLS), least-privilege access controls, and bot protection on public forms. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Your rights

Depending on where you live, you may have the rights described below. To exercise any of them, contact us at [email protected]. We will respond within the timeframes required by applicable law and may need to verify your identity before fulfilling a request.

California (CCPA / CPRA)

If you are a California resident, you have the right to:

• Know what personal information we have collected about you, including categories, sources, purposes, and recipients
• Access a copy of the personal information we have collected
• Delete personal information we have collected, subject to legal exceptions
• Correct inaccurate personal information
• Opt out of "sale" or "sharing" of personal information. We do not sell or share personal information for cross-context behavioral advertising
• Limit use of sensitive personal information. We do not use sensitive personal information beyond permitted business purposes
• Non-discrimination for exercising these rights

You may submit requests to [email protected]. Authorized agents may submit requests with proof of authorization.

EEA / UK (GDPR / UK GDPR)

If you are in the EEA or UK, you have the right to access, rectify, erase, restrict, port, and object to processing of your personal information, and to withdraw consent at any time. You may also lodge a complaint with your local supervisory authority.

Other US states

Residents of other US states with applicable privacy laws (such as Colorado, Connecticut, Virginia, Utah, and others) may have similar rights. Contact us using the information above to exercise any such rights.

9. Children

The Site is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13 without verifiable parental consent, we will delete it.

10. Third-party links and services

The Site may link to third-party websites or include third-party tools. Their privacy practices are governed by their own policies. We are not responsible for the privacy practices of third parties.

11. International transfers

Byte Building is based in the United States. If you access the Site from outside the United States, your information may be transferred to, stored, and processed in the United States. Where required, we use appropriate safeguards for international transfers.

12. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of the page reflects the most recent revision. Material changes will be communicated through the Site or by other reasonable means.

13. Contact us

For privacy questions or to exercise your rights:

• Email: [email protected]
• Mailing address: Byte Building, Los Angeles, California, United States

Notice. This Privacy Policy is provided as a starting point for transparency about our data practices. It does not constitute legal advice. Please review this document with qualified legal counsel before relying on it for compliance with the laws applicable to you.