Privacy Policy

This website (https://fraiselabs.com) is operated by Fraise Labs, which acts as the data controller for the personal data described in this policy. You can reach us about privacy matters at hello@fraiselabs.com.

This is a marketing site, not a product with accounts or sign-ups, so the data we collect is limited to:

• Correspondence data. If you email us, use a mailto link on this site, or otherwise contact us, we receive whatever you send us — typically your name, your email address, and the content of your message.
• Hosting log data. Like effectively all websites, our hosting provider automatically records standard request-level data for every visit — such as IP address, user agent (browser/device information), the page requested, and timestamps — in server logs, for security and reliability purposes. We do not use this data to build profiles of visitors or to track individuals across sessions.

We do not ask visitors to create an account or log in.

This site sets no cookies, runs no analytics, and includes no third-party tracking scripts or advertising pixels. We do not use tools like Google Analytics, social media pixels, or fingerprinting scripts. If that ever changes — for example, if we add privacy-respecting analytics in the future — we will update this policy first and provide any consent mechanism required by law.

Where the GDPR applies, we rely on the following legal bases, depending on the data and purpose:

• Legitimate interests (Art. 6(1)(f)) — to operate, secure, and maintain this website, including hosting log data used for abuse prevention and troubleshooting, and to respond to inquiries sent to us.
• Contract or pre-contractual steps (Art. 6(1)(b)) — where your correspondence with us relates to engaging our services, so we can respond and, if applicable, take steps toward a contract at your request.
• Consent (Art. 6(1)(a)) — for anything we do that legally requires it; we do not currently rely on consent for anything described in this policy, since we do not use cookies, analytics, or marketing email.

We send email from this domain for two purposes only:

• Replies to inbound contact. If you email us or use a contact link on this site, we reply directly to your message.
• Transactional messages. If you engage our services under a separate agreement, we may send operational email that is a direct, expected part of that engagement (for example, confirmations or status updates tied to work you have asked us to do).

We do not send marketing email or a newsletter, and we do not use your email address for any purpose beyond the two above. See the “Email communications” section of our Terms of Service for how to stop receiving email from us.

We use a small number of third-party service providers (sub-processors) to operate this site and deliver email on our behalf. Each is contractually bound to process data only as we instruct and to apply appropriate security measures:

• Email delivery. Mailgun (operated by Sinch) — used to send transactional email and contact replies from this domain.
• Hosting. Google Firebase (Firebase Hosting) — used to serve this static website and its request logs.

We do not sell personal data to these or any other providers, and we do not permit them to use personal data collected via this site for their own independent purposes.

Our sub-processors operate infrastructure in the United States as well as other countries. Where personal data originating in the EU/UK/EEA is transferred to a country that has not received an adequacy decision — including the United States — we rely on appropriate safeguards recognized under GDPR, such as the European Commission’s Standard Contractual Clauses (SCCs), together with the additional measures our providers have in place, to ensure the data receives an equivalent level of protection.

We keep correspondence data for as long as reasonably necessary to respond to your inquiry, maintain a record of the relationship if you become a customer, and meet legal, accounting, or dispute-resolution obligations — after which we delete or anonymize it. Hosting log data is retained by our hosting provider only for a limited period sufficient for security and operational purposes before it is rotated out.

If the GDPR applies to you, you have the right to:

• Access the personal data we hold about you;
• Rectification of inaccurate or incomplete data;
• Erasure of your data, in certain circumstances;
• Restriction of how we process your data, in certain circumstances;
• Portability — to receive data you provided to us in a structured, commonly used, machine-readable format;
• Object to processing based on legitimate interests; and
• Lodge a complaint with your local data protection supervisory authority if you believe we have not handled your data lawfully.

To exercise any of these rights, contact us using the details in Section 14 below.

If you are a resident of a US state with a comprehensive privacy law (such as California’s CCPA/CPRA and similar laws in other states), you generally have the right to:

• Know what personal information we have collected about you and why;
• Delete personal information we hold about you, subject to certain exceptions;
• Correct inaccurate personal information; and
• Opt out of the sale or sharing of personal information, and of profiling for significant decisions.

We do not sell or share personal information, as those terms are defined under applicable US state privacy laws. We do not use or disclose sensitive personal information for any purpose other than what you contacted us for. We will not discriminate against you for exercising any of these rights.

This site is intended for a business audience and is not directed at children. We do not knowingly collect personal data from anyone under the age of 16. If you believe a child has provided us with personal data, please contact us and we will delete it.

We rely on reputable, security-conscious providers (see Section 6) for hosting and email delivery, and we limit the personal data we collect to what is described in this policy. No method of transmission or storage is perfectly secure, but we take reasonable technical and organizational measures appropriate to the limited data this site handles.

We may update this Privacy Policy from time to time to reflect changes to the site or applicable law. The “Last updated” date at the top of this page reflects the most recent revision. We encourage you to review this page periodically.

To exercise any right described above, or if you have any question about this policy, contact us at hello@fraiselabs.com. We will respond within the timeframe required by applicable law. We may need to verify your identity before acting on a request, and may decline a request where an exception under applicable law permits us to do so.

Fraise Labs