01 / Legal
Privacy Policy
What we collect when you contact us, why we hold it, and how to get it deleted.
Last updated September 21, 2026
Not ready to publish
This document still contains 4 placeholders: legalName, address, privacyEmail, legalEmail. Fill them in at the top of lib/legal.ts, and have a lawyer review these pages before relying on them. This notice disappears on its own once no placeholders remain.
The short version
This site does not track you. There are no analytics, no advertising pixels, no third-party cookies and no accounts. You can read every page here without giving us anything.
The one exception is the project inquiry form. If you choose to fill it in, we receive what you typed so that we can reply to you.
Who we are
[LEGAL ENTITY NAME], trading as CORSEN, is the controller of any personal information described here. We operate from Rhode Island, United States.
Postal address: [MAILING ADDRESS]. Privacy contact: [PRIVACY EMAIL].
What we collect
Through the project inquiry form, and only if you submit it, we collect:
- Your name
- Your business name
- Your email address
- Your Instagram or TikTok handle, if you provide one (optional)
- Your website, if you provide one (optional)
- The business type you select
- The services you indicate interest in
- Whatever you write in the message field
What we collect automatically
Our hosting provider records standard server logs when a page is requested, including IP address, timestamp, requested URL, referring page and browser user-agent. This is ordinary web-server operation and happens on effectively every website; we do not use these logs to build a profile of you.
We apply a short-lived, in-memory rate limit to the inquiry form that references your IP address to prevent automated abuse. It is not written to durable storage and is discarded when the server instance recycles.
Cookies
This site sets no cookies of its own, and no advertising or analytics cookies. We do not use local storage or similar tracking technologies.
We load typefaces from Google Fonts, which means your browser makes a request to Google to fetch the font files. That request necessarily discloses your IP address to Google and is subject to Google’s own privacy policy. If you would prefer this not to happen, the fonts can be self-hosted — tell us and we will do it.
Why we hold it and on what basis
We use your inquiry solely to respond to you and, if we end up working together, to carry out that work. We do not sell personal information, we do not share it with advertisers, and we do not use it for automated decision-making or profiling.
Where the UK or EU GDPR applies to you, our lawful basis is legitimate interests (responding to a business enquiry you initiated) or steps taken at your request prior to entering a contract. Where the California Consumer Privacy Act applies, we do not "sell" or "share" personal information as those terms are defined in that Act.
Who else sees it
Service providers that process data on our behalf, under contract, and only to deliver the service we use them for. Depending on how the form is configured, these may include our hosting provider, our email delivery provider, and our database provider.
We may also disclose information where we are legally required to, or to establish or defend a legal claim.
How long we keep it
Inquiries that do not lead to work are deleted within 24 months. Records relating to clients are kept for as long as needed for the engagement and afterwards for the period required by tax and limitation law.
Your rights
Wherever you are, you can ask us to show you what we hold, correct it, or delete it. Email [PRIVACY EMAIL] and we will respond within 30 days.
Depending on where you live, you may also have the right to restrict or object to processing, to receive your data in a portable format, to withdraw consent, to be free from discrimination for exercising these rights, and to complain to your data protection authority.
We will not ask you to create an account to exercise any of these rights.
International transfers
We are based in the United States and our providers may process data there. If you contact us from outside the US, your information will be transferred to and processed in the US, which may not offer the same level of data protection as your home jurisdiction.
Children
This is a business-to-business service and is not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has sent us information, email us and we will delete it.
Security
The site is served over HTTPS and inquiries are transmitted encrypted in transit. No method of transmission or storage is perfectly secure, and we do not claim otherwise.
Changes
We will update the date at the top of this page when this policy changes. Last updated September 21, 2026.
This page describes how corsen.net operates today. It is not legal advice.