Your data, handled like a delivery that has to arrive intact.

The contact form on this site collects exactly five things: your name, your email address, your company name (optional, you can leave it blank), the message you write, and the state of the consent checkbox you tick before sending.

Alongside that, the system records the date and time of your submission, the exact consent wording you agreed to, and the fact that the form came from nolatechstudio.com. That is the whole list. There is no hidden profiling, no tracking pixels, and no analytics script watching you read this page.

One reason: you asked me to contact you about your inquiry, and I need your name, email, and message to do that properly.

I will not send you marketing. The consent box you tick covers contact about your inquiry only. If I ever run a newsletter or anything promotional, that will be a separate opt-in you choose on its own. Silence is never treated as permission.

Submissions land in an encrypted PostgreSQL database hosted with Supabase, protected by row-level security. The public path into that database is insert-only: the form can add a row, but nothing public can read, change, or list what is stored.

Administrative access is held by me alone, through separately secured credentials. The website itself runs on a hardened virtual private server with administration locked to a private network.

Encrypted backup copies of the database may be kept in a second data-center region so a regional outage cannot destroy your inquiry. Backups carry the same access rules as the live database: private, encrypted, reachable by me alone.

When you ask for deletion, the deletion covers live data immediately and backup copies as they cycle out on schedule.

Me. That is the list of people.

The infrastructure that processes it: Supabase (database hosting), the VPS host that serves this site, Telegram (which delivers me an instant notification of new inquiries), Resend (which sends you a confirmation that your message arrived), and my email provider when I reply to you. Each processes data on my instructions to deliver the service, nothing more.

I do not sell personal data. I do not rent it, trade it, or share it with advertisers, brokers, or anyone else. If a law ever compels disclosure, I will disclose the minimum required and tell you unless legally barred from doing so.

As long as your inquiry is live, and up to 24 months after our last contact so I have context if you come back. After that, submissions are deleted.

You can shorten that to immediately at any time. See the next section.

You can ask me, at any time, to tell you what I hold about you, correct it, hand you a copy, or delete all of it. You can also withdraw the consent you gave when submitting the form.

Opting out takes one email. Send anything to j.davis@nolatechstudio.com with the subject line OPT OUT and I will delete your submission and confirm back to you within 30 days, usually much faster. No account, no form, no hoops, no questions asked.

If you are a California resident, these rights line up with the CCPA, including the right to know, the right to delete, and the right to non-discrimination for exercising them. If you are in a region covered by GDPR-style law, the same email address handles access, rectification, erasure, portability, and objection requests.

This site sets no advertising cookies and runs no third-party analytics.

One functional flag can be stored in your browser's session storage: if the animated hero runs slowly on your machine, the site remembers to serve you the lighter version for the rest of your visit. It identifies nothing about you, tracks nothing across sites, and dies when you close the tab.

This site is a business service and is not directed at children under 13. I do not knowingly collect data from children. If you believe a child has submitted the form, email me and I will delete it.

If this policy changes, the new version is posted here with a new effective date. Material changes get a plain-English note at the top explaining what moved.