Legal

Privacy Policy

Last updated: 25 July 2026

This policy explains what personal information Aismatic LLC collects through aismatic.com, why we collect it, and what you can ask us to do with it. It covers this website only. Work we do under a signed client agreement is governed by that agreement and any data processing terms attached to it.

1. Who we are

Aismatic LLC ("Aismatic", "we", "us") is a limited liability company registered in the State of Illinois, United States. We are the controller of the personal information described in this policy.

2. The short version

• The only personal information we ask you for is what you type into the contact form.
• This website sets no cookies and runs no analytics, advertising, or tracking scripts.
• We do not sell or share your personal information, and we do not use it for advertising or profiling.
• We use what you send us to reply to you and, if we end up working together, to manage that relationship. Nothing else.

3. Information you give us

When you submit the contact form on our home page, we receive the fields you complete:

• Name — required.
• Work email address — required, so we can reply.
• Company — optional.
• Enquiry type — the category you pick from the dropdown.
• Your message — required. Please don't include sensitive personal information, credentials, or confidential third-party material in it. If you need to share something confidential before we've signed anything, email us and we'll arrange a non-disclosure agreement first.

The form also contains a hidden field that human visitors never see. It exists only to filter out automated spam submissions, and a submission that fills it in is discarded.

4. Information collected automatically

Our website is hosted on Cloudflare Pages. Like any web host, Cloudflare processes standard request data in order to serve the site, route traffic, and protect against abuse. This includes your IP address, browser user-agent, the pages requested, and timestamps. We do not use this data to build a profile of you.

When you submit the contact form, we include two pieces of context in the email we receive: the two-letter country code Cloudflare derives from your IP address, and the time of submission. We use these to recognise spam patterns. We do not store your full IP address alongside your enquiry.

5. Cookies and local storage

This website sets no cookies. There are no analytics cookies, no advertising cookies, and no third-party tracking pixels, which is why you won't see a cookie consent banner here.

We store exactly one value in your browser's local storage, under the key aismatic-theme. It records whether you chose the light or dark colour scheme so the site doesn't forget between visits. It contains no identifier, is never transmitted to us, and you can clear it at any time through your browser settings.

6. How we use your information

• To read and respond to your enquiry.
• To have follow-up conversations about a potential engagement, and to prepare proposals or agreements.
• To administer the relationship if we go on to work together — including invoicing and project correspondence.
• To keep the website secure and to detect and block spam and abuse.
• To comply with our legal and tax obligations.

We do not use your information to send marketing newsletters, and we will not add you to a mailing list because you contacted us.

7. Legal bases (visitors in the UK, EU, and EEA)

Where the UK GDPR or EU GDPR applies to you, we rely on the following legal bases:

• Legitimate interests — responding to enquiries you initiate, running and securing our website, and pursuing potential business relationships. We've considered your rights and don't believe these activities override them.
• Performance of a contract — where we're taking steps at your request before entering an agreement, or performing one that's already in place.
• Legal obligation — where we're required to keep records for tax, accounting, or other statutory purposes.

8. Who we share it with

We do not sell your personal information, and we do not share it with third parties for their own marketing. We rely on a small number of service providers who process data on our behalf under contract:

• Cloudflare, Inc. — website hosting, content delivery, and the serverless function that handles form submissions.
• Resend (Plus Five Five, Inc.) — delivers your contact-form submission to our inbox as an email.
• Our email and business-productivity provider — where your enquiry lands and where we correspond with you.

We may also disclose information where we're legally required to, or where it's necessary to establish, exercise, or defend legal claims. If Aismatic LLC is ever involved in a merger, acquisition, or sale of assets, information may transfer as part of that transaction, and we'd give notice before it became subject to a different privacy policy.

9. International transfers

We are based in the United States and our service providers process data in the United States. If you contact us from outside the US, your information will be transferred there. Where required, we rely on the European Commission's Standard Contractual Clauses or an equivalent transfer mechanism in our agreements with those providers.

10. How long we keep it

• Enquiries that don't lead anywhere — deleted within 24 months of our last exchange.
• Client records — kept for the life of the engagement and then for as long as we need them to meet legal, tax, and accounting obligations, typically seven years.
• Spam — discarded immediately, without a reply.

11. Your rights

Depending on where you live, you may have the right to access a copy of the personal information we hold about you, to have it corrected or deleted, to object to or restrict how we use it, to receive it in a portable format, and to withdraw consent where we've relied on it.

If you are a California resident, the CCPA/CPRA gives you rights to know, delete, and correct your personal information, and to opt out of its sale or sharing. We do not sell or share personal information as those terms are defined under California law, and we do not process it for cross-context behavioural advertising. We will not discriminate against you for exercising any of these rights.

To make a request, email [email protected]. We will respond within the timeframe the applicable law requires — 30 days under the GDPR, 45 days under California law — and we may need to verify your identity first. If you're in the UK, EU, or EEA and you're unhappy with our response, you may lodge a complaint with your local supervisory authority.

12. Security

The site is served over HTTPS, form submissions are transmitted encrypted, and access to our inbox and business systems is restricted to the people who need it and protected by multi-factor authentication. No method of transmission or storage is completely secure, so we can't guarantee absolute security — but we take the protection of your information seriously and review our practices as the business changes.

13. Children

This website is a business-to-business site and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us personal information, contact us and we will delete it.

14. Changes to this policy

We may update this policy as our business or the law changes. The "last updated" date at the top of this page always reflects the current version. If a change materially affects how we handle information you've already given us, we'll take reasonable steps to tell you directly.

15. Contact us

Questions about this policy, or about how we handle your information:

See also our Terms of Service, or return to the home page.