Privacy Policy

Controller

The controller responsible for personal data on this website is Quibalorxod, located at 207 Smithfield St, Pittsburgh, PA 15222, United States. For privacy-related correspondence: ask@quibalorxod.world. Telephone: +1 412-586-4334. If you are in the EU or EEA and wish to contact our representative where one is appointed, we will provide details in response to your message.

Data we collect

We collect categories of data depending on how you interact with us:

• Identity and contact data: name and email address when you submit the contact form.
• Communication content: the text of your message and any attachments you choose to send.
• Consent records: whether you agreed to data processing on the form and, separately, cookie preferences stored locally in your browser.
• Technical and usage data: IP address, browser type and version, device type, operating system, referring URL, and timestamps from standard server logs.
• Optional analytics or marketing data: only if you enable those categories in the cookie consent panel; the specific tools may evolve over time and are described in the Cookies Policy.

We do not use this website to collect sensitive categories of data as defined under the GDPR unless you voluntarily include such information in a message. We ask that you avoid sending unnecessary sensitive details.

Purposes and lawful bases

Under the GDPR, we process personal data only when a lawful basis applies. In summary:

• Responding to inquiries: when you contact us, processing is necessary to take steps at your request prior to entering a contract or is based on our legitimate interest in operating a professional communications channel. Where you use the GDPR consent checkbox, consent also supports processing where it is the appropriate basis.
• Website operation and security: we process technical logs to maintain availability, detect abuse, and protect our systems (legitimate interests in security and integrity).
• Analytics or marketing: only if you consent through the cookie banner.
• Legal compliance: we may process data where required by law, such as responding to lawful requests from public authorities.

Where we rely on legitimate interests, we balance our interests against your rights and offer you the opportunity to object where applicable, especially for marketing-related processing.

Retention

We keep personal data only as long as needed for the purposes described:

• Contact messages: typically up to twenty-four months after the last substantive exchange, unless a longer period is required for legal claims, accounting, or audit.
• Server and security logs: generally rotated or deleted within ninety days unless an incident investigation requires a longer hold.
• Cookie consent records: stored in your browser until you clear site data or update preferences.
• Analytics or marketing: according to provider configuration and your consent, with minimization settings where available.

We review retention periods periodically and anonymize or delete data when retention is no longer justified.

Recipients and categories of recipients

We may share personal data with:

• Hosting and infrastructure providers that store website files and deliver content over HTTPS.
• Email and productivity providers used to receive and manage correspondence.
• Analytics or marketing vendors only when you enable those categories and their scripts load.
• Professional advisers such as lawyers or accountants when strictly necessary.
• Public authorities when required by applicable law.

We do not sell personal data as a business model. Any subprocessor is subject to appropriate contractual terms under data protection law.

Google, advertising, and measurement

When you enable optional marketing or analytics cookies through our cookie banner, we or our vendors may use technologies that help measure visits, cap how often you see a message, or support advertising relevance. Categories and your controls are described in our Cookies Policy.

Google offers advertising and measurement services that may process data when you interact with ads or use sites and apps that use Google tools. For how Google uses information from sites or apps that use their services, see Google’s policy for partner sites and Google’s Privacy Policy. You can review or change ad personalization for Google ads at adssettings.google.com. Google also summarizes ad-related technologies at policies.google.com/technologies/ads.

We select vendors based on fit and privacy expectations; we do not operate every third-party system. You can withdraw consent for optional cookies at any time through the cookie settings on this site. For a plain-language overview aimed at U.S. visitors and ad transparency, see Advertising & disclosures.

International transfers

Our servers or service providers may be located in the United States or other countries outside your country of residence. When we transfer personal data from the EEA, UK, or Switzerland to countries not recognised as adequate, we rely on appropriate safeguards such as the EU Standard Contractual Clauses (including the UK and Swiss addenda where relevant), supplemented by technical and organizational measures described in agreements with vendors.

You may request a copy of relevant safeguards by contacting us.

Security measures

We implement organizational and technical measures appropriate to the risk, including access controls, secure transport for data in transit, vendor vetting, and staff awareness. No online transmission is completely secure; we encourage you to use strong passwords on your own devices and to avoid sending confidential information by email unless you accept the residual risks.

Your rights

Depending on your location, you may have the following rights under the GDPR and similar laws:

• Right of access to the personal data we hold about you.
• Right to rectification of inaccurate or incomplete data.
• Right to erasure (“right to be forgotten”) in certain circumstances.
• Right to restriction of processing.
• Right to data portability for data you provided where processing is based on consent or contract and is carried out by automated means.
• Right to object to processing based on legitimate interests, including profiling in some cases.
• Right to withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing before withdrawal.
• Right to lodge a complaint with a supervisory authority. In the Netherlands, the Autoriteit Persoonsgegevens is the national authority. EU residents may also contact the authority in their habitual residence or place of work.

To exercise rights, email us with a clear description of your request. We may need to verify your identity before responding. We will answer within one month in ordinary cases, or inform you of an extension where permitted by law.

Children

This website is not directed at children under sixteen, and we do not knowingly collect their personal data. If you believe a child has provided data, contact us and we will take steps to delete it.

Changes to this notice

We may update this Privacy Policy to reflect changes in law, technology, or our business. The date shown in the hero section of this page is updated when we publish substantive revisions. Continued use of the site after changes constitutes notice where permitted by law; material changes may be highlighted through a banner or email when we have your address.

Contact

For privacy questions or requests: Quibalorxod, 207 Smithfield St, Pittsburgh, PA 15222, USA. Email: ask@quibalorxod.world. Phone: +1 412-586-4334.