Privacy Policy

SupafastTech ("we", "us") builds mobile and web applications for clients worldwide. We are the controller of the personal data described in this policy.

• Controller: SupafastTech
• Contact for privacy questions and requests: [email protected]

Our own apps and products have their own privacy policies. This policy covers this website and our client services only.

What you send us. When you use the contact form we receive your name, email address, project type, your message, and your phone number if you choose to add it. If you write to us by email or through a messaging app, we receive what you send and your contact details on that service.

While we work together. Project requirements and materials you share, correspondence, and billing details needed to issue and receive payment (such as company name, billing address and payment reference). We do not store full card numbers.

Collected automatically. When you visit the site, our analytics tools receive your page views, pages you click, approximate location derived from your IP address, browser and device type, referring page, and a random identifier stored in your browser. See section 5.

We do not use your data for automated decisions that have legal effect on you.

We send two kinds of email:

• Replies to your enquiry. Our answer to your message, and an automatic confirmation if you use the form.
• Project emails. Estimates, kickoff, demos, releases and invoices. You receive these because you are our client or prospective client. They are part of the service and do not have an unsubscribe link. Tell us if you want them to go to a different address.

We do not send marketing newsletters. If that changes, we will ask for your consent first and every message will have an unsubscribe link.

We do not sell your personal data, and we do not share it for advertising. We use a small number of service providers that process data on our behalf:

• Hosting and infrastructure. Hosting providers and network and security services that run the website and its data.
• Email and messaging. Email and messaging services we use to receive and answer your messages. Contact form messages are forwarded to a private chat that our team reads.
• Analytics. Analytics tools that count visits and show how the site is used.
• Payments and banking. Our bank or payment provider, only for invoices you pay.

We may also disclose data when the law requires it, to protect our rights, or if the company is sold or reorganised (the new owner must honour this policy).

The site uses essential cookies and similar storage that it needs to work. We also use analytics tools that may set cookies or store a random identifier in your browser to count visits and see which pages are useful. PostHog, Google Analytics 4 and Ahrefs Web Analytics load only after you press Accept in the cookie notice. If you press Decline, they stay off. We keep your choice for 12 months, and the "Cookie settings" link in the footer opens a page where you can change it. You can also block cookies in your browser.

Some analytics providers may process data outside your country, including in the United States. We do not use advertising cookies and we do not sell analytics data. We do not send your name, email or message text to analytics tools.

You can block or delete cookies in your browser settings at any time. The site works without analytics.

We work with providers in several countries, including the United States. If you are in the European Economic Area, the UK or Switzerland, your data may be transferred to and processed in other countries. Where required, we rely on safeguards such as the European Commission's Standard Contractual Clauses, or on a provider's participation in the EU-US Data Privacy Framework. Ask us for details.

We keep personal data only as long as we need it for the purpose it was collected for, then delete or anonymise it. In practice:

• Enquiries that do not become a project are deleted after a reasonable time.
• Client project data and correspondence are kept for the project and support period, and afterwards only as long as needed for questions or disputes.
• Contracts, invoices and accounting records are kept as long as tax and accounting law requires.
• Analytics data is kept for a limited period and then deleted or aggregated.

You can ask us to delete your data sooner (section 9).

Depending on where you live, you can:

• ask what data we hold about you and get a copy;
• correct data that is wrong or incomplete;
• ask us to delete your data;
• ask us to restrict or stop certain processing, including objecting to processing based on legitimate interest;
• receive your data in a portable format;
• withdraw consent at any time (this does not affect what we did before);
• complain to your data protection authority. In the UK this is the ICO, in the EU it is the authority in your country of residence.

California and other US states. You can ask what personal information we collected about you in the past 12 months, ask us to delete or correct it, and opt out of "sale" or "sharing". We do not sell personal information or share it for cross-context advertising. We will not treat you differently for using these rights.

To use any right, email [email protected]. We may need to confirm it is you. We answer within 30 days (45 days in California; we will tell you if we need more time). You can also ask an authorised agent to act for you.

We use encrypted connections (HTTPS), access limited to the people who need it, and separate environments for development and production. No system is completely secure, and we cannot promise absolute security. If a breach affects your data, we will notify you and the authorities as the law requires.

Source code, designs, and your own users' data that you give us for a project belong to you. We use them only to deliver your project. For projects that process personal data of your users, we will sign a data processing agreement on request.

Our services are for businesses and are not directed to children under 16. We do not knowingly collect data from children. If you think a child has sent us data, write to us and we will delete it.

We may update this policy. The date at the top shows the latest version. If a change is significant, we will say so on this page and, if you are a client, by email.

Questions or requests about this policy: [email protected].