1. Who we are
Pinenox is a digital agency providing website design and development, AI and automation work, branding, and graphic and UI/UX design. In this policy, "we", "us" and "our" mean Pinenox; "you" means a visitor to this website or a person who contacts us.
Registered entity and address details are stated in full in every contract we sign and are available on request. For anything in this policy, the contact route is team@pinenox.studio.
2. The short version
- This is a static website. It has no user accounts, no login, and no database of visitors.
- The contact form does not send anything to a server of ours. It opens your own email application with a message pre-filled, and nothing is transmitted until you press send.
- Fonts are loaded from Google's servers, which means Google receives your IP address when a page loads.
- We do not sell your information, and we do not use it for advertising.
3. What this website collects
3.1 The contact form
The enquiry form on this site is deliberately simple and worth understanding clearly: it does not transmit your details to us or to any third-party form service. When you press the submit button, the details you typed are assembled into an email and handed to whatever email application your device is set up to use. Nothing leaves your device until you send that email yourself. If you close it instead, we never see anything.
The practical consequences are: we cannot recover a message you did not send; the email reaches us through your own email provider and ours; and the form itself sets no cookies and stores nothing.
3.2 Google Fonts
This site uses typefaces served by Google Fonts. That means your browser makes a request to Google's servers (fonts.googleapis.com and fonts.gstatic.com) when a page loads, and Google can see your IP address, the approximate time of the request, and technical details such as your browser and operating system. That processing is governed by Google's own privacy terms, not ours. We do not receive that data and cannot see it.
3.3 Hosting and server logs
The site is served by a third-party hosting provider. Like effectively all web hosts, it processes technical request data — IP address, requested URL, timestamp, user agent, response status — for the purposes of serving pages, security, and abuse prevention. We use this only in aggregate or diagnostic form, and we do not attempt to identify individual visitors from it.
Current hosting provider: Vercel Inc., with edge delivery from data centres in multiple regions.
3.4 What we do not collect
- No accounts, passwords, or profiles.
- No payment or card details through this website.
- No advertising or cross-site tracking pixels.
- No special category data (health, beliefs, biometrics, and so on). Please do not send it to us.
4. Cookies and analytics
This website does not set cookies of its own for tracking, advertising, or profiling. Analytics are not currently in use on this website.
If we introduce analytics in future, we will name the provider in this section, describe what it collects, and — where consent is legally required — ask for it before any non-essential script loads. You can also block third-party requests and clear stored data through your browser settings at any time.
5. How we use enquiry emails
When you email us, or send the pre-filled brief from the contact form, we use what you tell us to:
- Understand what you need and reply to you.
- Prepare a proposal, estimate, or scope of work.
- Deliver and support work you engage us for, and handle invoicing and records for it.
- Keep a record of what was discussed and agreed.
We do not add enquirers to a marketing list without asking. We do not sell, rent, or trade contact details. We do not use enquiry content to train machine-learning models.
Where the law requires a legal basis for processing, ours is: performance of a contract or steps taken at your request before entering one; our legitimate interest in responding to business enquiries and keeping accurate records; consent, where we have asked for it; and compliance with legal obligations such as tax and accounting rules.
6. How long we keep it
- Enquiries that do not become projects — kept for 24 months, then deleted, so that we have context if you come back to us.
- Client project correspondence and files — kept for the duration of the engagement and for 7 years afterwards, for support, warranty, and reference purposes.
- Invoices and financial records — kept for as long as tax and accounting law requires.
- Hosting logs — retained according to our hosting provider's own schedule.
7. Third parties
We keep the number of third parties deliberately small. The categories we rely on are:
- Hosting — to serve this website.
- Font delivery — Google Fonts, as described in section 3.2.
- Email — our email provider, which processes messages you send us.
- Project and file tools — the tools used to run engagements, which may hold material a client shares with us.
These providers act as processors or as independent controllers of the technical data they collect, and each has its own privacy terms. Some are based outside your country, which means your information may be processed in another jurisdiction with different data protection rules; where required, transfers rely on the safeguards those providers put in place. We will name the specific providers on request.
8. Security
We take reasonable and proportionate measures to protect information in our care, including access controls on accounts and devices, encrypted connections for this website, and keeping the number of places client material is stored to a minimum. No method of transmitting or storing information is completely secure, so we cannot promise absolute security — and, in particular, ordinary email is not a secure channel. Please do not send passwords, card numbers, or identity documents by email.
9. Your rights
Depending on where you live, you may have the right to ask us to:
- Confirm whether we hold information about you, and give you a copy of it.
- Correct information that is wrong or incomplete.
- Delete information we no longer need to keep.
- Restrict or object to how we use it, including any use based on legitimate interests.
- Receive it in a portable format, or have it transferred elsewhere.
- Withdraw consent you previously gave, without affecting what was done before you withdrew it.
Email team@pinenox.studio and we will respond within 30 days. We may need to verify your identity before acting on a request. If you are not satisfied with our response, you can complain to the data protection authority for your country.
10. Children
This website is aimed at businesses and is not directed at children. We do not knowingly collect information from children. If you believe a child has sent us personal information, contact us and we will delete it.
11. Links to other sites
Where we link to another website, that site's own privacy practices apply once you leave ours. We are not responsible for their content or how they handle your data.
12. Changes to this policy
We may update this policy as the website or our services change. The "last updated" date at the top always reflects the current version. If a change materially affects how we handle information you have already given us, we will take reasonable steps to tell you directly.
13. Contact us
Questions, corrections, deletion requests, or complaints about privacy all go to the same place: team@pinenox.studio. Please put "Privacy" in the subject line so it reaches the right person quickly.
This page describes our practices in plain language and is provided for information. It is not legal advice, and it does not form part of any contract between us. Our commercial terms are set out separately in our Terms of Service.