Privacy notice
last reviewed
What this website actually collects, where it goes, and how to ask us about it — matching the pipeline behind the contact form and the one analytics script we run, not a generic template.
What we collect
If you use the contact form, we collect the fields it actually asks for: your name, work email, company, and a short note on what is driving the enquiry are required; a phone number is optional. Sending the form also requires ticking a consent checkbox first.
The form also carries a hidden field and a submission-timing check, used only to filter out automated spam. If either one trips, the submission is discarded on our server and none of the fields you entered are stored or forwarded anywhere. We do not run a CAPTCHA or a third-party challenge service on this form today.
If you simply browse the site, our analytics script counts the visit in aggregate — see "Analytics" below. We do not use Google Fonts, embedded video, chat widgets, share buttons, or any other script that opens a hidden connection to a third party. Plausible, described below, is the only third-party request this website makes, from any page.
What happens when you submit the contact form
Your submission is sent to an Azure Function we run on our own hosting platform (Azure Static Web Apps). From there it is written, over the Microsoft Graph API, to a SharePoint list inside our own Microsoft 365 tenant. A Power Automate flow watches that list and posts a card to our internal Microsoft Teams channel and an email toinfo@asdataworks.com, so a person sees it quickly. We do not run a separate marketing database, CRM, or mailing-list tool for this data — the SharePoint list is the system of record.
Where it is stored
Everything above lives inside our own Microsoft 365 tenant, on infrastructure Microsoft operates.
hostingour own Microsoft 365 tenant, on Microsoft-operated infrastructure[PLACEHOLDER: the datacentre region the tenant is provisioned in]
How long we keep it
We keep a contact-form enquiry that does not turn into an engagement for 24 months from the date you submit it, then delete it. That period is the retention policy for non-converted enquiries set out in our own build documentation (STACK.md §8.6). If your enquiry becomes an engagement, retention for that relationship is governed by the signed agreement for the work, not by this notice.
Analytics
The only analytics running on this site is Plausible, a privacy-focused, cookieless analytics tool. It reports aggregate numbers only — page views, referring sites, and a coarse, non-stored location inferred from your IP address — and it never sets a cookie, never tracks you across other websites, and cannot identify you as an individual visitor.
We have not added Google Analytics, and we have not added a Google Ads conversion tag — no advertising runs on this site today; that phase comes after launch. If that changes, this notice and our cookie notice will change with it, before any new tag ever loads.
Cookies, in one sentence
This site sets zero cookies today. See our cookie notice for the full, current list of what actually runs in your browser and what would change if that ever does.
Your rights, and how US state privacy law applies
Residents of California, Virginia, Colorado, Connecticut and Texas each have some version of the rights below under that state's privacy law — the CPRA, VCDPA, CPA, CTDPA and TDPSA, respectively. We apply the same rights to anyone who asks, regardless of which state you are in.
- Know and access
Ask what personal information we hold about you and where it came from.
- Delete
Ask us to delete personal information we hold about you, other than information we must keep for a signed, active engagement.
- Correct
Ask us to fix inaccurate personal information.
- Opt out of sale, sharing, or targeted advertising
We do not sell or share personal information, and we run no targeted-advertising tag on this site today — so there is nothing to opt out of yet. If that changes, this notice and our cookie notice will say so before it happens.
- Non-discrimination
We will not charge you differently or provide a different level of service because you exercised any of the rights above.
- Opt-out signals, including Global Privacy Control
This site does not set a tracking cookie and shows no consent banner today, so there is no opt-out mechanism for a Global Privacy Control signal to trigger yet. If we ever add advertising or tracking that requires consent, the consent step we add will honour a Global Privacy Control signal as an automatic opt-out — stated here as fact once it is true, not before.
| Subprocessor | What they do for us | Receives the form fields you submit? |
|---|---|---|
| Microsoft | Hosts this website (Azure Static Web Apps) and runs the Microsoft 365 services the contact form pipeline uses (SharePoint, Teams, Power Automate, Outlook). | Yes |
| GitHub | Stores the source code and deploys this website. | No |
| Plausible | Runs the cookieless, aggregate analytics script described below. | No — Plausible only ever sees an anonymous page-view event, never form data |
Who is responsible for this notice
How to exercise a right, or ask us anything about this notice
Email info@asdataworks.com. Tell us which right you are exercising and enough detail to find your submission (for example, the name or company you used on the contact form) — we do not otherwise link a form submission to a broader identity.
Changes to this notice
We move the "last reviewed" date at the top of this page whenever it changes, and call out what changed when the change is material.
Back to Trust and security.