Privacy Policy

Last updated: 9 November 2026.

1. Scope

This Privacy Policy explains how Ardwins Digital Labs LLC, a Wyoming limited liability company ("Ardwins", "we", "us"), collects, uses and protects personal data when you visit ardwins.com (the "Site") or contact us by email. Ardwins Digital Labs LLC is the controller of that data.

This policy does not cover personal data we process on behalf of clients under a separate written agreement. That processing is governed by the agreement and, where required, a data processing agreement. Software products we may offer in the future will have their own privacy terms.

2. Data we collect

The Site is static. It has no forms, no user accounts, no cookies and no advertising trackers. We collect only the following:

• Contact you initiate. When you email us, we receive your email address, your name if you include it, the content of your message, any attachments, and the details you choose to share about your company or project.
• Technical and log data. When you load the Site, our hosting and security provider processes standard request data, such as IP address, browser and device type, operating system, referring page, requested URL, date and time. This is needed to deliver the Site and protect it from abuse.
• Analytics. We use Cloudflare Web Analytics, which is cookieless and does not use local storage or fingerprinting to track you across sites. It gives us aggregated statistics, such as page views, referrers, country and page load performance.

We do not knowingly collect special categories of personal data. Please do not send us such data by email.

3. How we use data

• To read and reply to your messages and to discuss possible work with you.
• To prepare, enter into and perform agreements with clients and partners.
• To deliver, maintain and secure the Site, and to detect and prevent abuse, fraud and attacks.
• To understand, in aggregate, how the Site is used and to improve it.
• To keep business records, meet legal obligations, and establish, exercise or defend legal claims.

We do not sell personal data, we do not share it for cross-context behavioural advertising, and we do not use it for automated decisions that have legal or similarly significant effects on you.

4. Legal bases

Where the EU General Data Protection Regulation (GDPR) or the UK GDPR applies, we rely on:

• Legitimate interests (Article 6(1)(f)): running a secure Site, measuring its use in aggregate, replying to messages you send, and keeping business records.
• Contract (Article 6(1)(b)): taking steps at your request before entering into an agreement, and performing that agreement.
• Legal obligation (Article 6(1)(c)): where the law requires us to keep or disclose data.
• Consent (Article 6(1)(a)): only where we ask for it. You can withdraw consent at any time, without affecting processing that took place before.

5. Sharing and processors

We share personal data only with service providers that process it on our behalf and under contract:

• Cloudflare, Inc.: hosting, content delivery, security and cookieless web analytics.
• Google LLC (Google Workspace): business email and related productivity tools.

We may add or replace providers as our business develops. If we offer software products in the future, sales may be handled by a reseller or merchant of record, which will process your data under its own privacy terms and will be identified at checkout.

We may also disclose data to professional advisers under confidentiality duties, to authorities or courts where the law requires it, to protect our rights, users or the public, or to a successor in a merger, acquisition, reorganisation or sale of assets, subject to this policy.

6. International transfers

Our providers may process data in the United States and other countries outside your own. Where data from the European Economic Area, the UK or Switzerland is transferred to a country without an adequacy decision, we rely on the European Commission's Standard Contractual Clauses (SCCs), the UK International Data Transfer Addendum, the EU-US Data Privacy Framework where the provider is certified, or another lawful mechanism. You can ask us for more information about these safeguards.

7. Retention

• Emails: as long as needed to handle your enquiry or the related work, and then for as long as required for business records, legal obligations or possible claims.
• Log and security data: for short periods set by our hosting provider, unless needed longer to look into an incident.
• Analytics: kept in aggregated form that does not identify you.

When data is no longer needed, we delete it or make it anonymous.

8. Security

We use reasonable technical and organisational measures to protect personal data, including encrypted connections (HTTPS), access controls and reputable providers with strong security programmes. No method of transmission or storage is fully secure, so we cannot guarantee absolute security. Email is not end-to-end encrypted by default, so please do not send sensitive information by email.

9. Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you and receive a copy.
• Rectification of inaccurate or incomplete data.
• Erasure of your data.
• Restriction of processing.
• Data portability, in a structured, commonly used, machine-readable format.
• Object to processing based on legitimate interests.
• Withdraw consent at any time, where processing is based on consent.
• Lodge a complaint with a supervisory authority, in particular in the country where you live or work, or where an alleged breach took place. In the UK, this is the Information Commissioner's Office (ICO).

To exercise a right, email hey@ardwins.com. We may need to verify your identity before acting on a request. We reply within the time required by applicable law, usually one month.

10. California and other US state rights

If you live in California or another US state with a consumer privacy law, you may have the right to know what personal information we collect, use and disclose, to request access, correction or deletion, and to opt out of the sale or sharing of personal information. We do not sell or share personal information as those laws define the terms, and we do not use or disclose sensitive personal information. We will not discriminate against you for exercising your rights. You or an authorised agent can make a request at hey@ardwins.com.

11. Children

The Site and our services are for businesses. They are not directed to anyone under 16, and we do not knowingly collect personal data from children. If you believe a child has sent us personal data, contact us and we will delete it.

12. Third-party links

The Site may link to websites and services we do not control. Their privacy practices are their own, and we are not responsible for them. Read their policies before sharing data with them.

13. Changes to this policy

We may update this policy from time to time. The new version applies from the date shown at the top of this page. If a change is material, we will make it clear on the Site.

14. Contact

Questions or requests about privacy: hey@ardwins.com. See also our Terms of Use.