Legal

Privacy Policy

Last updated: 1 October 2026

This policy explains how Aluleth Corp LLC, doing business as Aluleth Marketing (“we”, “us”), collects and uses personal data when you visit alulethmarketing.com, ask us for a quote, or work with us. We serve clients all over the world, so this policy is written to respect the main privacy laws that may apply to you, including the EU and UK General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA) and other US state privacy laws, Canada’s PIPEDA, Brazil’s LGPD, Australia’s Privacy Act 1988 and the Philippines’ Data Privacy Act of 2012. If the law of your country gives you more protection, that protection applies.

Our EU representative under Article 27 GDPR is Anthony Loison EI, an individual business established in France. For clients and visitors in the EEA, Anthony Loison EI represents Aluleth Corp LLC for data protection matters under the GDPR.

This policy is written in English. If we provide a translation, the English version prevails in case of any inconsistency.

1. Who we are

The data controller is Aluleth Corp LLC, a Delaware limited liability company, Office 293, 254 Chapman Rd, Suite 101-B, Newark, DE 19702, USA. Aluleth Marketing is a division of Aluleth Corp LLC.

Privacy contact: contact@alulethmarketing.com (subject “Privacy”). If you are in the EEA or UK and have questions about our processing of your personal data, you can also contact us using this address. Our EU representative under Article 27 GDPR can be contacted at the same address, or at the contact details provided in our Legal Notice.

2. What we collect

• Quote requests: your name, email address, the service you are interested in, your approximate budget and timeline, your current website if you give it, your message, and the date of your privacy consent.
• Emails and calls: what you send us when you write to us or talk with us about a project.
• Client projects: when we work together, the contact, billing and project information needed to deliver the work, send quotes and invoices, and follow up.
• Chat messages: what you type in the chat on our website and, if you ask to talk to our team, your name, email address, question and website.
• Technical data: your IP address, browser and device information, processed by our hosting provider in server logs and by Cloudflare Turnstile to protect our forms against spam and abuse. Our chat also uses a one-way hashed version of your IP address to limit abuse.

We do not ask for sensitive data (such as health, religion or biometric data). Please do not send it to us.

3. Why we use it

• To answer your quote request and prepare an offer, including an automatic confirmation email and follow-up messages about your request.
• To deliver the services we agreed on, communicate during the project and provide support afterwards.
• To keep accounting and tax records required by law.
• To keep the website and forms secure and prevent spam, fraud and abuse.

We do not send you marketing emails unless you asked for them or the law allows it, and you can always opt out. We do not use your data for automated decisions that have legal or similarly significant effects on you.

Legal bases (EEA, UK and similar laws): steps taken at your request before a contract and performance of a contract (Art. 6(1)(b) GDPR) for quotes and projects; legal obligation (Art. 6(1)(c)) for accounting; our legitimate interests (Art. 6(1)(f)) for follow-ups about your request, security and spam protection; and your consent (Art. 6(1)(a)) where we ask for it. You can withdraw consent at any time.

4. Cookies

Under EU and UK cookie rules, cookies that are strictly necessary for the website to work and for security (such as Cloudflare Turnstile) do not require your consent. We only use what is strictly necessary for the website to work and to protect our forms. We do not use advertising or tracking cookies. If we add analytics or other non-essential cookies in the future, we will update this policy and ask for your consent through a cookie banner where the law requires it.

5. Who receives your data

Tools on our own server. Our forms (Fluent Forms) and our customer database (FluentCRM) run on our own website: your requests are stored there and are not shared with the companies that make these tools.

Service providers. We share personal data only with the providers below, and only so they can provide their service to us, under contracts that protect your data:

• Hosting and mailboxes: 20i Ltd (United Kingdom). 20i hosts our website, its database and backups, and our email inboxes. Its servers keep technical logs (such as IP address, date and time, and pages requested) to keep the service secure and prevent attacks.
• Email delivery: Twilio SendGrid (Twilio Inc., United States). SendGrid sends the emails from our website, such as the confirmation of your request, and keeps delivery records (recipient, date, delivery status).
• AI assistant: Anthropic PBC (United States). Our chat first answers with prepared replies. When our AI assistant is switched on, your chat messages are sent to Anthropic only to generate a reply; we do not use them for any other purpose. Anthropic acts as a data processor on our behalf and is contractually required to protect your data. Please do not share passwords, payment details or other sensitive information in the chat. If you ask to contact our team from the chat, your name, email address and question are sent to us by email and stored in our customer database.
• Spam protection: Cloudflare, Inc. (United States). Cloudflare Turnstile checks form submissions to block bots, using technical signals from your browser and your IP address.
• Payments: PayPal, Inc. (United States). When you pay for a monthly plan or a project invoice, PayPal processes your payment details (card or PayPal account), your name, email address, billing address and the amount paid. We never receive or store your full card details. We receive from PayPal the status of the payment and of your subscription. For its own services, PayPal acts as an independent controller under the PayPal Privacy Statement.
• Backups: Google LLC – Google Drive (United States). Backup copies of our website, including its database (quote requests, messages and customer records), are stored on Google Drive so that we can restore the site after an incident. Backups are kept for up to 2 weeks and then overwritten.

We may also share data with professional advisers (such as accountants or lawyers) or with authorities when the law requires it. We never sell your personal data, and we do not “share” it for cross-context behavioural advertising or use it for targeted advertising. We do not use analytics or advertising tools on this website; if this changes, we will update this policy first.

6. International transfers

We are based in the United States and our providers may process data in other countries. When we transfer personal data from a country that restricts such transfers (for example from the EEA, the UK or Switzerland), we use appropriate safeguards, such as the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum, or our providers’ certification under the EU-U.S. Data Privacy Framework and its UK and Swiss extensions. We put these safeguards in place through our contracts with service providers. We also check that our providers maintain appropriate certifications (such as the EU-U.S. Data Privacy Framework) where relevant.

7. How long we keep it

• Quote requests that do not lead to a project: up to 3 years after our last contact, then deleted.
• Client and project data: for the duration of our work together and for as long as needed for support and legal claims.
• Invoices and accounting records: as long as tax and accounting laws require (generally up to 10 years).
• Chat: conversations are not stored on our website; questions you send to our team from the chat are kept like quote requests.
• Security logs: a short period, usually a few weeks.
• Backups: up to 2 weeks, then overwritten.

8. Security

We use reasonable technical and organisational measures to protect your data, such as encrypted connections (HTTPS), access control and trusted providers. No online service is completely secure, but we work to protect your data and will notify you and the authorities of a breach when the law requires it.

9. Your rights

Depending on where you live, you may have the right to:

• know what personal data we hold about you and get a copy of it;
• correct it or have it deleted;
• restrict or object to its use, including for follow-up or marketing messages;
• receive it in a portable format;
• withdraw your consent at any time;
• not be treated differently for exercising your rights.

To exercise your rights, write to contact@alulethmarketing.com. We may ask you to confirm your identity, and we answer within the time the law gives us (generally within one month under EU and UK law, with a possible extension to three months for complex requests; other laws may provide different deadlines such as 30 days).

Region-specific information:

• EEA, UK and Switzerland: you can lodge a complaint with your local data protection authority.
• United States (California and other states with privacy laws): you have the rights to know, access, correct and delete, and to opt out of the sale or sharing of personal information and of targeted advertising. We do not sell or share personal information, or use it for targeted advertising. If we refuse your request, you can appeal by replying to our answer.
• Canada: you can contact the Office of the Privacy Commissioner of Canada.
• Brazil: you can contact the Autoridade Nacional de Proteção de Dados (ANPD).
• Australia: you can contact the Office of the Australian Information Commissioner (OAIC).
• Philippines: you can contact the National Privacy Commission.

Please contact us first: we will do our best to help.

10. Children

Our services are for businesses and adults. They are not directed to children under 16 (or under 13 in the United States), and we do not knowingly collect their personal data. If we become aware that we have collected personal data from a child in breach of applicable laws, we will delete it.

11. Changes

We may update this policy. Changes take effect on the “Last updated” date shown at the top of this policy, unless we state otherwise. The latest version is always on this page. If a change is important (for example if we start using new types of cookies or change the legal basis for processing), we will tell you in a clear way before it takes effect, where the law requires it.