1. Who is responsible for your data
Fractalon LLC, a limited liability company registered in New Mexico, United States, with its registered office at 407 Lincoln Rd, Ste 708, Miami Beach, Florida 33139, United States, is the controller of the personal data described in this policy.
For any privacy question or request, contact info@fractalon.tech.
2. What this policy covers
This policy covers personal data we handle as a controller: visitors to this website, people who contact us, and our clients and their representatives.
It does not cover personal data we process on behalf of a client in the course of an engagement. In that situation the client is the controller, we act as a processor under their instructions, and the terms of the relevant engagement or data processing agreement apply.
3. What we collect
Website visitors
This website uses no analytics, no advertising, no tracking pixels and no third-party scripts. Pages are served as static files from our own server.
Our web server keeps standard access logs containing:
- your IP address;
- the date, time and page requested;
- the HTTP status returned and bytes transferred; and
- your browser's user-agent string and referring page, if sent.
These logs exist for security and to diagnose faults. We do not use them to build profiles or identify individual visitors, and we do not combine them with other data.
Your light/dark theme preference is stored in your browser's local storage. It never leaves your device and is not a cookie. See our Cookie Policy.
People who contact us
When you email us we receive your name, email address, and whatever you choose to include in the message. We use it to answer you and, if we go on to work together, to prepare a proposal.
Clients and prospective clients
For an engagement we hold contact details of your representatives, billing and payment details, contract documents, and correspondence relating to the work.
4. Why we use it, and on what legal basis
- To respond to enquiries — legitimate interest in answering people who contact us, or steps taken at your request prior to a contract.
- To provide services and administer contracts — performance of a contract.
- To invoice and keep accounting records — legal obligation.
- To keep our systems secure and diagnose faults — legitimate interest in the security and availability of our services.
We do not sell personal data, we do not share it for cross-context behavioural advertising, and we do not use it for automated decision-making that produces legal or similarly significant effects.
5. Who we share it with
We share personal data only with service providers who help us operate, and only to the extent needed:
- our email and productivity provider;
- our hosting and infrastructure provider;
- our accounting, invoicing and banking providers; and
- professional advisers, or authorities where we are legally required to disclose.
Each is bound by contract to process the data only on our instructions and to keep it secure. We do not disclose personal data to anyone else without your instruction or a legal obligation.
6. International transfers
We are established in the United States and work with clients in the European Economic Area, so personal data may be transferred to and stored in the United States. Where we transfer personal data of individuals in the EEA or the United Kingdom, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses, and take supplementary measures where required.
7. How long we keep it
- Server access logs — up to 90 days.
- Enquiries that do not become engagements — up to 24 months, then deleted.
- Client records, contracts and correspondence — for the duration of the relationship and for as long afterwards as needed for legal claims.
- Accounting and tax records — for the period required by applicable law.
8. Your rights
Depending on where you live, you may have the right to access the personal data we hold about you, to have it corrected or deleted, to restrict or object to its processing, to receive it in a portable format, and to withdraw consent where processing is based on consent.
If you are in the EEA or the United Kingdom (GDPR): you have the rights above and the right to lodge a complaint with your national supervisory authority.
If you are a California resident (CCPA/CPRA): you have the right to know what personal information we collect and how we use it, to request deletion or correction, and not to be discriminated against for exercising these rights. We do not sell or share personal information as those terms are defined by the CCPA.
To exercise any right, email info@fractalon.tech. We respond within one month, or within the period required by applicable law. We may need to verify your identity before acting on a request.
9. How we protect it
We apply technical and organisational measures appropriate to the risk: encryption in transit (HTTPS across the whole site), access limited to those who need it, multi-factor authentication on business accounts, encrypted credential storage, and the practice of working with the minimum client data a task requires — preferring anonymised or synthetic data in development, and deleting working copies on completion.
No system is perfectly secure. If a breach occurs that is likely to result in a risk to your rights, we will notify you and the relevant authority as required by law.
10. Children
Our services are directed at businesses and at individuals acting in a professional capacity. We do not knowingly collect personal data from anyone under 16. If you believe we have, contact us and we will delete it.
11. Changes to this policy
We may update this policy. The "last updated" date shows when the current version took effect. Material changes affecting how we use your data will be communicated directly where we hold your contact details.
12. Contact
Fractalon LLC
407 Lincoln Rd, Ste 708
Miami Beach, Florida 33139
United States
info@fractalon.tech