Privacy policy

Who we are

DrupalAuthority LLC (“Drupal Authority”, “we”, “us”) is a company registered in the State of Delaware, USA. Our address is 1620 E Ayre St, Wilmington, DE 19804, United States. We run this website, drupalauthority.com (the “site”), and we decide how and why the personal information collected through it is used. Under privacy law that makes us the “controller” (GDPR) or the “business” (CCPA). You can reach us about privacy at info@drupalauthority.com or +1 (302) 488-9880.

The short version

• The only information we collect from you is what you type into our contact form, plus the technical data every web server receives.
• We use it to answer you and to run and protect the site. We do not sell it, and we do not use it for advertising.
• This site sets no cookies and runs no analytics or advertising trackers.
• Your message reaches our team by e-mail and in a private Telegram chat.
• You can ask us to show, correct or delete what we hold about you at any time.

Information we collect

What you give us

When you use the contact form we receive your name, your work e-mail address, your message, and, in the full form, your company or website and the kind of work you are asking about. We also record that you agreed to let us use these details to reply to you. If you write to us by e-mail or call, we receive what you tell us. Please do not put sensitive information in a message (health data, government ID numbers, payment card numbers, passwords). We do not need it.

What we receive automatically

With a message we also receive the page you sent it from and the name of the button you used (for example “home-hero”). If you arrived through a link with campaign tags (utm_source, utm_medium and similar), those tags travel with the message so we know which campaign brought you. Like every website, our servers and our hosting provider receive technical data with each request: your IP address, browser and device type, the pages and files requested, the date and time, and the page you came from. We use it to deliver the site, keep it secure and spot abuse. We do not build profiles from it.

What stays in your browser

We set no cookies. The site keeps a few small items in your browser’s session storage, which the browser deletes when you close the tab: the name, e-mail address and button name of a message you just sent (so the thank-you page can say where we will reply; it also expires after two hours), the campaign tags of the link you arrived on, and your scroll position on the home page (so a reload returns you to where you were). Text you have typed into an open form is held in the page’s memory only and is cleared once the message is sent. None of this is sent anywhere by itself.

How we use it, and why we may

Privacy law asks us to name the reason for each use. Ours are:

• To answer your message and talk about a project. Your consent (you tick the box in the form) and, for business inquiries, our legitimate interest in answering the people who write to us. At your request this is also the first step towards a contract.
• To prepare proposals and to agree and carry out work with you. Performing, or preparing to enter into, a contract.
• To keep the site and our systems secure and to stop spam. Our legitimate interest in a safe site. The form limits how often one IP address can send; that count is held briefly in the server’s memory and is not attached to your message.
• To keep records and meet legal duties, including settling a dispute. Legal obligation and our legitimate interest in protecting our rights.

Giving us your name, e-mail address and message is needed for us to reply; without them we cannot. Everything else in the form is optional. We do not make decisions about you by automated means, and we do not send newsletters or marketing e-mail. We write to you only in answer to what you sent. If that ever changes, we will ask for your consent first.

Who receives it

We share information only with the services that help us run the site and read your message, each acting on our instructions:

• An e-mail delivery service (Resend), which delivers the notice of your message to our mailbox.
• Telegram, which delivers the same notice to a private chat that only authorized members of our team can read.
• Our hosting and infrastructure provider, which serves the site and keeps its server logs.
• A workflow or CRM tool, if we connect one to the form to keep track of inquiries.

We may also disclose information to our lawyers and accountants, to authorities when the law requires it, and to a buyer or successor if the business is sold or merged (we would tell you and the new owner would have to honor this policy). We do not sell personal information, and we do not share it for cross-context behavioral advertising. We have done neither in the past twelve months.

How long we keep it

We keep an inquiry (your message and our replies) for as long as we need to answer it, and for up to 24 months after the last message if no project follows. If we work together, we keep the records of the contract for as long as the contract and the law (for example tax rules) require. Server logs are kept by our hosting provider for a limited period. The items in session storage disappear as described above. You can ask us to delete an inquiry sooner, and we will, unless the law requires us to keep it.

International transfers

We are in the United States, and our service providers process information in the United States and other countries. If you are in the European Economic Area, the United Kingdom or Switzerland, your information is therefore transferred to the United States. Where the law requires a safeguard for such a transfer, we rely on the European Commission’s Standard Contractual Clauses (and the UK addendum) in our agreements with providers, or on another lawful transfer mechanism. Write to us if you would like a copy.

Your rights and how to use them

Whoever you are, you can ask us to tell you what we hold about you and give you a copy, correct what is wrong, and delete it. You can also object to a use that rests on our legitimate interest.

If you are in the EEA, the United Kingdom or Switzerland

You have the right to access your information, to have it corrected or erased, to restrict or object to its use, to receive it in a portable format, and to withdraw consent at any time (withdrawing does not affect what we did before). You can complain to your data protection authority; we would welcome the chance to put things right first.

How to make a request

E-mail info@drupalauthority.com with “Privacy request” in the subject, or call +1 (302) 488-9880. To protect you, we confirm that the request comes from you: usually by replying to the address you used in the form, or by asking about details of your message. You may also ask an authorized agent to act for you; we will ask for proof of their authority. We confirm receipt within ten business days and answer within 30 days. If a request is complex we may need more time, up to 90 days in total, and we will tell you why. There is no fee unless a request is clearly baseless or excessive. If we decline a request, you can appeal by replying to our answer; we respond to the appeal within 45 days and tell you how to contact your state attorney general or data protection authority.

California and other US states

Residents of California, and of states with similar laws (Colorado, Connecticut, Virginia, Utah, Texas and others), may have the right to know what personal information we collect, use and disclose, to access and delete it, to correct it, to opt out of its sale or sharing, to limit the use of sensitive information, and not to be treated worse for using these rights. We honor these rights for every visitor, whether or not the law requires it. We do not sell or share personal information, and we do not collect sensitive personal information on purpose, so there is nothing to opt out of or limit. The table shows what the site collects.

We do not sell your personal information and do not share it for cross-context behavioral advertising, and we have not in the past twelve months. California’s “Shine the Light” law lets residents ask which personal information a business shares with third parties for their direct marketing; we share none.

Security

The site is served over an encrypted connection (HTTPS). The notices of your messages go to mailboxes and chats that only authorized members of our team can open, and we collect as little as we can. No system is perfectly secure, so we cannot promise absolute protection. If we learn of a breach that affects you, we will tell you as the law requires.

Cookies and tracking

This site sets no cookies, loads no analytics or advertising scripts, and does not track you across other sites, so there is nothing to opt out of; if your browser sends a Global Privacy Control or “Do Not Track” signal, there is nothing for it to switch off. If we add analytics later, we will update this page first and, where the law requires it, ask for your consent before using it.

Children

The site is for businesses. It is not directed to children, and we do not knowingly collect information from anyone under 16. If you think a child has sent us information, write to us and we will delete it.

Links to other sites

The site links to our LinkedIn and Facebook pages and to the websites of the clients whose work we show. They are run by others, and their own privacy policies apply once you leave our site. We do not control them.

Changes to this policy

We will update this page when what we do with information changes, and change the date at the top. If a change affects how we use what you have already sent us, we will tell you by e-mail where we can.

Contact

DrupalAuthority LLC
1620 E Ayre St, Wilmington, DE 19804, United States
info@drupalauthority.com · +1 (302) 488-9880