Privacy Policy
Last updated: 7 September 2026
1. Who is responsible for your data
Automatia Agency, the trading name of the sole proprietorship of Alexander Rosales, 32 Adirondack Lane, Plattsburgh, NY 12901, United States, is responsible for the personal data described in this policy. Contact: alexander@automatia-agency.com.
2. This website does not track you
This site serves static pages. It sets no cookies, runs no analytics, embeds no advertising or social media trackers, and loads no fonts, scripts or images from third party servers. Nothing you do on this site is recorded by the provider. The hosting provider may keep standard server logs containing the requesting IP address, for security and availability purposes, under its own policy.
3. What is collected, and why
| Data | Why | Legal basis |
|---|---|---|
| Name, email address and the content of your message | To answer an enquiry you send by email | Steps taken at your request before entering a contract |
| Client contact details, billing details and project correspondence | To perform the engagement, invoice it and keep the required records | Performance of a contract, and legal obligation for tax records |
| Data contained in material a client supplies for processing | To carry out the work the client instructed | Performance of a contract, on the client's instructions |
4. Data a client supplies for processing
Where a client supplies material that contains personal data, such as a customer list or a set of documents, the client remains responsible for that data and the provider acts only on the client's documented instructions. That material is used solely to perform the agreed work, is not used for any other purpose, is not sold, and is not shared with anyone other than the service providers listed below where the work requires it. It is returned or deleted at the client's request, and in any case within ninety days of the end of the engagement unless the client asks for it to be kept.
5. Who else may see your data
Personal data is never sold and is never shared for advertising. It may be handled by the service providers used to run the business, each only to the extent needed:
- Email hosting, to send and receive correspondence
- Server and website hosting, to run the systems the work is delivered on
- Payment processors and freelancing platforms, to receive payment for an engagement
Data may also be disclosed where required by law or by a valid legal request.
6. International transfers
The provider is based in the United States and the services above may store data in the United States or in other countries. Where personal data originating in the European Economic Area or the United Kingdom is transferred, it is transferred on the basis of an appropriate safeguard, including the European Commission's Standard Contractual Clauses where applicable.
7. How long data is kept
Enquiries that do not lead to an engagement are deleted within twelve months. Client correspondence and project files are kept for the duration of the engagement and for two years afterwards. Invoices and records required for tax purposes are kept for seven years. Material supplied by a client for processing is handled as described in section 4.
8. Your rights
You may ask for a copy of the personal data held about you, ask for it to be corrected, ask for it to be deleted, ask for its processing to be restricted, object to its processing, or ask to receive it in a portable format. Depending on where you live, these rights come from the General Data Protection Regulation, the United Kingdom GDPR, or state privacy laws in the United States. Write to alexander@automatia-agency.com and you will receive an answer within thirty days. There is no charge, and you will not be treated differently for exercising a right. If you are not satisfied with the answer, you may complain to your local data protection authority.
9. Marketing
The provider does not send marketing email to people who have not asked for it, and does not add enquirers to any mailing list. Where a business does receive a commercial message from the provider, it contains a working unsubscribe link and a postal address, and an unsubscribe request is honoured immediately.
10. Security
Access to systems holding personal data is protected by unique credentials and multi factor authentication where the service supports it. Data in transit is encrypted. Access is limited to what is needed to perform the work. No system is perfectly secure, and if a breach affecting your personal data occurs you will be notified without undue delay where the law requires it.
11. Children
These services are offered to businesses and to adults. Personal data is not knowingly collected from anyone under sixteen.
12. Changes to this policy
If this policy changes, the new version is published on this page with a new date at the top.