Privacy Policy

1. Information We Collect

We keep data collection to the minimum necessary. Here is what we collect and how.

Contact form submissions. When you use our contact form, we collect your name, email address, and the content of your message. You provide this information voluntarily when you choose to get in touch with us.

Server logs. Our hosting provider (Vercel) automatically collects standard web server logs when you visit our site. These include your IP address, browser type and version, operating system, referring URL, pages visited, and timestamps. These logs are collected for security and operational purposes.

We do not collect any information beyond what is described above. We do not require you to create an account, and we do not use analytics tracking tools on this site.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To respond to your inquiries and communicate with you about your message
• To maintain the security and proper operation of our website
• To identify and address technical issues or errors
• To comply with legal obligations where applicable

We do not sell, rent, or share your personal data with third parties for marketing purposes. We do not use your data for profiling or automated decision-making.

3. Data Processing Basis (GDPR)

Under the General Data Protection Regulation, we process your personal data on the following legal bases:

• Consent — When you submit our contact form, you consent to us processing your name, email, and message to respond to your inquiry. You may withdraw this consent at any time by contacting us.
• Legitimate interest — We process server log data on the basis of our legitimate interest in maintaining the security, availability, and proper operation of our website. This processing is proportionate and does not override your fundamental rights.
• Legal obligation — We may process data where required to comply with applicable laws or regulations.

4. Third-Party Services

We use a small number of third-party services to operate this site. Each is described below with information about how they handle your data.

Formspree processes contact form submissions on our behalf. When you submit the contact form, your name, email, and message are transmitted to Formspree's servers for delivery to us. Formspree acts as a data processor under our instructions. You can review their privacy policy at formspree.io/legal/privacy-policy.

Vercel hosts our website and processes standard server logs as part of that service. Vercel acts as a data processor under our instructions. You can review their privacy policy at vercel.com/legal/privacy-policy.

Google Fonts serves the typefaces used on this site. When you load a page, your browser makes requests to Google's servers to fetch font files. Google may log these requests. You can review Google's privacy policy at policies.google.com/privacy.

We do not use any other third-party services, analytics tools, or advertising networks on this site.

5. Cookies

This website does not set any cookies for tracking, analytics, or advertising purposes.

Our hosting provider (Vercel) may set strictly necessary technical cookies required for the operation and security of the website, such as load balancing. These cookies do not track your behaviour and are exempt from consent requirements under GDPR.

We do not use cookie consent banners because we do not set any cookies that would require your consent.

6. Data Retention

Contact form data. We retain your name, email, and message for as long as necessary to respond to your inquiry and for a reasonable period afterwards (typically up to 12 months) in case of follow-up correspondence. You may request earlier deletion at any time.

Server logs. Standard web server logs collected by Vercel are retained according to Vercel's data retention policies, typically for a period of 30 days. We do not independently store or archive server logs.

When data is no longer needed for its original purpose and no legal obligation requires us to keep it, we delete or anonymize it.

7. Your Rights Under GDPR

As a data subject under the GDPR, you have the following rights with respect to your personal data:

• Right of access — You can request a copy of the personal data we hold about you.
• Right to rectification — You can ask us to correct any inaccurate or incomplete data.
• Right to erasure — You can request that we delete your personal data where there is no compelling reason for us to continue processing it.
• Right to data portability — You can request a machine-readable copy of the data you provided to us.
• Right to object — You can object to processing based on legitimate interest. We will stop processing unless we have compelling legitimate grounds.
• Right to restrict processing — You can ask us to suspend processing of your data in certain circumstances.
• Right to withdraw consent — Where we process data based on your consent, you may withdraw that consent at any time.

To exercise any of these rights, contact us at [email protected]. We will respond to your request within 30 days.

You also have the right to lodge a complaint with the Irish Data Protection Commission (DPC), our supervisory authority. You can reach the DPC at dataprotection.ie.

8. International Transfers

Flout Labs is based in Ireland, within the European Economic Area (EEA). However, some of our third-party service providers (Formspree, Vercel, Google) may process data in the United States or other countries outside the EEA.

Where data is transferred outside the EEA, we ensure that appropriate safeguards are in place. These providers maintain compliance through mechanisms such as Standard Contractual Clauses (SCCs) approved by the European Commission, or equivalent protections under applicable data protection frameworks.

If you have questions about specific transfer mechanisms, contact us and we will provide further details.

9. Children's Privacy

Our website and services are not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe that a child has provided us with personal data, please contact us at [email protected] and we will take steps to delete that information promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. When we make changes, we will update the "Last updated" date at the top of this page.

For significant changes that materially affect how we handle your data, we will make reasonable efforts to notify you, such as posting a prominent notice on our website. We encourage you to review this page periodically.

11. Contact Us

If you have any questions about this Privacy Policy, your personal data, or wish to exercise your rights, you can reach us at:

Flout Labs (Flout Ltd)
Galway, Ireland
[email protected]

We aim to respond to all inquiries within 30 days.