(Legal)
Privacy Notice
We collect very little, we don’t sell any of it, and everything below is what actually happens on this site rather than a template.
Who’s responsible
Portillo Technologies, Orange County, California, is the controller of personal information collected through this site. Reach us at [email protected].
What we collect
When you contact us
The contact form posts what you typed to our own server, which passes it straight to our email provider and sends it to us. Nothing is stored in a database on this site. Whatever you put in the form lands in our inbox: usually your name, email address, company, the kind of work you’re asking about, and your description of the problem.
If that route is unavailable, the form hands the same message to your own mail app instead, so it reaches us as an ordinary email.
When you just browse
Our host, Cloudflare, runs its own privacy-first analytics on the site. It counts page views and reports rough country and browser figures. It sets no cookies, builds no profile, and cannot follow you to another site. On top of that Cloudflare keeps ordinary server logs to deliver pages and fend off abuse.
We run no Google Analytics, no advertising measurement, and nothing that identifies you personally.
What we don’t do
No accounts, no payments taken on this site, no newsletter list, no advertising pixels, no data brokers. We self-host our fonts and scripts, so reading this page doesn’t call out to a font or library provider.
If we ever add analytics, this page changes first and you get asked before anything is set.
Why we’re allowed to
- To answer you. If you write to us, we use your details to reply and, if it goes further, to scope the work. That’s our legitimate interest in responding to an enquiry, and the step before a contract.
- To keep the site working. Our legitimate interest in serving the page and keeping it up.
- To meet legal and accounting obligations. Where a law says we must keep something.
Who else sees it
We keep the list short and we don’t sell or rent personal information to anyone.
- Email and file storage providers that host our inbox and documents.
- Cloudflare, which hosts the site, serves every page, and provides the cookieless analytics described above.
- Video hosting, for the embedded player. Because your browser fetches files from it, it receives your IP address and browser details as a technical necessity.
- Professional advisers or authorities, where the law requires disclosure.
Some of these providers operate in the United States and other countries. Where personal information leaves your region, we rely on the provider’s standard contractual clauses or an equivalent safeguard.
How long we keep it
Enquiry emails stay in our inbox while a conversation is live and for up to two years afterwards, because prospects often come back. Records tied to signed work follow the retention terms in that agreement and any tax or accounting rules. We keep no analytics data, because we collect none.
Ask us to delete your enquiry sooner and we will, unless we’re required to keep it.
Your rights
Depending on where you live, you can ask us to show you what personal information we hold about you, correct it, delete it, limit what we do with it, hand it over in a portable form, or stop processing based on legitimate interest.
If you’re in California, the CCPA as amended by the CPRA gives you rights to know, delete, correct, and opt out of sale or sharing. We don’t sell or share personal information as those terms are defined, and we don’t use it for cross-context behavioral advertising. We won’t treat you differently for exercising any right.
If you’re in the UK or EEA, the UK GDPR and GDPR give you the rights above plus the right to complain to your supervisory authority.
To exercise any of this, email [email protected]. We’ll respond within 30 days, and we may ask a question or two to confirm it’s really you.
Security
We use reputable hosting and email providers, keep access to client material limited to the people doing the work, and encrypt data in transit. No system is perfectly secure, so please don’t send credentials, health records, or other sensitive material by ordinary email. If you need to hand over something sensitive, ask and we’ll set up a secure route.
Children
This site is aimed at businesses and isn’t intended for anyone under 16. We don’t knowingly collect information from children. If you believe a child has sent us something, write to us and we’ll delete it.
Cookies
The detail lives in our Cookie Policy, including how to turn analytics off.
Changes
When our practices change, we update this page and move the effective date at the top. Material changes get called out on the page for a while so returning readers notice.