01Who we are
We are the controller of the personal information described in this policy.
02Information we collect
2.1 Information you give us
Contact and project inquiries. When you submit our contact form, we collect your name, email address, the service you're interested in, your budget range, and your project description. If you provide them, we also collect your company name, phone number, and project timeline.
Consultation bookings. When you book a call through our scheduling link, we receive your name, email address, selected time, and any details you add to the booking.
Messaging. If you contact us by WhatsApp, email, or phone, we receive your phone number or email address and the contents of your message.
Client and project information. If you become a client, we collect the information needed to deliver the engagement — billing contacts, project requirements, credentials or access you choose to share, and correspondence.
2.2 Information collected automatically
Usage and device data. If you consent to Analytics cookies, this may include your IP address, approximate location, browser type, device type, operating system, referring URL, pages viewed, interactions, and time spent on the site.
Cookies and similar technologies. See Section 6.
2.3 What we do not collect
We do not knowingly collect sensitive personal information such as government ID numbers, health information, biometric data, or financial account numbers through this website. Please do not send this kind of information through our contact form.
03How we use your information
Respond to your inquiry and provide a project estimate or consultation
Schedule and conduct calls and meetings
Deliver, support, and invoice for services you've engaged us to perform
Send service-related messages such as project updates, invoices, and renewal reminders
Send marketing emails, where you have opted in — you can unsubscribe at any time
Understand how the site is used so we can improve it
Protect against fraud, spam, and abuse, and to secure our systems
Comply with legal, tax, and accounting obligations
We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
04Legal bases (visitors in the EEA and UK)
If you are in the European Economic Area or the United Kingdom, we process your personal information on the following bases:
Contract — to respond to your inquiry and to perform services you've engaged us for
Legitimate interests — to operate, secure, and improve our website and business, in a way that does not override your rights
Consent — for marketing emails and non-essential cookies, which you can withdraw at any time
Legal obligation — to meet tax, accounting, and regulatory requirements
05Who we share information with
We share personal information only with service providers who help us run our business, and only as needed for them to perform their function. These providers are bound by contract to protect your information and may not use it for their own purposes. Categories include:
Website hosting and infrastructure — to host and serve this website
Email and communications — to send and receive email and messages
Scheduling — to book and manage consultation calls
Analytics — Google Analytics 4, deployed through Google Tag Manager, to measure site traffic and usage after you grant Analytics consent
Payment processing — to issue invoices and process client payments; card details go directly to our payment processor and are never stored by us
Project management and CRM — to track inquiries, projects, and client records
Contractors and subcontractors — independent developers, designers, and specialists who work on client projects under written confidentiality obligations
We may also disclose information when required by law, subpoena, or valid legal process; to protect our rights, safety, or property; or in connection with a merger, acquisition, or sale of assets, in which case we will notify you before your information becomes subject to a different privacy policy.
06Cookies and tracking
We use cookies and similar technologies to operate the site and, with your permission, understand how it is used:
Essential — required for the site to function, including sessions, security, form submission, and remembering your cookie choices. These cannot be turned off.
Analytics — help us understand page usage, website performance, traffic sources, and how visitors move through the site. These are disabled unless you grant Analytics consent.
We use Google Analytics 4 through Google Tag Manager for analytics. Google Analytics does not load unless you grant Analytics consent. We do not currently enable advertising or remarketing storage. You can learn more about how Google handles information in Google's Privacy Policy.
We store your choices in the first-party dino_cookie_consent cookie for 180 days. You can accept, reject, or customize optional cookies through the consent banner and change or withdraw your choice at any time by selecting “Cookie Preferences” in the website footer. Withdrawing consent prevents future analytics collection but does not undo processing that occurred while your consent was active.
You can also control cookies through your browser settings. Blocking essential cookies may affect how parts of the site work. Some browsers send a “Do Not Track” or Global Privacy Control signal; we honor Global Privacy Control signals where required by law.
07How long we keep information
Inquiries that don't become projects: up to 24 months, then deleted
Client records and project files: for the length of the engagement and up to 7 years afterward, to meet tax, accounting, and legal requirements
Marketing contacts: until you unsubscribe or ask us to delete your information
Analytics data: typically 14 months
Cookie consent preference: 180 days, unless you clear it sooner through your browser
08Your privacy rights
8.1 California residents
Under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, California residents have the right to know what personal information we collect and how we use it, to request deletion or correction of that information, to opt out of the sale or sharing of personal information, and to not be discriminated against for exercising these rights.
We do not sell or share personal information as those terms are defined under California law, and we do not use or disclose sensitive personal information for purposes requiring an opt-out.
8.2 Other U.S. states
Residents of states with comprehensive privacy laws — including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, and others — have comparable rights to access, correct, delete, and obtain a portable copy of their personal information, and to appeal a denied request.
8.3 EEA and UK residents
You have the right to access, correct, delete, restrict, or object to processing of your personal information, to receive a portable copy, to withdraw consent, and to lodge a complaint with your local supervisory authority.
8.4 How to exercise your rights
Email support@dinocodela.com with your request and enough detail for us to locate your information. We will respond within the timeframe required by applicable law — generally 45 days in California, and one month in the EEA and UK. We may need to verify your identity before acting on a request. An authorized agent may submit a request on your behalf with written proof of authorization.
09Security
We use reasonable administrative, technical, and physical safeguards to protect personal information, including encryption in transit (HTTPS), access controls, and confidentiality agreements with staff and contractors. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
10International transfers
We are based in the United States and our service providers and contractors may be located in other countries. If you contact us from outside the United States, your information will be transferred to and processed in the United States, where privacy laws may differ from those in your country. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.
11Children's privacy
Our website and services are intended for businesses and are not directed to children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, contact us and we will delete it.
12Third-party links
Our site links to third-party websites and profiles, including our listings on review platforms and our social media accounts. We are not responsible for their privacy practices. Review their policies before providing them with personal information.
