Privacy Policy

Information we handle

Information you provide

If you submit the consultation form, we receive your name, email address, phone number when provided, business name, industry, project description, timeline, selected service package when present, and any other information you include. We use it to answer your inquiry, discuss possible work, maintain business records, prevent abuse, and meet applicable legal obligations.

Basic technical information

Like most websites, our hosting and security providers may process information such as IP address, browser and device type, requested page, timestamps, and security signals needed to deliver and protect the site.

Analytics and campaign attribution

Cloudflare Web Analytics

We use Cloudflare Web Analytics for aggregate visits, page views, performance, and Core Web Vitals. Cloudflare describes this service as privacy-focused and cookie-free. It is separate from the optional GA4 interaction tracking described below.

Google Analytics 4 through Cloudflare Zaraz

Cloudflare Zaraz manages Google Analytics 4 (GA4) at the network edge. When analytics is permitted, we measure page views and a limited set of interactions: consultation-button selections, service-package selections, telephone-link selections, form start and submission stages, broad error reasons, and a successful lead only after the form provider confirms delivery.

These analytics events use allowlisted context such as button placement, package, timeline, and campaign. We do not send names, email addresses, phone numbers, business names, free-form messages, or Turnstile tokens as analytics event properties. The site does not directly load Google Tag Manager or Google's gtag.js.

Campaign links and 30-day first touch

Tagged links may contain standard UTM values that identify a source, medium, campaign, or individual placement. When analytics is permitted, the site keeps the first tagged visit in your browser's localStorage for up to 30 days. That information can be attached to later analytics events and to a consultation inquiry so we can understand which outreach led to it. We do not create this record before analytics permission, and we remove it if analytics consent is declined or withdrawn.

Form delivery and security providers

Web3Forms

The consultation and client notification enrollment forms are sent to Web3Forms, which processes submissions to deliver them to us. The consultation form is only treated as a lead after Web3Forms returns a successful delivery response. Please do not submit sensitive personal, financial, or health information. You can review the Web3Forms privacy policy.

Cloudflare Turnstile

Cloudflare Turnstile helps distinguish legitimate form submissions from automated abuse. Cloudflare may process browser, device, network, and challenge signals to provide that protection. Our public sitekey can appear in page code; the matching secret stays private and is used by Web3Forms for server-side verification. Cloudflare's Turnstile Privacy Addendum applies when the Turnstile sitekey is configured in Invisible mode.

Client SMS notifications

Arandela & Co. Client Inquiry Alerts is an optional service for clients and their authorized staff who choose to receive texts about new inquiries submitted through their business websites. These are informational notifications, not marketing messages. Enrollment is available at Client notifications. We review requests and confirm setup by email before activating alerts.

Enrollment and messaging information

When you request notifications, we receive your name, work email, business name, website, notification preference, and mobile number if you opt in to SMS. The enrollment record includes the consent wording and version, submission time, and method of enrollment. We use this information to verify your request, set up alerts, provide support, and maintain consent and opt-out records. Messaging records may include message content, delivery status, timestamps, and replies such as STOP or HELP.

Delivery providers and sharing

Web3Forms delivers enrollment requests to our inbox. For activated SMS alerts, Twilio and telecommunications providers process the recipient number, message content, and delivery information needed to send and manage messages. Read Twilio's Privacy Notice.

We do not sell or share mobile information with third parties or affiliates for marketing or promotional purposes. SMS opt-in data and consent are not sold, rented, or shared for those purposes. We share them only with providers as necessary to operate this messaging service, or when legally required. These restrictions also apply to the sharing described elsewhere in this policy.

Your choice and our records

SMS consent is optional, separate from email notifications, and not a condition of purchase. Message frequency varies with website inquiry activity. Message and data rates may apply. Reply STOP to unsubscribe or HELP for help, or email hello@arandela.co. Opting out of SMS does not stop email notifications. See our SMS Terms for program details.

We keep enrollment and consent records while you participate and afterward as reasonably needed to document your choices, resolve disputes, and meet legal obligations. We retain opt-out records as needed to prevent further texts. Other notification and delivery records are kept only as long as reasonably needed to operate and support the service and meet legal obligations.

This enrollment covers texts to the client or staff member who opts in. It does not enroll people who submit inquiries on a client's website. Each client's privacy notice describes how that business handles its visitors' inquiries.

Your analytics choices

In regions where an analytics choice is required, Cloudflare Zaraz asks before GA4 events or campaign attribution operate. Elsewhere, analytics may be enabled automatically based on location. You may decline analytics and still browse the site, use telephone links, and submit the consultation form.

You can review or withdraw your consent at any time by selecting Privacy choices. Withdrawing analytics clears the site's stored campaign attribution and stops new optional events from this browser. Browser controls may also let you clear site data or block storage.

Sharing, retention, and transfers

We share information with service providers only as needed to host, protect, measure, and operate this website, deliver inquiries, or provide client notifications. We may also disclose information when required by law or to protect rights and safety. We do not sell personal information and do not use advertising pixels or remarketing tools in the current site.

Consultation information is kept only as long as reasonably needed to respond, manage a potential or active business relationship, maintain necessary records, and meet legal obligations. Analytics retention is controlled through the applicable Cloudflare and GA4 account settings. Service providers may process information in the United States or other countries where they operate.

Questions and privacy requests

Depending on where you live, you may have rights to ask about, access, correct, or delete personal information, or to object to or restrict certain processing. To ask a question or make a request, email hello@arandela.co. We may need to verify a request before acting on it.

We may update this policy when the site or its providers change. The date at the top shows the latest revision.