Privacy policy
What we collect, why, who else touches it, and how to make us delete it. Written to be read, not to be survived.
Last updated: 29 August 2026
Evolvtech, LLC ("Evolvtech", "we") is the controller of the personal information described here. We collect only what we need to answer you and deliver the work you ask for.
The short version
- If you only browse, we generally receive limited technical information needed to operate and secure the site, such as server logs. We do not use that information to build an advertising profile about you. Analytics stay off unless you accept them.
- If you use the contact form, we get your name, email, and whatever you write, so we can reply and prepare a quote.
- We do not sell or share your information for advertising.
- You can ask us to show you, correct, or delete what we hold at any time by emailing info@evolvtech.org.
What we collect, and why
When you use the contact form
Your name, email address, optional phone number, the service you selected, and your message. We use this only to reply, prepare a base quote, and keep a record of the enquiry.
Legal basis (UK/EU): steps taken at your request before entering a contract, and our legitimate interest in responding to business enquiries.
When you use the contribution link
Checkout takes place on Stripe's page, not on this site. Stripe collects the email address you enter and the payment details needed to take the payment. We use that information to receive the contribution, keep accounts, and handle errors or disputes. We do not store card numbers. What a contribution is, and is not, is described in our terms of service.
Legal basis (UK/EU): processing the payment transaction you request, where necessary to perform that transaction or take steps at your request; compliance with our legal obligations relating to accounting and recordkeeping; and, where applicable, our legitimate interests in preventing fraud and resolving payment disputes.
When you browse
Our host records standard server logs, including IP address, the page requested, and browser type. These are used to keep the site running and secure, not to build a profile of you.
Legal basis (UK/EU): our legitimate interest in operating and securing the site.
Spam protection
We use hCaptcha to protect the contact form against automated abuse. We currently classify this functionality as necessary for the security and reliable operation of the form. Where applicable law requires consent for a particular storage or access operation used by hCaptcha, we will apply the consent requirements required by that law.
Analytics, only if you accept
If you accept analytics, Google Analytics counts visits and shows which pages are useful. Nothing is sent to Google before you accept, and advertising features are disabled. You can change your answer at any time on our cookies page.
Legal basis (UK/EU): your consent, which you can withdraw at any time.
Who else processes it
We use a limited number of service providers to operate this website and provide related services. Depending on the service and the processing involved, a provider may process personal information on our behalf or may act as an independent controller for certain purposes, such as security, fraud prevention, payment processing, legal compliance or operation of its own service. Their processing is also subject to their applicable privacy terms and contractual arrangements with us.
- Vercel — hosts the site and processes server logs.
- Resend — delivers contact form submissions to our inbox.
- hCaptcha (Intuition Machines) — spam and abuse prevention on the form.
- Stripe — processes contributions made through the payment link.
- Google (Analytics) — only if you accept analytics.
We do not sell personal information or share it for cross-context behavioural advertising, as those terms are defined under applicable US state privacy laws.
International transfers
Where personal information is transferred internationally and applicable law requires a transfer mechanism, we use appropriate safeguards as required for the relevant transfer. These may include adequacy decisions, the European Commission's Standard Contractual Clauses, the applicable UK transfer mechanism, or another lawful safeguard.
How long we keep it
- Enquiries that do not become projects: up to 24 months, then deleted.
- Client records: for the engagement and as long afterwards as tax and contractual rules require.
- Contribution records: as long as tax and accounting rules require.
- Server logs: short-term, per our host's retention.
- Analytics data: where Google Analytics is enabled with your consent, we configure the applicable user-level and event-level data retention setting to 14 months. Google may retain other information in accordance with its own applicable policies and legal obligations.
Your rights
Wherever you are, you can ask us to give you a copy of what we hold, correct it, delete it, or stop using it. Email info@evolvtech.org. We do not charge for this and we will not treat you differently for asking. We will respond within the period required by applicable law. Where the UK GDPR or GDPR applies, we generally respond within one month of receiving a valid request, subject to any extension permitted by law.
If you are in the UK or the EU
You have the rights of access, rectification, erasure, restriction, portability, and objection under the UK GDPR and GDPR, including the right to withdraw consent at any time. You may also complain to your national supervisory authority, or to the Information Commissioner's Office in the UK.
If you are in the United States
Depending on the state in which you reside and whether the relevant law applies to Evolvtech, you may have the right to know what we collect, to delete it, to correct it, and to opt out of sale or sharing. We do not sell personal information or share it for cross-context behavioural advertising, as those terms are defined under applicable US state privacy laws, so there is nothing to opt out of on that basis, but you can still exercise the other rights using the email above. We do not use financial incentives or discriminate against anyone who exercises a right.
If you are in Africa
Where local data protection law applies, including South Africa's POPIA, Nigeria's NDPA, Kenya's Data Protection Act, and applicable data-protection law in The Gambia, where it applies, you have comparable rights of access, correction, deletion, and objection, and you may complain to your national regulator. Use the same email and tell us which country you are writing from so we apply the right rules.
Children
This is a business site and is not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a person under 16 has submitted personal information to us, contact us. We will take appropriate steps to delete the information unless we are required or permitted by law to retain it.
Security
The site is served over HTTPS with a strict content security policy. Form submissions are validated and sent server-side, so our email credentials are never exposed to your browser. No system is perfectly secure, but we keep the number of places your data goes deliberately small.
Changes
If we change how we handle personal information we will update this page and the date at the top. Significant changes affecting analytics will reset your cookie choice so you are asked again.
Contact
Evolvtech, LLC
131 Continental Drive, Suite 305, Newark, DE 19713, United States
info@evolvtech.org · +1 (302) 208-7556