1. Who is responsible for your data?
Laliatechnologies.com is responsible for the personal data described in this policy.
For privacy questions or requests, contact: data.inquiries@laliatechnologies.com.
2. What data do we collect?
When you submit a product brief, we collect:
- your name;
- your work email address;
- the product idea or problem you describe;
- your product's current stage; and
- your timeline, if you choose to provide one.
Our hosting and form-service providers may also process limited technical data, such as your IP address, browser and device information, referring page, requested page, and submission time, to deliver and secure the site and prevent spam.
Please do not include sensitive personal data in the product-brief field.
3. Why do we use your data, and on what legal basis?
We use your data only to:
- review and respond to an inquiry you make for yourself and, where relevant, take steps at your request before entering into a contract (Article 6(1)(b) GDPR);
- handle an inquiry you make on behalf of a company, based on our legitimate interests in communicating with prospective business clients (Article 6(1)(f) GDPR); and
- operate and secure the website and prevent abuse, based on our legitimate interests in maintaining a secure and reliable website (Article 6(1)(f) GDPR).
The name, work email, product description, and current-stage fields are required to submit a product brief. Without them, we cannot review or respond to your inquiry. The timeline field is optional.
We do not use product-brief data for unrelated marketing, sell personal data, or use it for solely automated decisions that produce legal or similarly significant effects.
4. Who receives your data?
Access is limited to authorized personnel who need the data to handle your inquiry and to service providers acting on our behalf, including:
- our web-hosting provider, which delivers and secures the website;
- Formspree, which receives, stores, filters, and forwards product-brief submissions; and
- our email service provider, which delivers and stores correspondence.
These providers may use their own subprocessors and must handle personal data under applicable contractual and data-protection obligations. We may also disclose data where required by law or necessary to establish, exercise, or defend legal claims.
5. International transfers
Formspree hosts its services with Amazon Web Services in the United States. For transfers of EEA personal data that require safeguards, Formspree states that it relies on Standard Contractual Clauses. You may contact us to request information about the relevant safeguards.
6. How long do we keep your data?
Our form service keeps product-brief submissions and associated submission data for 30 days. We keep related correspondence only for as long as reasonably necessary to respond to the inquiry and evaluate a potential engagement, unless:
- you become a client, in which case relevant data is retained as part of the client relationship and for applicable legal, accounting, or claims periods; or
- a longer period is required by law or reasonably necessary for legal claims.
We then delete or anonymize the data unless a longer period is required for one of the reasons above. Our web-hosting provider anonymizes website-visitor IP addresses when collecting its hosting data.
7. Cookies and analytics
The website does not currently use non-essential cookies, advertising trackers, or analytics services. If this changes, we will update this policy and request consent where required before using non-essential technologies.
8. Your rights
Subject to the conditions and exceptions in applicable law, you may ask us to:
- give you access to your personal data;
- correct inaccurate or incomplete data;
- delete your data;
- restrict how we use your data;
- provide data you gave us in a portable format; or
- stop processing based on our legitimate interests. We will stop unless we have compelling legitimate grounds or need the data for legal claims.
To exercise a right, email data.inquiries@laliatechnologies.com. We may request information needed to verify your identity. We use request and verification data only to handle and document your request, as necessary to comply with our legal obligations (Article 6(1)(c) GDPR). Access is limited to authorized personnel and the service providers described above. We retain this information for up to three years after closing the request to demonstrate compliance. We normally respond within one month.
You may also lodge a complaint with a data-protection authority, particularly in the EEA country where you live, work, or believe an infringement occurred. A list of EEA authorities is available from the European Data Protection Board.
9. Changes to this policy
We may update this policy when our data practices or legal obligations change. We will post the updated version on this page and revise the effective date.