Privacy

ALAS ("ALAS", "we", "us") is a creative studio based in the United States. This Privacy Policy explains what personal information we collect through this website and its pages (the "Site"), how we use it, and the choices and rights you have. It is designed to comply with applicable U.S. federal and state privacy laws, including the California Consumer Privacy Act as amended by the California Privacy Rights Act ("CCPA"), and, for visitors in those regions, the EU and UK General Data Protection Regulation ("GDPR") and similar international laws.

1. Information we collect

Information you give us. When you use "Let's talk" or write to us, we collect your name, email address, company, project details, location, dates, budget range and anything else you choose to share.

Technical information. Our hosting provider automatically processes the basic data needed to deliver the Site securely, such as IP address, browser type, device and the pages requested. These server logs are kept for a limited time.

Analytics. Only if you accept measurement in our consent notice, we may use analytics tools (such as Google Analytics or Microsoft Clarity) that collect information about how the Site is used through cookies. If you decline, they are never loaded.

We do not knowingly collect sensitive personal information, and we never ask for payment details on the Site.

2. How we use it

We use personal information to respond to your inquiry and prepare proposals; to operate, maintain and secure the Site; to understand how the Site is used, when you have consented; and to comply with legal obligations and enforce our Terms of Use.

For visitors in the EEA, UK and Switzerland, our legal bases are: taking steps at your request before entering into a contract; our legitimate interests in running and protecting the Site; your consent, for analytics; and compliance with legal obligations.

3. How we share it

We do not sell your personal information or share it for cross-context behavioral advertising, and we have not done so in the past 12 months. We disclose it only to service providers who act on our behalf under contracts that require them to protect it — website hosting (Vercel), content management (Sanity), email, and analytics only if you consent; when required by law or to protect rights, property and safety; and to a successor in a merger, acquisition or similar transaction, subject to this policy.

4. International transfers

We are based in the United States, and our service providers may process information in the U.S. and other countries. When we transfer personal data from the EEA, the UK or Switzerland, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses or a provider's certification under the EU-U.S. Data Privacy Framework and its UK and Swiss extensions.

5. How long we keep it

We keep inquiries for as long as needed to respond and follow up on a potential project, and no longer than 24 months without an ongoing relationship, unless the law requires a longer period. If we work together, project records are kept according to our agreement and legal obligations. Server logs and analytics data follow our providers' standard retention periods.

6. Your rights

Depending on where you live, you may have the right to know and access the personal information we hold about you, to correct it, to delete it, to receive a portable copy, to object to or restrict certain processing, and to withdraw your consent at any time without affecting prior processing.

California residents have the right to know, delete and correct their personal information, to opt out of its sale or sharing (we do not sell or share it), to limit the use of sensitive personal information (we do not collect it), and not to be discriminated against for exercising these rights. Residents of other U.S. states with comprehensive privacy laws, such as Colorado, Connecticut, Virginia, Texas and Oregon, have similar rights, including the right to appeal our decision on a request.

To make a request, email hello@alas.agency. We will verify your request by matching the information you provide with what we hold, and respond within the period required by law (generally 30 to 45 days). You may use an authorized agent. If we decline your request, you may appeal by replying to our response. If you are in the EEA or UK, you may also lodge a complaint with your local data protection authority.

7. Global Privacy Control

We honor the Global Privacy Control (GPC) signal. If your browser sends it, the Site treats it as a refusal of analytics and as a request to opt out of any sale or sharing of your personal information.

8. Children

The Site is not directed to children under 13 (or under 16 in the EEA and UK), and we do not knowingly collect their personal information. If you believe a child has sent us information, contact us and we will delete it.

9. Security

We use reasonable technical and organizational measures to protect personal information, including encrypted connections (HTTPS) and restricted access. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

10. Changes

We may update this policy from time to time. The date at the top shows when it last changed; material changes will be highlighted on the Site.

11. Contact

Questions or requests about privacy: hello@alas.agency.