Privacy Policy

What we collect on this website

This site is a marketing website for a small web design, development, and hosting studio. We keep the data we collect through it to a minimum:

• Contact and project requests. If you reach out through our contact or project form, or email us directly, we receive whatever you type in, typically your name, email address, the plan or service you're interested in, and a message about your project.
• Language preference. If you switch the site language (EN/RO/RU), that choice is saved in your browser's local storage so we don't ask you again on your next visit. This never leaves your device.
• Cookie consent choice. Whether you accepted or declined our cookie banner is saved in your browser's local storage, again so we don't ask you again on your next visit.
• Job applications. Our Careers page doesn't submit anything to our servers. When you click "Send," it opens your own email app with a message pre-filled, and you choose whether to attach a CV, portfolio, or other files before sending it yourself. We only receive what arrives in that email, the same as any message sent to us directly.

We do not currently run analytics, advertising, or third-party tracking scripts on this site. If that changes in the future, we'll update this page and this notice before anything loads.

What we handle when you're a client

If you hire us, we may handle additional information so we can deliver the work. Which of the following applies depends on the services you choose:

• Project and account details. Your business name, contact people, billing details, and the content, images, and brand material you provide for your site.
• Access credentials. Where needed to build, host, secure, or maintain your site, you may give us access to your domain, hosting, CMS, code repositories, or other accounts. We use this access only for your project.
• Backend and application data. If we build or run a backend for you (for example APIs, databases, user accounts, admin panels, or an online store), that system may store information about your customers and users, such as names, emails, orders, and login details.
• Payment information. Online store payments are processed by third-party payment providers. We configure the integration, but we do not store full card numbers on our own systems.
• Hosting and monitoring data. Managed hosting, malware scanning, firewall, and uptime monitoring involve server and security logs, which can include IP addresses, request details, and error or attack records. We use these only to keep your site fast, available, and safe.
• Backups. Automatic backups contain a copy of your site and any data stored in it, including the information described above.
• Security audit material. If we carry out a security audit or penetration test at your request, we may see configuration details, system information, and vulnerabilities, and we may come into contact with data stored in the systems being tested. We only test systems you've authorized us in writing to test.
• Maintenance requests. The changes you ask for each month, and any content or files you send with them.

Your customers' data is yours. For information about your own users that sits inside a site or system we build or host for you, you decide why and how it's used, and we handle it on your behalf and on your instructions. You're responsible for giving your users any privacy notice or obtaining any consent required for your own site.

Why we collect it

• Contact details you send us are used solely to respond to your inquiry and, if you become a client, to deliver and bill for our services.
• Client data, credentials, and backups are used only to build, host, secure, maintain, and support your project, and to carry out any audit you've asked for.
• Server and security logs are used to keep sites available, detect attacks, and fix problems.
• Language and cookie-consent preferences are used only to make the site work the way you last set it up, nothing more.
• Anything you send us through a job application email is used solely to review you as a candidate for the role you applied to.

Cookies & local storage

This site does not set tracking or advertising cookies. The only browser storage in use is local storage (not a traditional cookie) for the two preferences described above. You can clear this at any time through your browser's site settings, which will reset your language and reshow the cookie banner.

Sites we build for clients are separate from this one and may use their own cookies or tools. Those are described in each client's own privacy notice.

How long we keep it

Messages sent through our contact or project form are kept only as long as needed to respond to you or, if you become a client, for the duration of our working relationship plus a reasonable period for our records. Language and cookie-consent preferences live in your own browser and are never transmitted to us.

For client projects, we keep project files, credentials, and backups for as long as we provide the service, and delete or return them after the engagement ends, unless you ask us to keep them or the law requires us to. Backups are rotated, so older copies are replaced over time. Security audit findings are shared with you and kept only as long as needed to support the work and any follow-up, and test data we collect is deleted once the audit is complete.

Job applications are kept only as long as needed to consider you for the role (and any other open role you might be a fit for), and are deleted after that unless you ask us to keep them longer.

Who we share it with

We don't sell or rent your information. We share it only with providers that help us deliver our work, and only as needed:

• our email provider, through which contact form messages and applications pass,
• hosting, infrastructure, backup, and security-monitoring providers used to run client sites,
• payment processors, for clients who sell online, and
• other tools or services you ask us to connect to your project, such as email, analytics, or shipping services.

These providers are chosen for their own security and privacy practices. We don't share your details with advertisers, and we may disclose information if the law requires it.

How we protect it

We use reasonable measures to protect the information we handle, including encrypted connections (SSL), limiting access to the people who need it for a project, and monitored hosting. No system is completely secure, so we can't promise absolute security, but if we become aware of a breach affecting your information we'll let you know promptly.

Your rights

You can ask us at any time to:

• tell you what information we hold about you,
• correct anything that's inaccurate,
• delete the information we hold about you, or
• stop using it for a particular purpose.

To do any of this, just email us at contact.midnightwebs@gmail.com and we'll get back to you.

If you're a customer or user of one of our clients' websites or apps, please contact that business first, since they decide how your data is used. We'll help them respond to your request.

Contact

Questions about this policy or how we handle your data can be sent to contact.midnightwebs@gmail.com.