Privacy Policy

Who we are

OVAL LLC(“OVAL”, “we”, “us”) is a digital marketing and web development agency registered in the United States, at 30 N Gould St #34910, Sheridan, Wyoming 82801. For questions about this policy or about your data, contact contant@ovalllc.net.

For visitors in the United Kingdom and European Economic Area, we act as the data controller for information collected through this website. Where we process data on behalf of a client — for example, analytics data within their own properties — we act as a data processor under that client’s instructions.

What we collect

Information you give us

• Enquiry details. When you complete our contact form we collect your name, email address, company, website, and whatever you write in the message field, along with the service, budget and timeline you select.
• Order details. When you buy a package, Stripe processes the payment and shares your name, email address and order reference with us. We never receive or store your card number.
• Correspondence. Emails, call notes and documents you share with us during a project or a sales conversation.

Information collected automatically

• Usage data. Pages visited, referring source, approximate location derived from IP address, device and browser type.
• Technical data. IP address and request headers, retained briefly in server logs for security and abuse prevention. Contact form submissions are rate-limited per IP address for the same reason.

How we use it

• To reply to your enquiry and, where relevant, quote work for you.
• To deliver a package you have purchased, and to contact you about that order.
• To protect the site against spam, abuse and fraudulent submissions.
• To meet legal, accounting and tax obligations.

We do not sell personal data, and we do not share it with advertising networks for cross-context behavioural advertising.

Legal bases (UK & EU visitors)

• Legitimate interests — responding to business enquiries and protecting the site against spam and abuse.
• Contract — where processing is necessary to deliver services you or your organisation have engaged us for.
• Legal obligation — for records we are required to retain.

Cookies and tracking

This website sets no cookies at all.There is no analytics package, no advertising pixel, no tracking script and no consent banner, because there is nothing to consent to. You can verify it in your browser’s developer tools.

If we add analytics in future we will update this policy first, and any non-essential cookie will be set only after you agree to it.

Who we share data with

We use a small number of third-party providers to run the business. Each processes data under contract and only on our instructions:

• Vercel Inc. (United States) — website hosting and content delivery. Processes IP addresses and request data in server logs.
• Resend (United States) — delivers contact form submissions to our inbox. Processes the name, email address and message you submit.
• Stripe, Inc. (United States) — payment processing. Stripe collects your card details directly; we never receive or store them. See Stripe’s privacy policy for how they handle payment data.

That is the complete list. We do not use analytics, advertising or tracking services on this website, and we do not share your data with anyone else except where legally required, or to establish or defend legal claims.

International transfers

We are based in the United States, so personal data from UK and EEA visitors is transferred to and stored in the US. Where required, these transfers rely on the UK International Data Transfer Addendum or the EU Standard Contractual Clauses, together with supplementary technical measures.

How long we keep it

• Enquiries that do not become clients: up to 24 months, then deleted.
• Client records: for the life of the engagement plus seven years, to meet accounting and legal requirements.
• Server logs: typically 30 days.

Your rights

Depending on where you live, you may have the right to access the personal data we hold about you, correct it, delete it, restrict or object to its processing, receive it in a portable format, or withdraw consent you previously gave. California residents additionally have the right to know what is collected, to request deletion, and not to be discriminated against for exercising those rights.

To exercise any of these, email contant@ovalllc.net. We respond within 30 days. UK and EU residents also have the right to complain to their supervisory authority — in the UK, the Information Commissioner’s Office.

Security

We use TLS encryption in transit, access controls on internal systems, and limit access to personal data to those who need it. No system is perfectly secure, but we take these obligations seriously and will notify affected individuals and regulators where a breach requires it.

Children

This site is intended for business audiences and is not directed at children under 16. We do not knowingly collect personal data from children.

Changes to this policy

We will update this page when our practices change, and revise the “last updated” date at the top. Material changes affecting existing clients will be communicated directly.