What data we handle, and what we don't

1. Who is responsible

Inception Labs, Lima, Peru. For anything about privacy — access, correction, deletion, objection or a question — write to [email protected]. We reply to the address you write from.

2. The contact form

When you write to us we collect what you type: name, a way to reach you, the kind of project, an approximate budget if you give one, and your message.

We use it to reply and, if we move forward, to handle the proposal. The basis is your own request: you contacted us.

It goes into our own CRM, hosted on Google Cloud. We don't sell it, don't share it and don't feed any mailing list with it. Ask us to delete it and we will.

3. Booking a call

If you book a call we collect name, email and phone to confirm and remind you, plus whatever message you write. The meeting runs on Google Meet.

The team gets an internal alert with masked details — shortened name, hidden email and phone — to decide whether to take it; the full data is only visible inside the CRM.

4. The PHP, WordPress and Drupal check

This tool stores nothing. The address you enter is used for the request and discarded: it isn't written to disk, to a database or to our logs, and the response is served with no caching.

We only look at what any visitor can see from outside. No sign-in, no code execution, no admin paths.

To prevent abuse we use Cloudflare Turnstile, which only loads if the server asks for verification. Cloudflare then receives your IP address and technical signals from your browser; it does not receive the address you are checking.

5. Analytics

We use Google Analytics 4 only if you accept. Until you press «Accept», no Google script loads and none of its cookies are written — you can verify this in your browser's tools.

If you accept, Google receives browsing data with the IP anonymised. If you decline, nothing loads.

You can change your mind at any time from the Analytics link in the footer, which reopens the notice with both options.

6. Where the data lives and who processes it

Google Cloud and Firebase, as infrastructure and as the provider of the CRM and email. Cloudflare, for abuse protection. Google Analytics, only with your consent.

This involves international data transfers, covered by those providers' standard contractual clauses.

7. How long we keep it

Enquiries and bookings, while the conversation is alive and up to two years after the last contact, in case you pick the project up again. Then they are deleted.

The PHP check keeps nothing, so no retention period applies.

8. Your rights

You can request access to your data, correction, deletion, restriction or objection to processing, and a portable copy. Write to [email protected] and we handle it within 30 days.

If you are in the EU or the UK you may complain to your data protection authority. If you are in Peru, to the Autoridad Nacional de Protección de Datos Personales.

9. Children

This site is aimed at companies and professionals. We do not knowingly collect data from minors. If you believe we have, write to us and we delete it.

10. Changes

If we change what we do with data, we change this notice the same day and update the date above. A privacy notice that doesn't describe what actually happens is worse than none.