How We Use Your Information

1. Introduction

At That Is A Q, your trust is foundational to everything we build and deliver. This policy explains clearly and transparently how we collect, use, store, and protect your personal information when you interact with our website, request services, or engage with our team.

We are committed to complying with applicable data protection laws, including GDPR, CCPA, and other regional privacy frameworks. This document outlines our practices in plain language, without legal obfuscation.

2. Information We Collect

We only collect information necessary to deliver our services, improve user experience, and maintain secure operations. This includes:

• Identifiers: Name, email address, phone number, company name, and billing details when you inquire about services or enter into an agreement.
• Usage Data: IP addresses, browser type, device information, pages visited, and interaction timestamps via anonymized analytics tools.
• Communications: Content of emails, support tickets, meeting notes, and feedback you voluntarily provide.
• Project Assets: Files, credentials, or documentation shared explicitly for development, design, or strategy work.

3. How We Use Your Information

Your data is never sold or rented. We use it strictly for the following purposes:

• Processing service requests, proposals, and contractual obligations
• Communicating project updates, invoices, and support responses
• Improving our website performance, security, and user experience
• Complying with legal obligations, auditing, and fraud prevention
• Delivering personalized insights or product recommendations when you opt in

4. Sharing & Third-Party Services

We may share information only with trusted partners essential to our operations, under strict data processing agreements. These include:

• Cloud hosting & infrastructure providers (e.g., AWS, Vercel)
• Communication & collaboration platforms (e.g., Slack, Zoom, Calendly)
• Analytics & performance monitoring tools (configured for privacy-first tracking)
• Legal authorities when required by law or to protect rights and safety

All third parties are contractually bound to use your data solely for the services they provide us and must comply with equivalent security and privacy standards.

5. Data Security & Retention

We implement industry-standard technical and organizational measures to protect your information, including:

• End-to-end encryption for data in transit and at rest
• Role-based access controls and regular security audits
• Automated backups and incident response protocols

Retention: We retain your information only as long as necessary to fulfill the purposes outlined here, unless a longer retention period is required by law. Upon request or project completion, unused data is securely deleted or anonymized.

6. Your Rights & Choices

Depending on your jurisdiction, you may have the right to:

• Access, correct, or delete your personal data
• Object to or restrict certain processing activities
• Request data portability in a machine-readable format
• Withdraw consent at any time (where processing is consent-based)

To exercise these rights, contact us at the email provided below. We will respond within 30 days and verify your identity before processing requests.

7. Children's Information

Our services are not directed to individuals under 16. We do not knowingly collect data from minors. If we discover such information, we will take prompt steps to delete it. Parents or guardians may contact us immediately if they believe their child has provided information.

8. Policy Updates

We may update this policy to reflect changes in technology, legal requirements, or business practices. Significant changes will be communicated via email or website notice. Continued use of our services after updates constitutes acceptance of the revised terms.

9. Contact Us

If you have questions, concerns, or requests regarding this policy or your data, please reach out: