Initializing Precision
Privacy Notice
This review template describes current website processing. The legally correct controller name, lawful bases, retention schedules and international-transfer arrangements require owner/legal confirmation before production use.
When you submit an enquiry, we process your name, email address, optional telephone and company/tax details, requested quantities, selected product names/identifiers/SKUs, message and submission identifier to respond to your product, wholesale, private-label or support request. Please do not send sensitive personal information that is not needed for the enquiry. The form draft stays in memory during your visit; the application does not save it in cookies, local storage or Sanity.
The application sends enquiry details through Resend to the configured VeldEdge business mailbox. Replies and subsequent correspondence are handled in our email systems. Enquiry and correspondence records should be retained only as long as necessary for the relevant enquiry/business purpose and applicable legal obligations. The mailbox provider, access arrangements and exact retention schedule require owner confirmation. Resend delivery/log retention is separate from the receiving mailbox; its account settings also need confirmation.
To limit abusive submissions, the server uses an IP address supplied by the trusted hosting ingress, or a shared unidentified-request bucket where no trusted address is available. A SHA-256-derived key and request counter are sent to Upstash Redis; the raw visitor IP and enquiry message are not stored in that counter. Hashing does not by itself make this information anonymous. Enquiry budget keys expire after 15 minutes from the first request in the window. Administrative budgets use their configured windows. The hosting and Redis services may separately process connection or security logs with retention that is not determined by this application.
Vercel hosts the website and processes network/request information needed to deliver pages and operate the service, including IP address, requested URL, time and browser information. Application error logs use generic operational events rather than enquiry message content. Sanity supplies public catalogue/editorial content and handles authorised Studio account and administration activity; the public enquiry form does not write submissions to Sanity. Hosting/CMS log, account and backup retention depends on the configured services and requires confirmation.
Vercel Web Analytics is integrated for page/usage statistics, including page URLs/referrers, browser/device information and approximate location. The enquiry-accepted event includes only enquiry type and product count, not the submitted name, email, message or product identifiers. Google Analytics is not configured in this build. Vercel describes its Web Analytics as cookie-free and using a request-derived visitor hash discarded after 24 hours; that is not the retention period for all aggregate statistics. Dashboard enablement, statistical retention and the applicable legal basis require owner/legal confirmation. Ahrefs Web Analytics is also integrated on public production pages. It reports page URLs and query parameters, referrers, browser/device and language information, approximate country/city location, and supported link/form interactions. Ahrefs states that it uses no cookies, discards raw IP addresses, and derives a daily pseudonymous visitor ID that does not track visitors across days. This is not a claim that all statistics are deleted after one day or that cookie-free analytics removes applicable privacy obligations.
The theme and language cookies remember your display preferences for up to one year. Theme and product-background preferences also use local storage until you clear it; the application does not set an expiry for those entries. Enquiry drafts use visit-scoped memory only. Authorised Studio/importer authentication and optional draft preview use functional session/cookie mechanisms. You can clear browser cookies and local storage through your browser settings. Analytics storage, where enabled, must be assessed separately from these preference and administration functions.
The proposed bases, subject to legal confirmation and applicability, are steps requested before entering a contract or performance of a contract for relevant enquiries (GDPR Article 6(1)(b)); legitimate interests in responding to business contacts and protecting/operating the website for other correspondence, anti-abuse and hosting/admin processing (Article 6(1)(f), requiring an assessment); and legal obligations for records that must be kept (Article 6(1)(c), requiring identification of the actual obligation). The basis and any consent requirement for analytics and preference storage must be confirmed separately. This template does not claim a completed legitimate-interest assessment or valid consent.
The 15-minute enquiry rate-limit window and one-year preference cookies are application-defined periods; local storage persists until cleared and the in-memory draft is not persistent across a full reload. Exact mailbox, hosting, analytics, CMS account/log and backup retention periods have not been confirmed. These must be set and documented before production use. You may request earlier deletion using the contact details above; requests must be assessed against applicable legal obligations and legitimate retention needs rather than promising immediate deletion of every record.
Service recipients for the described functions include Vercel (hosting/Web Analytics), Ahrefs (Web Analytics), Sanity (catalogue/CMS administration), Resend (enquiry email delivery), Upstash (shared anti-abuse counters) and the business mailbox provider, which still needs to be identified. The supplied operator is in Pakistan, and handling by the operator and these services may involve processing outside the EEA. Actual service regions, processor agreements, transfer mechanisms/safeguards and any required EU representative must be confirmed by the owner and legal adviser; no adequacy decision, approved safeguard or EU establishment is asserted here.
Where the GDPR or other applicable law grants them, rights may include access, correction, erasure, restriction, portability and objection, and withdrawal of consent for processing based on consent. You may also have the right to complain to a competent supervisory authority. Contact the proposed controller above to make a request. The applicable jurisdiction, authority and any representative details require legal confirmation; this notice is a review template, not a statement that all launch compliance decisions are complete.