Privacy policy
Short version: we collect what you send us and what businesses publish about themselves, use it to talk about work, and nothing else. No cookies, no analytics, no selling.
Who we are
Tabstop Studio is a trade name of Luven Technologies LLC (“we”, “us”). Luven Technologies LLC is the controller of the personal data described here.
Contact: everest@tabstopstudio.com. Post: Luven Technologies LLC, 4396 NW 56th Ct, Ocala, FL 34482.
This policy covers this website (tabstopstudio.com), our email, and how we find and contact businesses that might want to work with us.
What we collect and why
When you use the contact form
Your name, work email, firm or company, role and the site’s platform. Depending on what you ask for, also your site’s web address, the package you’re interested in, a rough number of audit findings, sample findings, how you’d like to work together, and, if you add them, a date, a question or message, and how you heard about us. We use them to reply and to prepare a quote. The legal basis (for UK and EU readers) is taking steps you asked for before a contract, and our legitimate interest in answering business enquiries.
When you email us
Your name, email address, signature details and whatever you write. Same purpose and basis as the form.
When we work together
Business contact details, quotes, scopes of work and invoices. Audit reports and change logs can include small amounts of personal data, such as a name in a screenshot. We use these only for the job. The legal basis is our contract with you, plus our legal duty to keep tax records.
If we contacted you first
This section is our notice to people whose details we didn’t get from them directly (Article 14 of the UK and EU GDPR).
We look for accessibility auditors, audit firms and web agencies that might want a partner to fix the issues their audits find. For each firm we may note:
- the firm’s name, website and country;
- the name and role of an owner, founder or lead, only if the firm’s own site or a public directory lists them;
- a business contact route the firm publishes, such as a contact page or business email address;
- public facts about the firm’s services, such as platforms, whether it offers fixes, and certifications it states;
- the page we found it on, and notes on our messages and your replies, including an opt-out.
Where it comes from: the firm’s own website, public partner and professional directories, and public conference speaker pages. We don’t buy lists, scrape social networks, guess email addresses, or use personal or home contact details.
Why, and on what basis: to send a small number of relevant business messages about subcontract work. The legal basis is our legitimate interest in offering a business service to firms whose public role makes it relevant. We weighed that against your interests: it is business information the firm chose to publish, we send one message and at most one follow-up, by hand, without tracking, and opting out takes one reply.
How to opt out: reply “no thanks” to any message, or email everest@tabstopstudio.com. We stop the same day. We keep only your firm’s name and the address we used, so we never contact you again. You can object to this use of your data at any time, and we will always stop.
Who processes data for us
- Vercel Inc. hosts this website. Like any host, it processes technical data such as IP addresses in server logs to deliver and secure the site.
- Resend delivers contact form submissions to our inbox.
- Google (Google Workspace) runs our email and documents, including prospecting notes.
- AI writing and coding tools help us draft messages and code, on terms that don’t let the provider train its models on what we put in.
We don’t sell or rent personal data, and we don’t share it for advertising. We may disclose it if the law requires us to.
International transfers
We are based in the United States, and so are our providers. If you are in the UK or EU, your data is transferred to the US. Our providers rely on recognised safeguards for these transfers, such as the EU–US Data Privacy Framework and its UK extension, or standard contractual clauses.
How long we keep it
- Contact form messages and email
- Kept for up to 7 years, for tax and legal reasons
- Client records: quotes, scopes of work, invoices and related email
- Kept for up to 7 years, for tax and legal reasons
- Audit reports, change logs and other job files
- Kept for up to 7 years, for tax and legal reasons
- Prospecting notes, if we never work together
- Deleted within 24 months of our last contact, or sooner if you ask
- Opt-out record (firm name and the address we used)
- For as long as we contact businesses, so we never contact you again
- Website server logs
- Kept by our host, Vercel, for a limited period under its own policy
When a period ends, we delete the data or, where that isn’t practical, anonymise it.
Your rights
UK and EU
Under the UK GDPR and the EU GDPR you can ask us to give you a copy of your data, correct it, delete it, or restrict how we use it. You can object to our use of it, and you can always object to direct marketing. Where it applies, you can ask for your data in a portable format. We don’t make automated decisions about you or profile you.
You can complain to your data protection authority: in the UK, the Information Commissioner’s Office; in the EU, the authority where you live or work. We’d appreciate the chance to sort out your concern first.
United States
Several US states give residents rights to know about, access, correct and delete personal information, and to opt out of its sale, its sharing for targeted advertising, or profiling. Most of these laws don’t apply to a business like ours. We honor access, correction and deletion requests from anyone, wherever they live. We don’t sell or share personal information, use it for targeted advertising or profiling, or collect sensitive personal information. We respect Global Privacy Control signals, though we have no tracking for them to switch off.
How to ask
Email everest@tabstopstudio.com. We reply within 30 days. We may ask you to confirm it’s you, using only details we already hold. You can make a request through someone you authorise. We won’t treat you differently for using your rights.
Cookies, analytics and tracking
This website sets no cookies and runs no analytics. Every page loads only from tabstopstudio.com: fonts, images and video are served from our own domain, and nothing is requested from other sites while you browse. Our emails contain no tracking pixels or tracked links.
Security
We keep personal data in a small number of business accounts protected with two-factor authentication. We access client stores only through collaborator or staging accounts and never ask for passwords. More in security and data handling.
Children
Our services are for businesses. This site isn’t directed at children, and we don’t knowingly collect data from anyone under 16. If you think a child has sent us information, email us and we’ll delete it.
Changes
If we change this policy, we’ll update this page and its effective date. If a change affects how we use data we already hold, we’ll tell the people affected where we can.