Privacy Policy
Last updated 22 August 2026
This site collects a small amount of personal data when you use the contact form or book a discovery call: your name, email, project budget, and whatever you tell us about your project. This page sets out exactly what we collect, why, who sees it, and what you can do about it.
Who we are
SteelPine Technologies operates this website at steelpinetech.com. For anything to do with your data, contact us at hello@steelpinetech.com.
What we collect, and when
The contact form collects your name, email address, project budget range, and the project description you type in. It's sent directly to our inbox by email. There is no database behind this site: nothing submitted through the form is stored on our own servers. The form is optional: you can email hello@steelpinetech.com directly instead, but without an email address to reply to, we can't get back to you.
Booking a discovery call uses a booking widget embedded from app.cal.com. Its script loads on every page of this site, whether or not you ever open it. When you do book through it, Cal.com collects your name, email, project budget, what you want to build, and the meeting time you choose. Cal.com is a separate company acting as our processor for scheduling.
Server logs. Every visit to this site generates standard hosting logs through Cloudflare: your IP address, browser user agent, the URL requested, and the time.
Google Fonts. Every page on this site loads fonts from fonts.googleapis.com and fonts.gstatic.com. Loading a font from Google's servers discloses your IP address to Google at that moment.
What we don't collect
No analytics, no tracking pixels, no advertising cookies, no session replay. This site itself sets no cookies and writes nothing to your browser's storage. We checked the source code to confirm it. That is unusually rare, and worth saying plainly. The one exception is the Cal.com booker: its script loads on every page as described above, it's run by a third party, and it may set its own cookies once you interact with it, outside our control.
Why we process this data
For the contact form and the Cal.com booking, our lawful basis is GDPR Article 6(1)(b): processing necessary to take steps at your request before entering into a contract, since you're asking us about work.
For server logs, our lawful basis is Article 6(1)(f), legitimate interests, specifically keeping the site secure and running correctly.
Who we share it with
We use a small set of processors to run this site and respond to you: Resend, which delivers the contact form email to our inbox; Cal.com, which runs the booking calendar and collects call details directly; Google Workspace, which hosts the mailbox that receives your enquiry; and Cloudflare, which hosts this site and serves its content. We don't sell your data, and we don't share it with anyone beyond this list.
International transfers
Resend, Cal.com, Google Workspace, and Cloudflare are all US-based companies. Using the contact form or booking a call means your personal data is transferred outside the European Economic Area to reach them.
Spam protection
The contact form has a hidden field that only automated bots fill in. A submission that fills it is discarded immediately: never delivered to us, never stored anywhere.
How long we keep it
We keep contact form enquiries while we're actively discussing your project, and for 24 months after our last exchange, then delete them. A booking made through Cal.com is retained under Cal.com's own policy, not ours. Server logs held by Cloudflare follow Cloudflare's own retention schedule.
If you'd like your enquiry deleted sooner than that, email hello@steelpinetech.com and we'll remove it.
Your rights
Under the GDPR, you have the right to:
- Access the personal data we hold about you
- Correct it if it's inaccurate
- Ask us to erase it
- Ask us to restrict how we use it
- Receive a copy of it in a portable format
- Object to our processing it
To use any of these, email hello@steelpinetech.com. If you're not satisfied with our response, you have the right to complain to your local data protection supervisory authority.
Changes to this policy
We'll update this page if what we collect or how we use it changes. Last updated 22 August 2026.