Privacy Policy

01. Who we are & what this covers

RG Tech Studio LLC is registered in the District of Columbia, United States. This policy covers personal information we handle for our own company website, business inquiries, and client portal. We are responsible for deciding how that information is used for those purposes.

This policy does not replace a client's own privacy notice for a website or system we operate on that client's behalf. It also does not replace a specific confidentiality or data-processing agreement. Contact us at info@rgtechstudio.com with privacy questions.

02. Information we process

• Inquiries and correspondence: your name, email address, phone number, optional company name, selected service category, message, and any company or project details you choose to provide.
• Client and project records: company contacts, proposals, quotes, contracts, project updates, support tickets, messages, and documents supplied during the engagement. These may contain information about people in your organization.
• Account and access records: email address, assigned organization and permissions, protected authentication information, temporary access requests, session details, and security events.
• Technical information: network information such as your IP address, request and browser information needed to deliver the site, detect abuse, and troubleshoot errors. Where enabled, our spam-protection provider also processes browser, device, and interaction signals.

We receive information directly from you, from authorized contacts at your organization, and through your use of our services. The public inquiry form does not ask for payment-card details, government identifiers, health information, or account passwords. Please do not include them in your message.

03. How we use your information

• Respond to inquiries, understand requirements, prepare proposals, and communicate with you.
• Deliver and support agreed services, manage contracts and project records, and coordinate authorized client work.
• Verify access, send requested access codes, protect confidential records, investigate misuse, and maintain reliable systems.
• Meet legal and contractual obligations, maintain necessary business records, and address disputes.

Submitting an inquiry does not automatically enroll you in a marketing mailing list. Service communications, such as access codes and replies to your inquiry, are separate from promotional messages. If we send promotional email, you can use its unsubscribe instructions or contact us to stop it.

Where applicable privacy law requires a legal basis, the relevant basis depends on the activity: steps requested before a contract or performance of a contract; our legitimate interests in business communications and security where those interests do not override your rights; legal obligations; or consent where required.

04. When information is shared

Information is available to personnel who need it for their work and to authorized contacts within the relevant client organization. Portal information intended for your organization may be visible to its authorized users; please do not use a business workspace for personal communications unrelated to the engagement.

We use service providers for functions such as hosting, business email, and security. For example, email delivery uses Google's mail service, and Google reCAPTCHA is used for fraud and spam protection where enabled. Information provided to them is for the relevant service, subject to the applicable provider arrangements.

We may also disclose information to professional advisers, in response to a valid legal obligation, or when reasonably necessary to investigate fraud, protect rights, or address a security incident. A business transfer may involve relevant records, subject to applicable confidentiality and privacy requirements.

We do not sell personal information collected through this website or portal, or share it for cross-context behavioral advertising. We do not publish private client records as website content. Client content becomes public only when authorized for publication.

05. Cookies & browser storage

Cookies and similar storage support security and basic functionality. The company website and portals do not install advertising pixels or visitor-analytics tracking scripts. For configured client engagements, authorized staff may retrieve aggregate infrastructure, GA4 and Search Console reports from the client’s connected accounts to display in its private dashboard.

You can manage cookies and local storage through your browser. Use the "Pause visual effects" control in the footer to change the animation preference; a system reduced-motion preference is also respected. Disabling essential storage may stop sign-in or forms from working. If we introduce optional tracking that requires consent, we will provide the relevant notice and choice before enabling it.

Where enabled, reCAPTCHA processes security information on our behalf to help prevent fraud, spam, and abuse. Read Google's reCAPTCHA data-processing information for further details.

06. Retention & security

Before a public inquiry is submitted, we temporarily hold an encrypted draft and send an email verification code. Codes expire after 10 minutes. Used, replaced, or expired drafts are cleared automatically; limited hashed verification records are kept briefly to prevent abuse. After verification, the inquiry becomes a business record under the retention practices below.

We retain information for the purposes described here, considering the status of an inquiry or engagement, support needs, recordkeeping obligations, and potential legal claims. Different records have different retention needs. An access code expiring, signing out, or closing portal access does not automatically delete associated business records.

You can request deletion using the contact details below. We will review what can be deleted and explain any applicable reason for retaining information. We may need to keep limited records to meet legal obligations, resolve disputes, or preserve security; backup copies may remain until they are replaced through the backup lifecycle.

We use measures designed to protect information, including encrypted connections, access controls, and additional verification for permanent portal accounts. No system or transmission method is completely secure. If a security incident requires notice under applicable law, we will notify affected individuals and authorities as required.

07. Your choices & privacy rights

Depending on your location and the law that applies, you may have rights to access or obtain a copy of your information, correct it, request deletion, object to or restrict certain processing, or withdraw consent where consent is the basis. Withdrawal does not affect processing that was lawful before withdrawal. Some requests are subject to legal exceptions.

Email info@rgtechstudio.com with the subject "Privacy request" and describe what you need. We may ask for limited information to verify your identity or authority before disclosing or changing records. Please do not send identity documents or sensitive credentials unless we have arranged a suitable secure method.

We will review requests and respond within the time required by applicable law. If we cannot fulfill a request, we will explain why and any available appeal process. You may also contact the relevant privacy or consumer-protection authority. We will not retaliate against you for exercising a legal privacy right.

08. Websites & systems we manage for clients

When a client asks us to build, host, support, or manage its website or application, that client generally decides the purposes for using its visitors' or customers' information. We handle that information according to the engagement, the client's authorized instructions, and applicable law.

The client's privacy notice explains its practices, including any analytics or marketing tools it chooses. For a request about information collected by a client-operated website, contact that business first. If you contact us, we will help route the request and assist the client as appropriate. Our own no-advertising-tracking statement does not describe every client's website.

09. Processing locations & children

We are based in the United States. Our operations and service providers may process information in the United States or other countries where they operate. Privacy rules can differ between locations. Where cross-border processing is subject to additional legal requirements, the relevant engagement and provider arrangements must address them; this policy does not waive your statutory rights.

Our website and business services are directed to adults and are not intended for children under 13. We do not knowingly collect children's personal information through these services. If you believe a child has provided information, contact us so we can investigate and take appropriate steps, including deletion where required.

10. Updates & contacting us

We may update this policy when our services, information practices, or legal obligations change. The date above identifies the latest version. We will provide additional notice or seek consent when applicable law requires it; posting a revision does not itself authorize a materially different use of previously collected information.

For website and portal-use conditions, read our Terms of Service.