Privacy and form data

What we receive and why

The Contact Us form receives your name, business, email, phone number, and message; it does not accept files. We use it to answer your inquiry.

The project form, “Your business details,” receives business and contact details, menu, hours, location, customer contact channels, and files. You may attach up to 24 files, with a combined limit of 100 MB per submission. We use this information to prepare your website and carry out the agreed work.

We keep the private project contact separate from the details you approve for publication. Details and materials approved for the website will be visible there.

For client businesses’ forms, our work is to deliver and monitor submissions, not to answer their customers’ inquiries. We do not use submissions for marketing campaigns, pool data across businesses, or train artificial-intelligence systems on them.

Which forms send information

The Contact Us form sends your message by email. The “Your business details” form sends information and files and stores each submission. Form previews inside the fictional demos do not send data or receive real requests.

A real business’s page is not a fictional demo, even when it is hosted on this domain. Its own notice explains who receives requests and how they are kept.

Submission through this site

When you press “Send business details,” your information reaches this site’s receiver. The receiver uses PHP on the site’s shared hosting. It stores the project record and files before confirming receipt. If receipt cannot be confirmed, the form says so. Confirmation does not mean a person has already reviewed the material.

Rights to files

By sending files, you confirm that you own them or have sufficient permission to use them in the project.

Information not to send

Do not send passwords, card numbers, identity documents, medical information, or your customers’ personal information. Do not attach material you are not authorized to share.

Where information is stored and who can access it

Project answers and files are stored on Namecheap shared hosting. That hosting also serves another website. The message sent through Contact Us is not stored there as a content record.

Both forms email their answers to a mailbox on another domain.

The founder of Web con Sabor accesses the stored project records.

The project email contains all the answers and links for downloading the files, rather than attached files. Anyone holding one of those links can download files from the submission without signing in. Links have no independent expiry: they stop working when we delete the corresponding record and its files. Deleting our record does not remove a copy someone has already downloaded.

How long we keep information

These are maximum periods in calendar days; we may delete information sooner when it is no longer needed. Deletions are done by hand, against a register of due dates.

Emails about a contact inquiry and their working copies

Up to 12 months after that inquiry’s last substantive exchange. An automated message does not restart the period.

Original project-form record, original files, and emails containing all the answers

Up to 12 months after we receive each submission. Continuing Site Care does not extend this period.

Selected working brief and materials approved for publication

During the project or while we manage your website, then up to 30 days after final handoff or documented closure.

Remaining operational copies after work or Site Care ends

Deleted at their ordinary deadline or within 30 days after handoff or closure, whichever comes first. We prepare the agreed handoff before deleting them.

Minimal delivery and deletion records

Up to 90 days after the event, without form contents or download links.

Backups of deleted information

Expire on the hosting’s normal backup cycle after deletion; we do not use them for ordinary work. A restoration must reapply pending deletions.

We separately keep only documents needed for a specific obligation or dispute. We restrict access and record the reason and the review date. When that reason ends, we delete them within 30 days unless another mandatory period applies. This does not keep the original download links open.

Site Care cancellation, website handoff, and information deletion have different timelines. Routine deletion of original form records does not by itself remove approved content that remains published. If your request concerns published personal information, we review that content too. We do not control copies that you or other recipients keep on your own.

Questions, corrections, and deletion

Use the Contact Us form and write “Privacy request” at the start of your message. Include the email you used and, when you have it, the submission reference; do not attach identity documents or download links.

Our target is to acknowledge the request within two business days. Within 30 calendar days of receipt, we make the correction or deletion, or explain the outcome and any necessary retention. We use proportionate checks to confirm the information concerns you and explain any additional information needed.

For a request concerning a client business, we forward it to that business’s responsible party and help with the copies we manage. Asking to correct personal information is not the same as ordering a website content change. It does not require purchasing a service.

Technical records and usage measurement

Web con Sabor’s own pages do not use analytics or advertising tools. We keep the language preference for the browser session. The forms use a session cookie to check that a submission comes through the form.

The Contact Us form keeps a record for 24 hours to limit duplicate submissions and abuse. It contains values calculated from the IP address and the fields, plus the submission status, rather than the full message. We do not describe these values as anonymous. Application logs do not contain form bodies.

The hosting and the email service also generate their own technical records, under each provider’s terms.

Protecting information

Original project files are kept in a folder that does not allow direct web access. Downloads use the links described above; the protected folder does not turn those links into identity-checked access.

No system eliminates every risk of access, loss, or disclosure. When you report an exposed link or unauthorized access, we investigate and take steps to limit it.

To ask about, correct, or request deletion of information you submitted, use the Contact Us form and write “Privacy request.”