Legal
Data Handling Policy
Draft, pending professional review
This policy applies to every Tondelweb service and is part of the Master Service Agreement.
1. What we collect, by service
| Service | What we receive | What we don't want |
|---|---|---|
| Websites | Content and assets you provide for your site project | Passwords sent by email (we use a shared password-manager item instead) |
| Everyone | Names, business emails, invoices and payment status (card details stay with Stripe; we never see full card numbers) |
If data we don't want arrives by mistake, we delete it within 5 business days of noticing and tell you.
2. How we use it
Only to provide the service you ordered, to bill you and to support you. We don't:
- sell or rent your data;
- share it with other clients;
- reuse it for anyone else.
3. Where it's stored
- Client files: in a separate folder per client, on a Mac with full-disk encryption (FileVault) turned on. Not in personal cloud drives.
- Websites: the site's files are hosted on GitHub Pages.
- Email and calendar: in Google (Gmail, Google Calendar).
- Payments: in Stripe.
4. Who can see it
- Lucas L, the owner.
- Contractors, if we use them, under a written confidentiality agreement and only for the clients they work on.
- The service providers in section 6, only to run their part.
5. AI-assisted processing
- We use software, including AI tools, to help design, build and check websites.
- A person reviews results before anything is delivered.
- AI service used: Anthropic Claude.
6. Service providers (subprocessors)
- Google (Gmail, Calendar)
- Stripe (payments)
- Formspree (website contact form)
- Cal.com (booking, if used)
- GitHub (website hosting)
- Zoom (demo calls)
- Anthropic (AI processing)
We'll update this list when it changes.
7. How long we keep it
| Data | Kept |
|---|---|
| Website content and files | During the service, then as Schedule D8 of the agreement describes. |
| Invoices and payment records | As long as tax law requires (ask your tax professional; often several years). |
8. Your choices
You can ask what we hold, or ask us to delete it sooner, by emailing Lucas.Lagido@gmail.com. We'll answer within 10 business days. Deleting data may mean we can't continue the service.
9. If something goes wrong
If we learn that your data was accessed by someone who shouldn't have it, we'll:
- tell you promptly, normally within 72 hours of confirming it;
- share what we know and what we're doing about it;
- meet any legal notification duties that apply.
10. Contact
Lucas L, Tondelweb, 105 Wilson Ave, Blacksburg, VA 24060 · Lucas.Lagido@gmail.com