Privacy Policy

1. Overview and Data Controller Identification

Sortsptstoryporch Technologies Ltd. ("we", "us", "our") operates the web domain sortsptstoryporch.skin. We are committed to processing technical inquiry data and visitor interaction records strictly in adherence to the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the European Union General Data Protection Regulation (Regulation (EU) 2016/679).

For all inquiries concerning data processing practices, our Data Protection Officer (DPO) may be contacted via email at [email protected] or by post at our registered office: 84 Innovation Walk, Floor 4, Cambridge, CB2 1PZ, United Kingdom.

2. Categories of Information Collected

We restrict collection to information strictly necessary for delivering interactive ultrabook comparison telemetry and responding to direct inquiries:

• Inquiry and Contact Records: When you submit our contact form, we record your name, corporate or personal email address, and the verbatim content of your communication.
• Automated Telemetry and Device Data: When loading our visualizers, our web servers log standard HTTP headers: client IP address (anonymized at ingress), browser agent string, operating system architecture, HTTP referrers, and timestamps.
• Interactive Preference State: Slider positions within our Weight vs Battery Analyzer are computed client-side within your browser session and are not linked to individual user profiles.

3. Legal Bases for Processing

In accordance with Article 6 of the GDPR, our legal grounds for data operations comprise:

• Legitimate Interests (Art. 6(1)(f)): Monitoring network routing health, preventing malicious scraping or Denial of Service attacks on our calculation endpoints, and optimizing layout rendering across various screen aspect ratios.
• Contractual Performance (Art. 6(1)(b)): Responding to testing requests, hardware evaluation partnerships, or engineering consultations requested by users.
• Consent (Art. 6(1)(a)): Where non-essential analytics tracking or optional telemetry is approved via our cookie consent banner.

4. Third-Party Processors and International Transfers

We do not trade, sell, or rent visitor identity data. Data is processed through selected infrastructure providers acting as Data Processors bound by written Data Processing Agreements (DPAs) incorporating standard contractual clauses (SCCs):

• Static content delivery network edge nodes located within the United Kingdom and European Economic Area (EEA).
• Transactional email infrastructure implementing TLS 1.3 encryption in transit for routing contact form inquiries.

5. Retention Schedules

Server access logs are retained on rotating buffers for a maximum period of ninety (90) days before automated cryptographic purging. Contact form communications are preserved for up to twenty-four (24) months to facilitate continuous technical reference, after which they are securely expunged unless subject to statutory tax or audit retention requirements.

6. Individual Rights (GDPR & CCPA/CPRA)

Depending on your geographical jurisdiction, you hold enforceable rights over your personal data:

• Right of Access & Portability: Obtain written confirmation of processing and a structured, machine-readable copy of any personal data held.
• Right to Rectification: Require prompt correction of erroneous or outdated records.
• Right to Erasure ("Right to be Forgotten"): Demand deletion where retention is no longer justified by law.
• Right to Restrict or Object: Restrict processing under contested accuracy conditions.
• California Residents (CCPA): We do not sell or share personal data as defined under California law. You have the right to request disclosure of categories of collected data and non-discrimination for exercising privacy rights.

Requests should be transmitted to [email protected]. We fulfill authenticated requests within thirty (30) calendar days without fee.