Privacy Policy.

Wyrelane Solutions ("we", "us", "our") is a software studio. For data-protection purposes, including the EU/UK GDPR and the California Consumer Privacy Act (CCPA), we act as the data controller of the information described in this policy.

By using our website or contacting us, you agree to the practices described here. Reach us at info@wyrelanesolutions.com.

Information you provide: your name, email, phone, company, and the contents of any message, brief, or inquiry you send via our forms, email, or messaging apps.

Account & project data: if you become a client, your portal profile (name, company, contact details, address) plus project information, files you upload, messages, and invoicing/payment records needed to deliver and bill for our services.

Newsletter: if you subscribe, your email address and subscription status.

Collected automatically: approximate region (country) derived from your IP address, the raw IP itself is never stored, plus browser/device type and pages viewed (analytics only after you consent).

We use a small number of strictly-necessary cookies (login sessions, security/CSRF, and the consent cookie). Analytics, marketing, and preference cookies load only after you opt in via our cookie banner.

You can change your choices anytime via the “Cookie preferences” link in the footer. We also honour the Global Privacy Control (GPC) browser signal as an automatic decline of non-essential cookies. See our Cookie Policy for the full list.

We never store your full, raw IP address in our database. For abuse and fraud prevention on forms, we store a salted one-way hash of your IP, which is automatically purged 30 days after submission.

For analytics we store only IP-derived data (approximate country/region), never the IP itself.

When you submit the contact form, we record the landing page, referrer, UTM parameters (source, medium, campaign, term, content), and first-touch source. This is collected as part of the submission for legitimate business purposes (understanding where enquiries come from) and is separate from marketing-cookie consent.

To respond to inquiries, provide and improve our services, send transactional emails, maintain security, and comply with legal obligations.

We do not sell your personal data, and we do not use cross-site tracking identifiers or device fingerprinting beyond standard browser/OS/device type.

Where the EU/UK GDPR applies, we rely on the following legal bases to process your personal data:

Performance of a contract, to deliver our services, operate your client portal, and handle invoicing. Consent, for the newsletter and non-essential cookies, which you can withdraw at any time. Legitimate interests, to respond to enquiries, secure our website and services, understand where enquiries come from, and improve our work, balanced against your rights. Legal obligation, where we must retain or disclose data to comply with the law.

If you subscribe to our newsletter, we use your email address to send updates and occasional offers. Every email includes an unsubscribe link, and you can opt out at any time - we action requests promptly.

We never sell or rent your email address, and transactional emails (e.g. replies to your enquiry, invoices) are sent regardless of marketing preferences because they're necessary to provide the service.

We share data with service providers who process it on our behalf, hosting, database, and file storage (Supabase), email delivery (Google / Gmail SMTP), and error monitoring (Sentry). Analytics are first-party and stored in our own database (no third-party analytics provider); page-view data is recorded only with your consent. Each provider is bound to protect your data.

AI assistance: we use Google's Gemini API to help our team draft replies, summaries, and content. When relevant, the text you submit (e.g. your enquiry or project messages) may be sent to Google to generate a draft. Per Google's API terms this content is not used to train their models, and a human reviews and decides before anything is sent - it isn't used for automated decisions about you.

We may disclose data where required by law or to protect our rights.

We work with clients and service providers across the US, UK, EU, Canada, and Australia, so your data may be processed on servers outside your country (for example, our hosting and database provider). Where required by law, we rely on appropriate safeguards such as standard contractual clauses.

Depending on your location, you may have rights to access, correct, delete, or port your data, and to object to or restrict certain processing. To exercise these rights, contact us at info@wyrelanesolutions.com.

You also have the right to lodge a complaint with your local data protection authority (for example, your national DPA in the EU, or the ICO in the UK). We'd appreciate the chance to resolve your concern first, so please reach out to us and we'll do our best to help.

We retain personal data only as long as necessary for the purposes described or as required by law, and we apply reasonable technical and organizational measures to protect it.

Specific retention: hashed IP values are purged after 30 days; consent choices are stored for up to 180 days before we re-ask.

Our website and services are intended for businesses and adults. We do not knowingly collect personal data from children under 16. If you believe a child has provided us their data, contact us and we'll delete it.

We may update this policy from time to time. Material changes will be reflected by the "last updated" date above.