This Privacy Policy explains how Sepanta LLC (“Sepanta”, “we”, “us” or “our”) collects, uses, shares and protects personal data when you visit https://sepanta.llc (the “Site”) or contact us. It also describes your rights under the EU General Data Protection Regulation (GDPR) and how to exercise them.
1. Data controller
The data controller responsible for your personal data is:
- Sepanta LLC
- Address: 18821 Breezeway CIR, Olney, MD 20878
- Email: info@sepanta.llc
If you have any questions about this policy or how we handle your data, please contact us using the details above.
2. Personal data we collect
We keep data collection to a minimum. We may process the following categories of data:
- Contact form data. When you use our contact form, we collect the name, email address and message content you provide, together with your consent to process it.
- Analytics and technical data. If — and only if — you accept analytics cookies, we may collect limited, largely anonymised information such as pages visited, approximate region, browser type and device type. No analytics are loaded until you consent.
- Server logs. Our hosting provider may automatically process technical information (such as IP address and request metadata) as part of delivering the Site securely and reliably.
We do not intentionally collect special categories of data (such as health, biometric or political data), and we do not knowingly collect data from children under 16.
3. Lawful bases for processing
Under the GDPR, we rely on the following lawful bases:
- Consent (Art. 6(1)(a)). For processing your contact-form submission and for setting non-essential analytics cookies. You may withdraw consent at any time.
- Legitimate interests (Art. 6(1)(f)). For keeping the Site secure, preventing abuse and spam, and maintaining the reliable operation of our services, where those interests are not overridden by your rights and freedoms.
4. How we use your data
- To respond to your enquiries and communicate with you.
- To operate, secure, maintain and improve the Site.
- To detect, prevent and address technical issues, spam or abuse.
- To comply with legal obligations where applicable.
We do not sell your personal data, and we do not use it for automated decision-making or profiling that produces legal or similarly significant effects.
5. Data retention
We keep personal data only for as long as necessary for the purposes described above:
- Contact enquiries: retained for as long as needed to handle your request and for a reasonable period afterwards for our records, then deleted. [Adjust this retention period to your actual practice.]
- Analytics data: retained according to the settings and defaults of our analytics provider.
- Server logs: retained by our hosting provider for a limited period for security and diagnostics.
6. Third-party processors
We share personal data only with service providers who process it on our behalf under appropriate data-processing terms. These currently include:
- Vercel Inc. — hosting and content delivery for the Site.
- Resend (email API) — delivering contact-form messages to our inbox.
- [Placeholder for any additional processors — e.g. analytics provider, CRM, or customer-support tools. List each provider and its purpose here.]
7. International data transfers
Some of our processors are located outside the European Economic Area (EEA), including in the United States. Where personal data is transferred outside the EEA, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or an equivalent recognised transfer mechanism, so that your data continues to receive an adequate level of protection.
8. Cookies and similar technologies
We use a small number of essential cookies and local storage that are strictly necessary for the Site to function and to remember your cookie preferences. These do not require consent.
Non-essential cookies (such as analytics) are only set after you give consent through our cookie banner. You can accept, reject, or fine-tune your choice at any time — including withdrawing consent — using or the “Cookie Settings” link in the footer.
9. Your rights under the GDPR
If you are in the EEA (and in many cases beyond), you have the following rights in relation to your personal data:
- Right of access — to obtain confirmation of whether we process your data and a copy of it.
- Right to rectification — to have inaccurate or incomplete data corrected.
- Right to erasure (“right to be forgotten”) — to have your data deleted in certain circumstances.
- Right to restriction of processing — to limit how we use your data in certain circumstances.
- Right to data portability — to receive your data in a structured, commonly used, machine-readable format and to transmit it to another controller.
- Right to object — to object to processing based on legitimate interests, including for direct marketing.
- Right to withdraw consent — to withdraw any consent you have given at any time, without affecting the lawfulness of processing before withdrawal.
To exercise any of these rights, contact us at info@sepanta.llc. We will respond within the time limits required by law.
10. Right to lodge a complaint
If you believe we have not handled your personal data lawfully, you have the right to lodge a complaint with your local data-protection supervisory authority. You can find your authority via the European Data Protection Board at edpb.europa.eu. We would, however, appreciate the chance to address your concerns first.
11. How we protect your data
We use technical and organisational measures appropriate to the risk, including encryption in transit (HTTPS), access controls, and data minimisation. No method of transmission or storage is completely secure, but we work to protect your data and to notify you and the relevant authority of any breach where required by law.
12. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, where changes are significant, take reasonable steps to notify you. Please review this page periodically.
13. Contact us
For any privacy-related questions or requests, contact Sepanta LLC at info@sepanta.llc or at the address listed in Section 1.