Privacy & Cookie Policy

Overview

Ariesworx LLC (“we,” “us,” the “controller”) operates the website at www.ariesworx.com. This policy explains what data we collect, the legal basis for processing, how we use it, and your rights.

What We Collect

We do not require accounts or process payments on this site. We collect personal data in two situations: when you consent to analytics cookies, and when you choose to send us a message through the contact form. Everything else on the site can be read without giving us any personal data at all.

The Contact Form

When you submit the contact form we collect your name, work email address, company, and your message, along with a phone number if you choose to give one, and the time of submission. We use this only to respond to you and, if it leads to one, to manage the resulting business relationship. We do not use it for marketing lists and we do not sell or share it.

Submissions are stored in Google Cloud Firestore and deleted automatically 24 months from the date you send them. Each one is also emailed to our Microsoft 365 mailbox, where we keep it only as long as we need it to respond to you and to manage any work that follows, and delete it when that ends or when you ask. Resend, which delivers that email, keeps its copy for 30 days. You can ask us to delete yours sooner at any time. See Contact below.

When you send a message we also email you an automatic receipt, through Resend, at the address you gave. It contains nothing you typed.

To stop automated abuse we limit how many messages can be sent. For that we keep a one-way, keyed hash of your email address, which cannot be turned back into the address, together with a count, for 24 hours.

Every submission is also checked by Cloudflare Turnstile. The check loads when you start filling in the form, not when you open the page. Most people never see it: a visible challenge appears only when the result is uncertain.

To make that judgement, Cloudflare receives your IP address, your browser’s TLS fingerprint and User-Agent, and the key that identifies this form. Cloudflare states it cannot identify individuals from these signals and uses them to tell people from bots. Their Turnstile Privacy Policy governs that processing. Turnstile sets no cookies. It may keep a small value in its own browser storage to run the check, and it is not used to track you.

The systems that receive the form record each request, including your IP address, your browser’s User-Agent and the page you came from, for security and troubleshooting. These request logs are deleted after 30 days.

Legal Basis for Processing

Analytics cookies: Consent (GDPR Article 6(1)(a)). We do not load any analytics scripts or collect any analytics data until you explicitly accept cookies. If you decline or take no action, no analytics data is sent to anyone.

Essential storage: Legitimate interest (GDPR Article 6(1)(f)). Your consent choice is stored in your browser’s local storage, so we do not ask you again on every page.

Contact form submissions: Steps taken at your request before entering into a contract (GDPR Article 6(1)(b)). You give us this information deliberately, in order to be contacted back.

Spam prevention: Legitimate interest (GDPR Article 6(1)(f)). Rate limiting, the Turnstile check and request logs exist to keep the form usable and to protect our systems, and process the minimum needed to do that.

Cookies We Use

Data Retention

Analytics data retained by Google Analytics is set to 14 months, after which it is automatically deleted. Your consent choice, stored in your browser, expires after 180 days. Contact form submissions are kept in our database for 24 months from the date you send them and are then deleted automatically, whether or not the conversation went anywhere. The copy emailed to our mailbox is kept only as long as we need it, as described above. Resend keeps its delivery copy for 30 days, rate-limit records are kept for 24 hours, and request logs for 30 days.

Your Choices

• Accept or Decline analytics cookies via the banner shown on your first visit.
• Change your choice at any time by clicking “Cookie Settings” in the site footer. Withdrawing consent stops analytics on the page you are on and deletes its cookies.
• Global Privacy Control (GPC): We honor the GPC browser signal. While your browser sends it, we treat it as an opt-out of analytics: analytics stays off and we do not show the cookie banner.
• Your consent choice is stored locally in your browser and expires after 180 days, at which point we ask again.
• You can also clear cookies at any time through your browser settings.

Your Rights

GDPR (EU/EEA visitors): Under the General Data Protection Regulation, you have the right to:

• Access the personal data we hold about you (Art. 15)
• Rectify inaccurate personal data (Art. 16)
• Request erasure of your personal data (Art. 17)
• Restrict processing of your personal data (Art. 18)
• Data portability (Art. 20)
• Object to processing (Art. 21)
• Withdraw consent at any time without affecting the lawfulness of prior processing
• Lodge a complaint with your local data protection supervisory authority

CCPA (California residents): We do not sell or share your personal information. You have the right to know what personal information we collect. You can request its deletion, including anything you sent us through the contact form. You can opt out of analytics tracking at any time via the cookie banner or footer link. We will not discriminate against you for exercising these rights.

Third-Party Services & International Transfers

This site is hosted on Firebase Hosting, a service of Google LLC. Analytics data is processed by Google LLC acting as a data processor on our behalf. When you consent to analytics, data may be transferred to Google servers in the United States under the EU-US Data Privacy Framework. Google’s privacy policy governs their processing of this data.

If you use the contact form, four processors are involved on our behalf. Google LLC runs the function that receives your submission, stores it in Google Cloud Firestore, and keeps the request logs. Resend delivers the notification email to us and the receipt to you. Microsoft Corporation hosts the Microsoft 365 mailbox the notification arrives in. Cloudflare, Inc. provides the Turnstile anti-abuse check. Google stores your submission and the request logs, Resend processes email, and Microsoft stores our mailbox, all in the United States. Cloudflare may run the check on a server near you. We are a United States company and your submission is handled here.

Contact

Questions about this policy or to exercise your data rights, use the contact form or write to us at 222 E. Main Street, Suite 218, Port Washington, WI 53074.