Privacy Policy

01Scope of This Policy

This policy applies to the public website of GrayneAgainst, which is published at www.grayneagainst.autos, and to the communication channels that this site supports, including the contact form, direct email, and telephone enquiries. It applies to personal data that a visitor provides when making an enquiry, requesting information, commissioning a service, or otherwise corresponding with the studio. It also applies to automated technical data that is collected in standard server and web analytics records.

This policy does not apply to third party websites that may be linked from this site, because we cannot control how other parties handle your data. Where a link leaves the domain grayneagainst.autos, that third party has its own privacy policy, and we encourage you to read it before sharing any personal data on that external service.

02Information We Collect

We collect personal data only to the extent that it is needed to respond to an enquiry, to provide a service, to perform a contract, or to meet a legal obligation. The categories of information we may collect include the following.

• Identity and contact details such as your name and email address.
• Telephone number when you request to be contacted by phone.
• Organisation name and address when you represent a business.
• Project details that you choose to share in your message text.
• Technical data such as IP address, browser type, device type, pages requested, and time of visit.
• Correspondence history between you and the studio.

We do not request, and we do not want, sensitive personal data through this website. Sensitive data means data concerning health, religious beliefs, political opinions, racial origin, or trade union membership. If you share such data by mistake within a message, we will treat it with care and will not use it beyond the purpose of your message. Please do not include sensitive data in ordinary enquiries.

03How Information Is Collected

Information reaches us in three straightforward ways, and we describe each of them so that you always know the path your data takes.

The first path is direct provision. When you fill in the contact form on this site, send an email to notify@grayneagainst.autos, call the studio number, or reply to a message, you choose the information you provide. This is the data you give to us directly and freely.

The second path is automated technical collection. When you open a page on this website, the web server and any analytics services generate records that include your IP address, the address of the page you requested, the referring address if one exists, the browser you are using, and the time of your visit. This information is used to keep the website secure, to measure which content is helpful, and to diagnose faults. It is not used to build a profile of you as an individual.

The third path is correspondence. When you write to us with context about a project or a request, the surrounding text and any files that you attach become part of our conversation record. We retain these records so that we can continue to help you across multiple messages without asking you to repeat yourself.

04Legal Bases for Processing

We only process personal data where we have a lawful basis to do so, and we are transparent about which basis applies. The primary bases are set out here.

• Consent, where you have clearly agreed that we may use your data for a stated purpose, such as sending a newsletter that you requested.
• Contract, where processing is necessary to prepare a quotation, to deliver a service you commissioned, or to perform obligations under an agreement.
• Legitimate interest, where processing supports the secure and lawful operation of the studio, such as fraud detection, security monitoring, and responding to enquiries. We balance our legitimate interest against your rights and freedoms, and we do not process more than is needed.
• Legal obligation, where we must retain or disclose data to comply with tax, accounting, consumer protection, or other legal requirements.

Where we rely on consent, you may withdraw that consent at any time by contacting us. Withdrawal does not affect the lawfulness of processing that happened before withdrawal.

05Use of Information

We use personal data for purposes that follow directly from the reason it was collected. We summarise those purposes so that there is no hidden agenda.

• To respond to your enquiries and to follow up on requested services.
• To prepare quotations, proposals, designs, and delivery plans.
• To perform and administer any contract between you and the studio.
• To provide support after delivery, including tuning and maintenance rounds.
• To send occasional service or project updates only where you have asked for them.
• To operate the website securely, reliably, and in good technical repair.
• To meet legal, accounting, and regulatory reporting obligations.

We do not sell your personal data, and we have never rented marketing lists. We do not use your data for advertising purposes, and there are no advertising trackers on this website. Your data exists to serve the conversation and the work that you bring to us, and nothing more.

06Cookies and Similar Technology

This website is intentionally light on tracking. We may use a small number of cookies or equivalent local storage entries to remember a choice you have made, such as dismissing a notice, or to keep the mobile navigation in the state you prefer. Any such cookie is short lived and limited in scope.

We do not use third party advertising cookies and we do not run behavioural advertising networks. Any analytics that we operate use aggregate and anonymised counts rather than profiles tied to your identity. You may disable cookies in your browser at any time without losing access to the core content of this site. Because the site is mostly static and does not depend on login sessions, disabling cookies has little practical effect on the reading experience.

07Data Sharing and Disclosure

We do not share your personal data with any party for their own marketing purposes. Disclosure happens rarely, and always for a lawful, concrete reason. The circumstances in which we may share data are set out below.

• Service providers who help us operate, such as web hosting providers and email delivery services. These providers act on our instructions and are bound to protect your data.
• Professional advisers such as accountants and legal counsel, where needed to operate the business or to meet a legal duty.
• Payment processors, only where you commission a paid service and a payment is necessary to complete the transaction.
• Public authorities, where we are under a clear legal obligation to disclose, such as a court order or a lawful request from a regulator.

When we share data with a service provider, we share only the minimum necessary for that provider to perform the task. We review these providers periodically to confirm that they maintain appropriate security and do not use the data beyond our instructions.

08International Transfers

GrayneAgainst and Afeaki LLC are based in the United States of America. If you contact us from outside the United States, your data may be transferred to, and processed in, the United States. The laws of the country in which this studio is established may offer a different standard of protection from the laws of your own country.

When such a transfer happens, we rely on appropriate safeguards and on contractual commitments that protect your data. Where applicable law recognises such mechanisms, we will ensure that transfers are carried out under a recognised legal basis. By sending an enquiry to a mailbox operated in the United States, you understand that cross border processing may occur.

09Data Retention

We hold personal data only for as long as it is genuinely needed, and then we delete or anonymise it. The retention periods are shaped by the purpose of the data and by legal obligations.

Enquiry correspondence is retained for the period useful to follow up a project, and no longer than is needed to resolve a matter. If a project proceeds to contract, records of that project are kept for the life of the service relationship and for a reasonable period afterwards to support warranty, tax, and accounting needs. Accounting records are kept for the length of time required by financial regulation. Technical server logs are rotated on a short cycle and stored in aggregate where possible.

At the end of a retention period, data is either permanently deleted, anonymised so that it can no longer identify you, or archived in a form that meets a continuing legal requirement. The word anonymised here means that the data can no longer be connected to you as a person.

10Security Measures

We protect your personal data with controls that are proportionate to the sensitivity of the data and the risk of harm. Access to enquiry mailboxes and project records is limited to members of the studio who need that access to do their work. Passwords are required to be strong, and where two step verification is available, we use it.

Transmission of the contact form and standard mail is protected by secure transport where supported. Systems are kept patched, backups are taken on a schedule and tested, and we apply least privilege so that no single account can reach more data than it needs. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security. We will nevertheless act quickly and transparently in the unlikely event that a breach or suspected breach is brought to our attention.

11Your Privacy Rights

Depending on where you live and on the applicable law, you may have a set of rights over your personal data. We honour these rights to the extent the law provides them. The rights that may apply to you include the following.

• The right to access the personal data we hold about you.
• The right to ask that inaccurate data be corrected.
• The right to ask that personal data be erased where no lawful basis requires us to keep it.
• The right to ask that processing be restricted in certain circumstances.
• The right to object to processing that relies on legitimate interest grounds.
• The right to data portability in a structured, machine readable format, where applicable.
• The right to withdraw consent at any time where processing relies on consent.
• The right to lodge a complaint with a supervisory authority in your country.

To exercise any of these rights, please write to notify@grayneagainst.autos with your request and enough detail for us to verify who you are. We will respond within the period required by law. In limited cases we may need to confirm your identity before acting, to protect your data from being released to someone who is not you.

12Children and Minors

This website and its services are directed to adults and to businesses, and they are not designed for children. We do not knowingly collect personal data from children under the minimum age set by applicable law, which in many jurisdictions is thirteen or sixteen. If you are a parent or guardian and you believe that a child has provided personal data to us, please contact us and we will delete that data promptly.

We do not offer features that are intended to attract children, and we do not run games, prize draws, or social features aimed at young users. If we become aware that we hold personal data belonging to a child below the relevant age without appropriate consent, we will remove it as soon as is reasonably possible.

13Third Party Services

The GrayneAgainst website integrates with a small number of external services to function properly. The most relevant example is the way we ask the contact form to connect to an email client so that your message reaches notify@grayneagainst.autos. Those services receive only the information required to complete the action you choose.

Where the site links outward to documentation, standards bodies, or supplier resources, those destinations have their own policies. A link is offered for your convenience and does not imply that we control or endorse the separate service. We encourage you to review the privacy arrangements of any external site before you provide data there.

14Automated Decision Making

We do not use your personal data for automated decision making that has legal or similarly significant effects on you. This means we do not run algorithms that automatically approve or reject credit, employment, tenancy, or comparable outcomes based on your personal data. Serving this website is a human scale operation, and the decisions that matter are taken by a person who can explain them to you.

If, in the future, we ever introduced any form of processing that involves meaningful automated decisions, we would update this policy and would provide you with an opportunity to obtain human review of any such decision, in line with applicable law.

15Changes to This Policy

The web and legal landscape changes, and so this policy may be revised from time to time. We will post any new version on this page, and the effective date at the top of the document will be updated to show when the change was made. Where a change is material, we will make a reasonable effort to draw attention to it, for example by posting a notice on the homepage or by sending an email to active clients whose data we hold.

Your continued use of the website after a revised policy is posted indicates that you accept the revised policy, to the extent permitted by law. If you do not accept a change, you may stop using the site and may ask us to delete your data where the law allows. We encourage you to review this page occasionally so that you remain informed about how the studio handles personal data.

16Contact and Data Controller

The data controller for the personal data described in this policy is Afeaki LLC, the company behind GrayneAgainst. The registered address is 219 Walton Dr, North Salt Lake - 84054-6098, United States (US). If you have a question, a request, or a concern about this policy or about how your data is handled, please reach us through any of the channels below.

Email — notify@grayneagainst.autos. Telephone — +66958679295. Postal mail — Afeaki LLC, c/o GrayneAgainst, 219 Walton Dr, North Salt Lake - 84054-6098, United States (US). We aim to acknowledge a genuine request within two working days and to provide a full response within the period required by applicable law. Thank you for reading this policy, and for trusting us with your enquiry.