Privacy Policy

This policy explains what personal data PeakStack — operated by Khoury Digital LLC (Wyoming, USA), the data controller — collects through the Site, why, and your rights. We keep data collection to the minimum needed to respond to you.

1. What we collect

• Contact form: what you enter in the Site's contact form — your contact details and what you tell us about your project — is sent to us so we can reply.
• How you found us: when you send the form, it also carries the campaign tags in the link you arrived by (for example utm_source), the page that referred you, and the page you first landed on, so we know which posts and ads bring enquiries.
• Direct email: if you email us, we receive your message and address via our email provider.
• Technical data: standard server/request information (e.g., IP address) processed transiently by our hosting provider for security and abuse-prevention.
• Aggregate analytics: we use privacy-friendly, cookieless analytics (Vercel Web Analytics) to understand overall traffic — e.g., page views and referring sources. It uses no cookies and does not identify or track you as an individual.

We use no advertising or third-party tracking cookies unless you allow them in the cookie banner (see section 9). Your light/dark theme preference and your cookie choice are kept in your own browser's local storage; they never reach our server and are not used to track you.

2. Why we use it (legal basis)

We use your data to respond to your inquiry, scope and provide our services, and keep the Site secure. Our legal bases are your consent (choosing to send us a message) and our legitimate interest in responding to business inquiries and protecting the Site.

3. Where it is stored & who processes it

The Site is hosted with our infrastructure provider in the United States; email you send us is processed by our email provider. PeakStack is a service of Khoury Digital LLC, a limited liability company registered in Wyoming, USA. Our team works remotely, so your data may also be processed in other countries where our personnel are located. For personal data originating in the EU/UK, we rely on appropriate safeguards such as the EU Standard Contractual Clauses (SCCs), your consent, or another lawful basis for any cross-border transfer. We do not sell your personal data.

4. How long we keep it

We retain messages you send only as long as needed to handle your inquiry and any resulting engagement, then delete or anonymize them. You can ask us to delete your data at any time (see "Your rights").

5. Security

We use reasonable technical and organizational measures — encryption in transit (HTTPS), access controls, and least-privilege practices — to protect your data. No method of transmission or storage is 100% secure.

6. Your rights

Depending on your location (including under the EU/UK GDPR, the CCPA, and other applicable data protection laws), you may have the right to access, correct, delete, or object to the processing of your personal data, and to withdraw consent. To exercise any right, email contact@peakstack.build and we will respond within a reasonable time.

7. Children

The Site is intended for businesses and is not directed to children; we do not knowingly collect data from anyone under 16.

8. Business contact data we collect from other sources

Separately from the Site, we sometimes contact businesses directly about our services. If you have heard from us that way, this section is the one that applies to you.

• What we hold: a work email address, and where available a name, job title, employer, and public business details such as a website, phone number, or company registration number.
• Where we got it: publicly available sources — your organisation's own website, public business listings and directories, public company registers, and business contact-data providers. We do not buy consumer data and we do not use data from social networks in breach of their terms.
• Why: to make a relevant, one-off business approach about services connected to your professional role.
• Legal basis: our legitimate interests in promoting our services to relevant businesses. We assess that interest against your rights before contacting you and keep a record of that assessment. We contact organisations, in a business capacity, about their business.
• How long: we keep it only while the approach is current, and delete it afterwards — except for the minimum needed to honour an objection (see below).

You can stop it at any time, and we would rather you told us than ignored us. Reply to any message from us asking us to stop, or email contact@peakstack.build. We will act on it promptly and across every channel, not just the one you replied to. You also have the rights set out in section 6, including the right to object and to ask for a copy of what we hold.

To make sure an objection is permanent, we keep your address on a suppression list — a minimal record whose only purpose is to prevent us contacting you again. Deleting it entirely is what would allow you to be contacted a second time. If you would prefer we erase it outright instead, tell us and we will.

9. Cookies and Meta

If you choose Allow in the cookie banner, we load Meta's pixel. It sets Meta's cookies (_fbp, and _fbc when you arrive from a Meta ad) and tells Meta which pages you viewed, so we can measure whether our ads work. If you then send the contact form, we also tell Meta about that enquiry from our server, identifying you only by a one-way hash of your email address. Meta processes this data under its own terms as well as ours.

If you choose No thanks, or make no choice, none of this happens. You can change your mind at any time with the Cookie settings link in the footer.

10. Changes

We may update this policy; the "Last updated" date reflects the latest version.

11. Contact

Privacy questions or requests: contact@peakstack.build.