1. Who we are
This website belongs to RightStep Group [PENDIENTE: full legal name], a company based in Texas that, among its services, designs and builds landing pages for businesses in the United States.
For anything related to this policy, write to us at [email protected].
2. What we collect
When you use the contact form, we receive what you type or choose:
- your name, your email address and, if you give it, the name of your business;
- your answers to the form questions: what you want to build, the type of business and the languages of the site;
- the optional message you write, the language of the page you used, and the fact that you ticked the box accepting these terms and this policy;
- if you fill it in, who referred you (a code or a name), and, if you arrived through a referral link, the referral code saved in your browser.
If you apply to our referral program, we receive what you type in that form: your name, your email address, your phone number if you give it, the kind of referrer you are and how you plan to share your link. If you join, we ask for a tax form (W-9 or W-8BEN) and payment details outside this website.
The first time you open this site through a referral link (an address that ends in /r/ followed by a code), we record only the code, the date and the language of the page. We do not record the IP address or your location, and later visits with the same code are not recorded.
If you write to us directly by email, we receive your message, your address and whatever you include in it.
When you visit any page, our hosting provider automatically processes basic technical data so the page can be delivered and protected: your IP address, browser and device type, the page requested, and the date and time. We do not use it to identify you.
We do not ask for payment details, government ID numbers, health data or any other sensitive information through this website. Please do not send it in the form.
3. How we use it
We use the information you send us to:
- reply to your inquiry and prepare a proposal or quote if you ask for one;
- keep a record of our conversation in case you become a client;
- know who referred you, if someone did, so we can credit and pay them;
- keep the website secure and working, and meet our legal obligations.
We do not add you to a newsletter, we do not send you advertising you did not ask for, and we do not use your information to build profiles about you.
4. Legal basis
Where the law of your place of residence requires a legal basis for processing, we rely on your consent (the box you tick before sending the form), on the steps you ask us to take before a possible contract, and on our legitimate interest in keeping the website secure. You can withdraw your consent at any time by writing to us; this does not affect what was done before.
5. Cookies and tracking
This website does not set cookies of its own and does not use analytics, advertising pixels or any other tracking tools. Your browser may keep its usual temporary copy of the page files so they load faster.
The only thing the site saves in your browser is a referral code, and only if you arrive through a referral link. It keeps the code and the date in your browser's local storage for 90 days so that, if you contact us, we can credit whoever referred you. It holds nothing else about you. Apart from the first visit through the link, recorded as described in the section on what we collect, it only reaches us if you send the contact form, and you can delete it at any time by clearing this site's data in your browser.
The typeface on this site is loaded from Google Fonts. To deliver it, your browser connects to Google servers, which receive your IP address and browser information. Google processes that data under its own privacy policy (policies.google.com/privacy).
If the page shows Google reviews, your browser loads the reviewers' profile photos from Google servers, which receive your IP address and browser information in the same way. The reviews come from Google Maps and we do not store them.
The site reads your device setting for reduced motion to decide whether to play animations. That setting stays on your device and is not sent to us.
6. Who we share it with
We do not sell your personal information and we do not share it for cross-context behavioral advertising. We only share it with the providers that help us run this website and answer you, and only for that purpose:
- Web3Forms, which delivers the contact form to our inbox and receives what you send in it, along with your IP address, when you submit it. When the form is not connected to it, sending the form opens your own email program and the message travels through your email provider instead.
- Our email provider, which hosts the inbox where your messages arrive [PENDIENTE: name of the email provider].
- Vercel, which hosts the website and processes the technical data described above.
- Google, which serves the typeface and, when the page shows Google reviews, the reviewers' photos, as described in the previous section.
- Railway (Railway Corp.), which hosts the Directus database we operate in the United States, where we record the details you send in the contact form together with the referral code, if there is one, the first visits through referral links described above, and the details of the people who join our referral program. Railway provides the hosting; we manage the data.
- Resend, Inc., which sends the automated emails of our referral program, such as the welcome message with the referral link and the notice that a referral became a client, and our internal notices about new inquiries.
If someone referred you and you become a client, we tell that person only that a referral of theirs became a client, so we can pay them. We do not tell them the content of your message or your answers to the form.
We may also disclose information when the law requires it, to protect our rights or the safety of others, or as part of a sale or reorganization of the business, in which case this policy would continue to apply to it.
7. How long we keep it
We keep inquiries for as long as we need them to answer you and follow up, and for up to 24 months after our last contact if you do not become a client [PENDIENTE: confirm the period]. If you become a client, we keep what is needed for the duration of the relationship and for the time required by tax and accounting rules.
Technical server data is kept by our hosting provider for a short period under its own retention rules.
The referral code saved in your browser expires after 90 days.
You can ask us to delete your information sooner; see the section on your rights.
8. Security
The website is served over an encrypted connection (HTTPS) and only the people who need to answer your inquiry have access to it. We keep reasonable procedures to protect what you send us, and we delete or make unreadable what we no longer need to keep. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
If a security breach affects your personal information, we will notify you without unreasonable delay and within the time the law requires. Under Texas law, for the sensitive personal information it covers, that is no later than 60 days after we determine the breach occurred, and we will also notify the Texas Attorney General when that law requires it.
9. Your rights
Wherever you live, you can ask us to tell you what information we have about you, to give you a copy, to correct it, to delete it, or to stop using it. Write to [email protected]. We may ask you to confirm your identity before acting on the request, and we will answer within 45 days. We will not treat you differently for exercising these rights. If we decline a request, you can appeal by writing to the same address, and we will answer in writing within 60 days.
Texas residents. We are based in Texas. The Texas Data Privacy and Security Act gives residents acting in a personal or household capacity rights over their personal data where that law applies to a business, and we honor the requests above whether or not it applies to us. We do not sell personal data, including sensitive data, and we do not process it for targeted advertising or profiling. You can also file a complaint with the Texas Attorney General at texasattorneygeneral.gov/consumer-protection/file-consumer-complaint.
California residents. Under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, you have the right to know what personal information we collect, use and disclose, the right to delete it, the right to correct it, and the right to opt out of its sale or sharing. We do not sell or share personal information, and we do not use or disclose sensitive personal information. In the last 12 months we have collected these categories, from you and from your device, for the purposes described above:
- identifiers: name, email address and IP address;
- commercial information: the type of project and business you tell us about;
- internet activity: the technical data processed when you visit a page.
You can use an authorized agent to make a request on your behalf; we may ask for proof that the agent is authorized. Residents of other states with similar privacy laws have the same rights where those laws apply.
10. Children
This website is meant for businesses and is not directed to anyone under 18. We do not knowingly collect information from minors, and it has no accounts, profiles or spaces where users post or interact. If you believe a minor has sent us information, write to us and we will delete it.
11. Visitors outside the United States
We are based in Texas, in the United States, and our providers process information in the United States. If you write to us from another country, your information will be transferred to and processed in the United States.
12. Changes to this policy
If we change how we handle information, we will update this page and the date at the top. If the change is significant, we will say so clearly on the website, and we will not apply it to information we already have without your consent.
13. Contact
Questions or requests about this policy: [email protected].