Privacy Policy
This policy explains what information Laccino Digital collects when you use this website or contact us, how we use and protect it, and the choices and rights you have.
1. Who we are
Laccino Digital ("Laccino Digital", "we", "us", or "our") designs and builds websites, applications, automation and systems. This policy applies to this website and to enquiries you send us through it. It does not replace the specific data terms agreed in a signed project contract, which govern client project data.
2. Information we collect
We keep data collection to what is necessary. The information we handle falls into three groups:
- Information you give us. When you submit the contact form or email us, we receive the details you provide: typically your name, organisation, email address, the type of project, and your message.
- Information collected automatically. Like most websites, our hosting and analytics tools may record basic technical data such as your approximate location, device and browser type, referring page, and pages viewed. This helps us keep the site secure and understand how it is used.
- Conversations with Jhene, our assistant. What you type to Jhene, and anything you attach, is sent to OpenAI in the United States so a reply can be generated. OpenAI processes it on our behalf and does not use it to train their models. We also keep a record of the conversation, so we can answer follow-up questions, hand you to a person with the context already there, and see which questions come up often enough to answer better on the site. A record holds your messages, Jhene's replies, the page you were on and the time; if you are signed in to the client portal it is linked to your account. Do not send payment card details or passwords. We keep conversations for 12 months and then delete them, and you can ask us to delete yours sooner at hello@laccinodigital.com.
3. How we use your information
We use the information we collect to respond to your enquiry and prepare a scope or quote; to provide, maintain, secure, and improve this website; to communicate with you about a project you have started or asked about; and to meet our legal and accounting obligations. We do not sell your personal information, and we do not use it for advertising profiling.
4. Our legal basis
Where the law requires a legal basis for processing, we rely on your consent (for example, when you choose to contact us), on our legitimate interest in operating and securing our website and responding to enquiries, and on the performance of a contract where we are working with you.
5. How we share information
We share information only where necessary and with appropriate safeguards. This includes the providers that help us run the site and our work, who process data on our instructions. We may also disclose information where required by law or to protect our rights. We never sell your data to third parties.
The providers this website uses are:
- Netlify: website hosting and the form handlers behind our contact, callback, careers, review and newsletter forms.
- Supabase: client portal accounts and sign-in.
- Google and GitHub: only if you choose to sign in to the client portal with one of those accounts.
- OpenAI: generates Jhene's replies. Your messages to her, and anything you attach, are sent to OpenAI in the United States. They process it on our instructions and do not use it to train their models.
- Cloudflare: the check that confirms a form or a chat message comes from a person rather than a bot.
- Resend: delivery of the emails our forms send, including confirmations to you.
- Google Fonts: one typeface file, loaded from Google's servers when you open a page.
6. International transfers
The providers listed above store or process data outside Zambia, mainly in the United States and the European Union. Where information is transferred internationally, we take reasonable steps to ensure it remains protected to a standard consistent with this policy and applicable law, including the Data Protection Act No. 3 of 2021 of Zambia and, for visitors in the United Kingdom and the European Union, the UK GDPR and the EU GDPR.
7. How long we keep it
We keep personal information only as long as needed for the purpose it was collected: for example, to respond to and follow up on an enquiry, to deliver an active project, and to meet legal or accounting requirements, after which it is deleted or anonymised Conversations with Jhene are kept for 12 months and then deleted.
8. How we protect it
Security is part of how we work. We apply reasonable technical and organisational measures, such as encrypted connections, access controls, and reputable infrastructure, to protect information against loss, misuse, and unauthorised access. No method of transmission over the internet is completely secure, but we work to protect your data and to keep those safeguards current.
9. Your rights
Subject to the Data Protection Act No. 3 of 2021 of Zambia and other applicable law, you may request access to the personal information we hold about you, ask us to correct or update it, ask us to delete it, object to or restrict certain processing, and withdraw any consent you have given. To exercise any of these rights, contact us using the details below and we will respond within a reasonable time.
10. Children's privacy
This website is intended for businesses and adults. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.
11. Links to other sites
Our website may link to third-party sites we do not control. This policy does not apply to those sites, and we encourage you to read their own privacy policies.
12. Changes to this policy
We may update this policy from time to time. When we do, we will revise the "Last updated" date above. Significant changes will be made clear on this page.
13. Contact us
If you have questions about this policy or how we handle your information, email hello@laccinodigital.com.