Who to contact
For privacy questions, requests or concerns, contact Chaplau at contact@chaplau.com.
If a project agreement names a specific delivery contact or data protection contact, use that contact for project-specific requests.
Information we may collect
We may collect contact details, organisation details, enquiry content, project communications, billing or procurement information, and technical information needed to operate the website and services.
If we work on systems for a client, the categories of data processed inside that work should be confirmed in the relevant proposal, statement of work, data processing terms or support agreement.
How we use information
We use personal information to respond to enquiries, assess project fit, prepare proposals, deliver services, provide support, manage accounts, maintain security and meet legal or administrative obligations.
We do not sell personal information. We do not use client project data to train public AI models unless a client has explicitly agreed to that use in writing.
Sharing and suppliers
We may share information with trusted suppliers that help us run the business, such as hosting, email, analytics, project management, payment, accounting and professional advisory providers.
Where a supplier processes personal information for us, we expect appropriate confidentiality, security and data processing commitments to be in place.
Retention
We keep personal information only for as long as it is needed for the purpose it was collected, including enquiry handling, service delivery, support, accounting, legal or dispute resolution needs.
Retention periods may differ by project, system and record type. Project-specific retention commitments should be documented in the relevant agreement where needed.
Your rights
Depending on where you are located, you may have rights to access, correct, delete, restrict or object to certain uses of your personal information, and to request a copy of information you provided.
To make a request, contact us at contact@chaplau.com. We may need to verify your identity before acting on a request.
Security
We use proportionate technical and organisational measures to protect personal information, including access control, managed secrets, secure configuration and careful handling of project data.
No online service can be guaranteed completely secure, but security risks should be identified, reduced and reviewed throughout delivery and operation.