Privacy policy

The short version: this website sets no cookies, runs no analytics, and has no forms. Nothing about your visit is collected by us. The only personal data the office holds is what you send it directly, by email.

01Who is responsible

vissuale., an independent design practice operated by Alejandro Trejo, New York, United States, is the data controller for the information described here. Contact: alejandro@vissuale.com.

02What this site does not do

vissuale.com is a static site. It is worth stating plainly what is absent, because most sites cannot say it:

• No cookies. The site sets none — there is no consent banner because there is nothing to consent to.
• No analytics. No Google Analytics, no pixels, no tag managers, no heatmaps, no session recording.
• No third-party scripts, fonts, embeds or hotlinked images. Everything — including photography — is served from this domain, so no other company sees your visit. Typography uses fonts already on your device.
• No forms. Contact is a plain mailto: link that opens your own email client.
• No advertising, profiling or automated decision-making, and nothing is sold or shared with data brokers.

03What is collected

Server logs. The site is hosted by Netlify, which automatically records standard request data — IP address, timestamp, page requested, referrer and user-agent — to serve the site and protect it from abuse. These logs are generated by the host, retained for a limited period under its own policies, and are not used by the office to build any profile of you.

Email correspondence. If you email the office, we receive whatever you put in that message — typically your name, email address, company and a description of your project — and the message is stored in our mailbox.

Client and engagement records. If you commission work, the office holds what is needed to deliver and account for it: contact details, billing details, correspondence, briefs, and any materials you supply.

04Why, and on what legal basis

• To reply to your enquiry — steps taken at your request prior to a contract.
• To deliver a commissioned engagement — performance of a contract.
• To invoice, and keep tax and accounting records — legal obligation.
• To keep the site available and secure — legitimate interests.

Where UK/EU GDPR applies, those are the bases relied upon. The office does not rely on consent for any of the above, because none of it involves tracking you.

05Who else touches the data

The office keeps its stack deliberately small. Data may be processed by:

• Netlify — website hosting and server logs.
• Our email provider — receiving and storing correspondence.
• Payment and accounting providers — processing invoices and keeping financial records. Card details are handled by the payment provider; the office never sees or stores them.

These providers act on our instructions. Personal data is never sold, rented, or shared for advertising. It may be disclosed if legally required, or to enforce or defend legal claims.

06International transfers

The office is based in the United States and its providers may process data there. If you contact us from outside the US, your information will be transferred and stored there, protected by the providers' standard contractual clauses or equivalent safeguards where required.

07How long it is kept

• Enquiries that do not become projects — up to 24 months, then deleted.
• Client records — for the engagement and up to 7 years afterwards, to satisfy tax and accounting requirements.
• Server logs — retained by the host for a short period under its own retention schedule.

08Your rights

Depending on where you live, you may have the right to request access to the personal data the office holds about you, to have it corrected or deleted, to restrict or object to its processing, to receive it in a portable format, and to withdraw consent where consent was the basis.

Under the UK/EU GDPR you may also complain to your local supervisory authority. Under California law (CCPA/CPRA) you have the right to know, delete, and correct, and the right not to be discriminated against for exercising those rights — note that the office does not sell or share personal information as those terms are defined.

To exercise any of these, email alejandro@vissuale.com. Requests are answered within 30 days. The office may need to verify your identity before acting.

09Security

The site is served over HTTPS. Accounts are protected with strong, unique credentials and multi-factor authentication where available, and access to client material is limited to those who need it. No system is perfectly secure, and no absolute guarantee is offered.

10Links away from here

This site links to Instagram, and portfolio entries may reference other sites. Once you follow a link, that site's own privacy policy applies — the office is not responsible for their practices.

11Children

The office's services are intended for businesses and adults. It does not knowingly collect personal data from anyone under 16. If you believe a child has provided data, email us and it will be deleted.

12Changes

If this policy changes, the revised version is published here with a new date below. Material changes affecting existing clients will be communicated by email.

13Contact

Questions, requests, or complaints: alejandro@vissuale.com.