What happens to your information.

Information and purposes

When you visit, our hosting provider, Cloudflare, processes technical request information to deliver and protect the website. This can include your IP address, requested URL, browser information, and request time. Provider logging and retention settings have not yet been fully inventoried; we do not promise that visiting produces no records.

The website does not add advertising trackers or behavioral analytics. It has no client account, checkout, or intake form. Contact links open your email app; they do not submit a request through this site. The site does not change its behavior in response to a browser’s Do Not Track signal.

If you email us, we receive your email address, any name you provide, your message, and attachments you choose to send. We use correspondence to respond, assess proposed work, provide agreed services, and maintain business records. In an engagement, these records can include authorized contacts, approvals, deliverables, and billing information.

Send a minimal description first. Leave passwords, recovery codes, customer records, and confidential attachments out until we agree a suitable transfer method. We ask for only the information needed for the work.

Providers, recipients, and AI

Cloudflare hosts and protects the site. Google Workspace handles our business email; hello@inherent.design and the other public contact aliases reach the operator’s mailbox. These providers process information under their own service terms and applicable privacy arrangements. Their infrastructure may process information outside your location.

Information is used by the operator and authorized people or providers needed for the agreed work. We may also disclose information where required by law or necessary to address a legal claim. We do not sell personal information or share it for cross-context behavioral advertising.

Client information is not used for model training or unrelated reuse. Confidential or personal information may go to an external AI tool only with express authorization for that workflow and after checking the provider’s terms, settings, retention, and training controls. Sending an inquiry does not authorize that transfer.

For client materials, the engagement identifies approved systems, data categories, purposes, recipients, and any AI workflow before processing. Local AI also needs access controls and minimal data. See the MSA’s data and AI commitments.

Retention follows the record’s purpose

We have not configured a specific Google Workspace retention policy or established one fixed retention period for all business records. Correspondence does not automatically disappear 30 days after an inquiry or project.

We retain correspondence, agreements, approvals, invoices, and related records for administering the relationship, accounting, applicable legal obligations, and handling claims. We review retained records when their purpose ends. A deletion request may require us to distinguish information we can remove from records we still need for these purposes.

Working copies of client materials need a separate agreed schedule: what is held, where, for what purpose, and when it is returned or removed. That schedule also addresses email attachments, logs, version history, backups, ongoing service needs, and provider limits. We do not promise universal 30-day deletion or 90-day backup expiry.

Required records and legal holds are restricted exceptions to an agreed deletion schedule. We document their basis and access limits and review them when the requirement ends. Retained client data remains protected; retention does not permit unrelated reuse.

Questions, corrections, and deletion requests

Email hello@inherent.design to ask what information we hold about you, correct it, or request deletion. Describe the request without sending passwords or identity documents. We may need to confirm your authority through an appropriate method before releasing or changing records.

We assess requests under applicable law and explain any retention or access limitation. If you contact us on someone else’s behalf, we may need their authorization. You can avoid sending optional details and contact us before sharing sensitive information.

This notice’s date identifies its current revision. We post updates here when practices change. An update does not silently amend a signed agreement or authorize a new AI use; changes requiring consent are handled separately.