Privacy Policy

Who we are

Sunbird Labs LLC is a digital product studio registered in the State of Wyoming, United States. We are the data controller for information collected through this website. You can reach us at hello@sunbirdlabs.co for any question about this policy or your data.

What we collect

We collect only what you give us and a small amount of technical information needed to serve the site securely. We do not run advertising trackers, analytics profiling, or third-party marketing pixels.

When you submit the contact form, we receive your name and email address, which we use to reply to you. If you fill them in, we also receive your company or website, which helps us understand your business before responding.

The same form asks what you are building, your budget range, and the areas you are interested in. We use those to judge whether we are a good fit and to prepare a useful reply rather than a generic one. Every one of those fields is optional except your name, email, and a description of your project.

If you change the site language, we store your choice so the site opens in that language when you come back. This is the only thing we remember about you between visits.

Alongside a form submission we automatically receive the country your request came from and your browser's user agent string. We use both only to filter spam and keep the site secure, and we do not use them to identify you.

If you book a call, the booking details go to our scheduling provider and are handled under its own privacy policy rather than this one.

Cookies

This site sets one cookie. It is named lang, it stores nothing but your chosen language code (for example “en” or “tr”), it lasts twelve months, and it is first-party only.

It is strictly functional — it exists so the site remembers which language to show you. We set no advertising, analytics, or cross-site tracking cookies, which is why you are not asked to accept a cookie banner. You can delete the cookie at any time in your browser settings; the site will simply fall back to detecting your browser language.

The booking widget on our contact page is provided by a third-party scheduling service and may set its own cookies when you interact with it. That is governed by that provider's own privacy policy.

How we use your information

• To respond to your enquiry and discuss whether we are a good fit for your project.
• To prepare proposals, scopes, and estimates you have asked for.
• To send you correspondence directly related to an enquiry or engagement.
• To keep a record of business enquiries in our customer relationship system.
• To protect the site from spam and abuse.

We do not sell your personal information. We do not share it with advertisers. We do not use it to build behavioural profiles.

Legal bases for processing

If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases under the GDPR and UK GDPR:

• Legitimate interests — responding to a business enquiry you initiated, and keeping our site secure. You initiated contact; replying is what you would reasonably expect.
• Consent — where you have opted in to receive marketing email. You can withdraw consent at any time, and every marketing email carries an unsubscribe link.
• Performance of a contract — where we are preparing or delivering work for you.
• Legal obligation — where we must retain records for tax or accounting purposes.

Who we share it with

We use a small number of service providers to run the site and manage enquiries. Each processes your data on our instructions, and each is bound by its own data protection commitments.

Our website hosting and content delivery provider receives technical request data, including your IP address and country, because that is unavoidable in serving you the page.

Our database hosting provider stores everything you submit through the contact form, and our customer relationship platform receives your name, email, and the details of your enquiry so we can track and follow up on it.

Our email delivery and contact management provider receives your name, email, company, and enquiry details in order to send you a reply and notify us of a new enquiry. Our business email provider receives any correspondence you go on to exchange with us.

If you book a call, our scheduling provider receives the booking details you give it directly.

If you would like to know which specific companies we use in any of these categories, email hello@sunbirdlabs.co and we will tell you.

We may also disclose information where required by law, to enforce our agreements, or to protect our rights, property, or safety.

International transfers

We are based in the United States and our providers operate globally. If you contact us from outside the United States, your information will be transferred to and processed in the United States and other countries where our providers operate.

Where personal data is transferred out of the European Economic Area or the United Kingdom, we rely on our providers' Standard Contractual Clauses or equivalent safeguards.

How long we keep it

• Enquiries that do not lead to work: retained for up to twenty-four months, then deleted.
• Client records: retained for the duration of the engagement and for seven years afterwards, to meet tax and accounting obligations.
• Marketing contacts: retained until you unsubscribe or ask us to delete them.
• The language cookie: twelve months, or until you clear it.

Your rights

Depending on where you live, you may have some or all of the following rights over your personal information:

• Access — ask for a copy of what we hold about you.
• Correction — ask us to fix anything inaccurate.
• Deletion — ask us to erase your information, subject to records we must keep by law.
• Restriction and objection — ask us to limit or stop certain processing, including direct marketing.
• Portability — ask for your data in a machine-readable format.
• Withdraw consent — where processing is based on consent, withdraw it at any time.

To exercise any of these, email hello@sunbirdlabs.co. We will respond within thirty days. We will never charge you for making a request, and we will not treat you differently for exercising these rights.

If you are in the EEA or UK you also have the right to complain to your local data protection authority. If you are a California resident, the CCPA and CPRA give you rights of access, deletion, correction, and the right to opt out of the sale or sharing of personal information — we do not sell or share personal information as those terms are defined.

Security

The site is served over HTTPS. Contact form submissions are transmitted encrypted and stored in a database that is closed by default, reachable only by our server-side credentials. Access to enquiry data is limited to the people who need it to respond to you.

No system is perfectly secure, and we cannot guarantee absolute security. If a breach affects your personal data, we will notify you and the relevant regulator where the law requires it.

Children

This site is intended for businesses and is not directed at children under sixteen. We do not knowingly collect personal information from children. If you believe a child has provided us information, email us and we will delete it.

Changes to this policy

We may update this policy as our practices or the law change. The date at the top of this page shows when it was last revised. If we make a material change, we will make that clear on this page. This policy was last updated on 21 July 2026.

Contact us

Questions about this policy, or about the information we hold on you, go to hello@sunbirdlabs.co, or use the contact form on this site.