Your enquiry.
Your information.

What we collect

When you submit our form, we collect your name, email address, message, the page you submitted it from, the submission time, and delivery status. Tracking parameters and URL fragments are removed. Please do not include passwords, payment details, medical information, or other sensitive information.

For email enquiries, enabled automation may examine new incoming messages and retain the sender, subject, relevant message text and message identifiers to identify enquiries and prevent duplicate replies. We do not download attachments or follow links automatically.

Why we use it

We use this information to understand your request, respond to you, discuss a possible project, prevent abuse, and keep a record of our correspondence. We do not add you to a marketing mailing list simply because you contact us.

Where GDPR applies, responding to a request about a possible engagement is generally processing necessary to take steps at your request before entering into a contract. Business correspondence, service security and abuse prevention may rely on legitimate interests, subject to your applicable rights.

Where information goes

Website enquiry records are held in Cloudflare D1 through OpenAI Sites hosting. Notifications and correspondence are processed by Microsoft 365 / Outlook. Authorised site administrators can access enquiry records; they are not published on the website.

When AI processing is enabled, relevant enquiry text is sent to the OpenAI API to assess whether a first response is appropriate and prepare it. We do not need to send your email address to the model. AI response storage is disabled in our API requests, but providers may retain security or abuse-monitoring records under their own policies. This is not a promise of zero provider retention.

Our cloud providers may process information outside your country. Processing locations and provider retention depend on their service configuration and terms; we do not guarantee EU-only storage.

AI-assisted first replies

When enabled, automation checks for new enquiries approximately every 30 minutes. It can acknowledge a request and ask about your business and current design needs. Automated first replies identify themselves as AI-assisted. They do not confirm pricing, availability, delivery dates or contractual terms. A person handles project decisions and further discussion.

We filter automated messages and newsletters and avoid repeated automatic replies in the same conversation. If a request is unclear or unsuitable for an automatic reply, it is left for human review. Do not rely on an automated reply as a project commitment.

How long we retain it

Enquiry records and generated replies in the website database are scheduled for deletion 90 days after collection. Cleanup runs during enquiry processing, so deletion may occur at the next successful run. Short-lived anti-abuse records use keyed hashes rather than raw IP addresses and are cleared after their expiry.

Email copies in Outlook are separate and are not automatically deleted by the website. We review correspondence according to its business purpose and any applicable recordkeeping obligations. Provider backups and technical logs may remain for their own retention periods.

Access and protection

The enquiry dashboard is restricted to an authorised administrator. Connections use HTTPS, and the Outlook connection token is encrypted before being stored. Hosting and Microsoft account access must also remain secure. No online system can guarantee absolute security.

Technical service providers may process connection information, including IP addresses, in their operational logs. The website uses short-lived hashed rate-limit records to help prevent abuse.

Your choices

Contact yuriy@wingsdesign.agency to request access, correction or deletion, or to ask for a human response instead of AI assistance. We may need to verify your identity. Depending on applicable law, you may also have rights to restriction, objection, portability and a complaint to a data protection authority. Some information may need to be retained to meet legal obligations.

We may update this policy when our processing changes. The date above identifies the current version.